Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/195b0bab-7a91-3f7e-abea-db7942bdc197.roa
File:                     195b0bab-7a91-3f7e-abea-db7942bdc197.roa (raw, json)
Hash identifier:          NowhPxnIbFXRaMVeSuhi7mM2l2r2Bm6BU2wr8ZL2eJI=
Subject key identifier:   9D:4E:A1:07:B1:8F:46:2B:EC:41:A2:C5:25:A7:DC:DE:4A:F2:59:5E
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F432858487755E067C3CEB91B48AD6948
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/195b0bab-7a91-3f7e-abea-db7942bdc197.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     395649
IP address blocks:        74.113.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:e0:67:c3:ce:b9:1b:48:ad:69:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=a93de420-6fed-46e6-b026-d3aaf6ab5160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f8:75:01:40:a8:1c:27:11:65:8a:3d:87:08:
                    bf:7a:9e:36:1c:7c:3f:7f:5e:3c:a5:5f:24:07:53:
                    dc:9e:ed:f9:76:84:87:b1:cd:2e:d4:6e:c4:8f:cc:
                    32:89:61:df:e1:2f:33:aa:46:c4:e7:16:c2:f7:17:
                    a9:52:f8:fb:ca:54:c6:e7:3c:4a:90:99:29:a5:f0:
                    07:65:09:be:ef:ce:c8:b6:41:42:dd:f1:35:b1:51:
                    27:a5:ca:77:f0:ce:1b:e9:3f:67:91:e6:fe:6a:31:
                    48:93:ed:d8:68:9c:bc:01:07:13:ac:26:82:bf:ff:
                    60:0e:dd:e3:f3:96:32:74:71:6d:d3:e0:4a:77:81:
                    f9:0c:42:85:1e:19:f6:d7:0a:c7:a2:1a:d5:dc:1e:
                    1d:93:88:3c:f1:bf:2d:95:6b:89:d0:74:c3:14:11:
                    ab:de:84:bb:b1:96:70:ed:d4:65:ac:39:50:6f:2c:
                    84:ff:1c:a8:c8:37:ba:36:6b:32:8f:3f:f3:d3:49:
                    52:33:1f:6f:74:14:49:33:8c:8e:b6:14:66:25:96:
                    49:08:1c:4e:14:b1:b8:96:26:f8:68:69:4d:9e:99:
                    0c:31:4c:38:31:f6:0d:1a:27:cc:2f:b5:27:dd:97:
                    07:50:e3:58:31:20:15:5e:fc:0c:55:0e:84:ed:51:
                    c5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4E:A1:07:B1:8F:46:2B:EC:41:A2:C5:25:A7:DC:DE:4A:F2:59:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/195b0bab-7a91-3f7e-abea-db7942bdc197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:af:eb:45:12:98:ea:fb:3a:db:0b:7b:0f:d7:a3:61:67:78:
         35:4a:58:c9:4d:f5:f3:8d:12:f0:d4:3b:dd:db:ac:a0:cc:98:
         cf:70:68:ec:1e:64:bd:6a:04:9f:c3:c4:61:fd:ad:76:cc:cb:
         92:29:72:3d:58:50:1a:e7:e8:f7:7c:1b:6d:81:58:13:fe:30:
         3c:5d:30:23:34:13:f1:f0:c8:f3:87:0a:b1:4a:cb:ee:c0:19:
         23:6a:56:58:14:6f:e4:90:76:ce:7a:12:df:5c:59:04:32:82:
         6f:51:5b:78:1e:4a:aa:9b:65:8d:75:b8:e4:15:06:b0:98:5e:
         da:bd:fc:60:68:c5:44:7d:21:65:5e:d6:7a:93:00:78:a7:e4:
         ce:8a:7f:f2:c7:40:91:85:d1:65:8d:52:81:e1:37:36:29:73:
         e7:d5:06:a6:33:84:8d:06:3e:b4:20:4d:22:2e:b4:57:14:c0:
         07:af:e4:f0:b4:19:5d:80:61:5e:65:12:dd:85:58:e1:11:7f:
         e7:ec:5c:cf:d6:6a:15:2e:6f:66:9e:d6:b5:49:a5:a0:16:57:
         aa:9c:b8:f7:6a:81:61:12:17:19:e7:75:f4:81:d1:ae:04:64:
         cd:0b:68:01:30:a5:58:1e:a1:67:b8:a9:96:62:cd:56:ef:58:
         3e:50:e1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:16:48 2025 by rpki-client