Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/f91ff171-78e4-3670-b494-44f38288d589.roa
File:                     f91ff171-78e4-3670-b494-44f38288d589.roa (raw, json)
Hash identifier:          yh/XHvTy2UkL/p6fN6lFo2fxrz+DiiK8jtqDo+qaPBo=
Subject key identifier:   E6:13:80:ED:7F:63:7B:48:B1:6E:31:5A:1F:D1:B5:F5:F2:AE:05:E2
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F43285848960B57E2E11C927317E63380
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/f91ff171-78e4-3670-b494-44f38288d589.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     18526
IP address blocks:        74.113.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:57:e2:e1:1c:92:73:17:e6:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=63eb48a8-e0b2-457b-9abf-b37ea4f55ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5a:ed:5e:35:75:71:e9:8e:ec:7c:b3:8f:39:
                    50:e7:bc:9c:2d:3a:11:95:9e:13:2f:c2:cd:64:73:
                    a8:a7:bf:1a:c1:19:83:86:13:89:2b:97:e9:e5:80:
                    e5:66:8f:15:36:a3:e0:ce:1a:9a:ac:db:20:a1:3a:
                    39:67:49:3e:4e:f4:f1:04:32:a2:c5:5e:38:48:e8:
                    ff:d6:6f:d8:46:f1:5d:de:de:cd:a4:71:34:ad:6e:
                    1c:9e:ec:6c:28:05:34:7e:d6:87:63:d9:4a:02:cb:
                    b3:75:de:2c:16:62:44:33:89:69:56:16:29:86:f5:
                    c3:74:ea:f7:2a:d7:b3:30:ae:67:6e:e2:f6:75:ef:
                    88:b3:c8:6b:01:cc:64:4a:eb:d6:10:82:cf:00:88:
                    4e:92:7d:c6:9f:95:39:a3:6d:96:d0:2f:45:3e:fc:
                    f0:81:e6:9a:7a:f2:45:01:c6:9c:e2:59:4b:c3:86:
                    63:56:29:bb:04:fc:0b:97:df:17:8f:1a:37:c5:23:
                    62:4d:68:72:36:a9:d3:a5:1e:be:dd:29:82:3b:bc:
                    6e:43:c8:54:3a:99:6e:13:d0:b8:93:59:36:5c:74:
                    a5:83:e4:8e:a5:02:49:aa:6d:4e:45:5c:1a:b4:c9:
                    77:10:0e:55:13:69:5f:9a:e6:18:be:b9:15:67:cb:
                    35:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:13:80:ED:7F:63:7B:48:B1:6E:31:5A:1F:D1:B5:F5:F2:AE:05:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/f91ff171-78e4-3670-b494-44f38288d589.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a6:e8:29:67:c4:a0:1a:d8:ec:eb:8c:a1:88:79:62:65:3a:
         79:f7:5b:2c:43:7a:4b:8c:5a:5c:ec:67:eb:05:7c:52:29:fe:
         5c:30:4a:b5:2c:01:47:24:c4:84:f4:a1:ee:74:b4:19:73:2c:
         dd:20:20:ba:cc:75:f1:f7:00:12:ab:fb:df:1b:df:30:e0:d1:
         60:95:91:6e:f7:f1:cf:8e:2b:18:49:2d:97:4a:3e:9f:51:9a:
         cb:c8:13:87:ee:30:03:6d:f1:d6:73:5a:39:71:25:80:ea:86:
         4d:7a:77:1d:55:cd:20:3f:63:63:35:32:80:aa:a5:67:fa:52:
         22:9c:a0:15:e0:5d:92:1b:1d:22:21:94:46:b1:3d:a2:23:3b:
         eb:95:8d:b2:cf:c6:c6:08:87:37:a9:d7:6a:de:76:93:7a:0e:
         19:ae:f6:8e:eb:da:bc:d8:46:b8:9e:74:c2:4c:36:50:8d:d4:
         1f:4b:e9:37:67:2d:37:84:d5:2f:27:62:95:30:37:62:d4:d0:
         04:eb:44:00:c8:d8:c6:c7:7c:43:7c:0e:ca:f5:7e:7f:82:ba:
         ca:81:a9:8a:48:1c:01:67:27:f6:db:95:0d:7a:c1:80:a0:b6:
         de:c4:59:dd:87:57:7d:40:f1:1e:f8:40:b5:77:09:35:75:03:
         07:d9:85:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:19:15 2025 by rpki-client