Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/30ddf081-bfb4-3224-82f0-817556f4eeb9.roa
File:                     30ddf081-bfb4-3224-82f0-817556f4eeb9.roa (raw, json)
Hash identifier:          Rntgn/p6vyAobqWr5NmUkR46+zKaDGk80Fe2WDc2FfE=
Subject key identifier:   B1:62:95:9C:32:90:E7:86:A3:F1:50:7C:E0:BA:6E:AD:B4:33:95:A5
Certificate issuer:       /CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
Certificate serial:       010D0C9F432858490E16BC2625F2E24F5BF4CA00
Authority key identifier: BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/30ddf081-bfb4-3224-82f0-817556f4eeb9.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     46208
IP address blocks:        74.221.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:bc:26:25:f2:e2:4f:5b:f4:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=536fc986-1c86-4f73-824e-6726f0729fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:ad:8c:f0:ba:d4:fc:1d:62:f7:b7:a6:d0:
                    32:4b:fb:31:dd:7f:29:2b:a9:5c:e8:e3:1a:93:a6:
                    29:de:68:d0:31:b2:04:71:51:05:c1:e3:e4:2e:45:
                    77:19:a9:c4:75:a9:e3:c0:9d:58:a8:42:5c:fa:79:
                    48:71:5d:0b:fe:29:bf:c8:bf:ca:40:34:7f:00:0b:
                    b0:b9:5c:e9:f3:9e:26:97:e9:aa:4f:f6:79:14:d3:
                    5f:b1:ea:f2:72:46:cb:2e:15:70:a3:36:38:61:0f:
                    64:bd:b0:e3:c0:cf:60:12:53:87:d4:8e:5b:64:4d:
                    18:a7:a0:9f:e9:27:aa:44:61:f4:af:f0:fb:c9:d3:
                    42:b8:6a:0c:33:b3:54:dd:5b:fe:1e:96:06:73:7d:
                    33:c6:cf:4c:79:49:28:88:15:ce:1b:7c:56:3c:2c:
                    10:e0:0a:fe:fe:fc:03:9b:56:80:9d:47:c0:81:a3:
                    1e:23:7e:80:70:c5:83:e9:3c:5e:58:9c:83:19:60:
                    3a:14:52:2b:bb:38:c0:1d:1f:b3:a8:de:28:1d:a4:
                    32:8d:f9:96:41:63:3f:be:b8:23:65:7d:88:00:8b:
                    1f:90:82:c8:1e:27:71:f3:00:ea:14:0c:14:48:6f:
                    5b:9a:c2:01:60:3b:a1:86:cb:8d:4f:c9:74:0d:86:
                    39:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:62:95:9C:32:90:E7:86:A3:F1:50:7C:E0:BA:6E:AD:B4:33:95:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/30ddf081-bfb4-3224-82f0-817556f4eeb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.crl

            X509v3 Authority Key Identifier:
                keyid:BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:c6:ff:b6:98:f9:44:5a:18:72:2c:de:2c:aa:71:1d:f4:e4:
         52:f4:68:3e:2c:d4:b4:75:b2:c9:71:d0:3a:09:52:f4:fe:85:
         bf:f9:f5:11:4d:d6:de:72:87:fc:45:5c:80:39:a7:d6:72:8d:
         c4:19:0d:77:7c:e2:57:f4:ff:95:ab:ed:7d:f1:30:f0:87:7c:
         5b:b6:43:82:c2:95:69:32:25:80:bd:60:da:4a:af:1a:ca:21:
         cb:66:22:4d:0d:09:2e:dc:13:49:79:c6:76:0f:8f:9b:e4:a4:
         92:c1:87:8e:96:ed:33:c3:2f:a1:78:c5:f3:90:b8:4c:55:dc:
         00:c7:f6:92:9c:11:3a:41:6b:db:19:75:dd:ed:a0:08:fe:12:
         a3:d5:3b:96:c2:a1:a2:e1:95:bd:7b:a1:d5:3e:c7:1b:cc:2c:
         b6:3e:77:d0:a6:7b:61:2d:78:6b:09:ad:fb:c2:a3:da:e6:07:
         e2:c0:08:79:4d:e7:d9:69:23:01:98:ca:23:a2:ef:1c:8e:7d:
         47:51:7d:9b:bb:5c:09:0c:8a:c9:de:4c:e0:69:19:59:8b:81:
         51:19:a3:41:e3:0f:7c:dd:6c:82:d4:45:61:19:9a:d4:a7:5b:
         45:0c:f5:ac:37:ef:f6:76:12:d0:9b:d3:58:09:94:4b:0d:01:
         71:79:90:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:09 2025 by rpki-client