Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/b73f45e7-d0e8-367b-aff7-821c9f5f954f.roa
File:                     b73f45e7-d0e8-367b-aff7-821c9f5f954f.roa (raw, json)
Hash identifier:          H+XGXwApVsWb0GdgrZJNYUx9ZPK9H/JXJgv9vTq1m6k=
Subject key identifier:   9A:D7:4B:6E:A4:C8:38:4E:61:B4:F6:A3:E1:DD:A8:AD:59:96:FA:C1
Certificate issuer:       /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
Certificate serial:       010D0C9F432858491246B68CE2941A2667CDFB00
Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/b73f45e7-d0e8-367b-aff7-821c9f5f954f.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     4476
IP address blocks:        192.68.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:b6:8c:e2:94:1a:26:67:cd:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=7bf8abe3-67c6-4901-89e9-859e826190cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:44:c6:a6:16:3a:c5:09:54:d7:f0:08:f1:a5:
                    8b:1f:92:b9:db:23:74:76:a6:2f:f7:8b:5d:a3:b5:
                    90:21:16:9f:be:00:a6:6e:9f:e4:da:d7:aa:f3:79:
                    eb:2d:c9:4f:0e:f4:74:fb:bc:b1:55:56:64:87:c8:
                    a8:fe:1a:20:1e:bd:c5:02:ce:35:19:57:8c:9f:3c:
                    36:5e:57:16:eb:21:5e:fd:45:b9:fe:e7:71:dd:aa:
                    4e:60:e8:b7:2b:07:f8:74:7e:23:a2:2c:c0:e0:32:
                    2c:55:d6:91:07:2c:b4:dc:f8:17:78:33:d6:f8:de:
                    c9:79:01:64:62:45:c7:30:67:18:8f:cc:e9:d7:c8:
                    2c:18:dc:44:80:db:25:70:8a:e5:0c:15:72:39:95:
                    58:a3:27:bd:27:5e:c5:39:81:10:f9:c9:07:fc:6c:
                    dd:f4:77:06:20:b1:7d:28:b9:5f:44:6e:93:bc:84:
                    ad:ea:fb:24:73:d4:7b:c3:c5:78:44:bf:ea:63:69:
                    c7:b1:29:0f:05:f7:83:c0:b8:19:f1:2d:4a:69:77:
                    66:33:eb:d7:45:88:72:6b:e5:ad:ff:1e:a0:51:29:
                    2d:eb:7f:fb:f0:52:6b:37:c0:35:ce:9c:01:16:9b:
                    a5:f3:4a:69:e1:35:44:ff:e0:80:b3:87:00:36:12:
                    0e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D7:4B:6E:A4:C8:38:4E:61:B4:F6:A3:E1:DD:A8:AD:59:96:FA:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/b73f45e7-d0e8-367b-aff7-821c9f5f954f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl

            X509v3 Authority Key Identifier:
                keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c3:39:fa:9d:6c:c4:21:c9:b1:fd:51:22:94:f7:d9:89:40:
         63:95:57:41:be:e4:2f:49:56:44:16:51:dd:a3:1b:26:08:bf:
         2a:93:6a:d1:31:e7:ee:60:c9:84:8a:24:df:17:75:d4:ea:ed:
         ed:35:43:86:47:01:ba:8e:4d:77:85:7f:ae:bc:ed:47:32:1e:
         86:ce:14:c4:e7:f5:a4:d4:58:29:e4:a1:cf:5e:22:40:5a:20:
         29:f6:11:47:c6:50:ac:cc:81:04:84:12:a9:fe:0a:ac:89:74:
         9e:44:53:88:0e:42:55:67:a3:83:da:9d:55:3f:d2:09:e0:bf:
         ec:94:af:3f:66:ac:c4:98:14:a5:1b:04:3a:db:0b:a9:83:a7:
         e6:13:43:09:93:11:a8:d2:67:a5:9e:bb:f1:72:d1:0d:83:62:
         ec:10:8a:8b:52:3e:d2:27:0b:25:22:8c:0f:09:54:18:3a:f8:
         2f:b2:e5:a4:1e:17:ff:a7:b3:80:23:99:5c:e7:46:b0:8d:a8:
         19:75:74:c4:59:15:15:12:35:37:1c:1b:8f:78:58:b5:9e:90:
         39:17:39:25:a3:4b:7c:14:23:8a:74:11:e9:bf:bf:0f:c9:00:
         36:e3:a2:d2:00:09:7d:3e:27:87:db:35:d8:36:af:52:3d:4b:
         e0:e5:60:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:50:46 2025 by rpki-client