Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/4925d209-f003-3bb9-b12d-10cc44b06d40.roa
File:                     4925d209-f003-3bb9-b12d-10cc44b06d40.roa (raw, json)
Hash identifier:          /dPPFFxpFvDZZLtrdmb3UWay8LBNplwvNOPZuuhe/9k=
Subject key identifier:   58:44:8E:27:9F:FD:AE:EA:E0:29:6D:1A:2B:20:C2:5C:53:02:DE:0B
Certificate issuer:       /CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2
Certificate serial:       010D0C9F432858491ED6E5D6C6D41D7B0521F700
Authority key identifier: AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/4925d209-f003-3bb9-b12d-10cc44b06d40.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     15278
IP address blocks:        74.117.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:e5:d6:c6:d4:1d:7b:05:21:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=44c63484-d3a8-4fc1-8598-4d23293fefba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:96:95:b8:7f:4b:2d:bf:d1:71:a2:9b:fe:08:
                    e9:3b:54:98:49:16:4f:2e:99:0d:b6:49:b7:88:b6:
                    71:57:e3:fb:4e:ba:50:f7:9c:62:f9:16:69:46:a7:
                    6f:7a:0d:63:1b:56:57:a6:04:8c:27:3b:cd:5b:2b:
                    d2:b0:71:ee:c3:56:7b:07:e2:27:d0:48:24:5f:83:
                    fc:18:d7:7e:5d:62:6d:e4:5d:20:93:cb:08:34:ad:
                    c3:07:cd:94:3f:96:f4:51:b6:3a:82:ee:40:32:49:
                    66:7f:53:ac:19:5d:42:e2:99:66:76:bf:fb:76:a7:
                    23:ae:c4:ad:72:c3:e2:b9:e0:69:d4:85:12:0f:1e:
                    2d:da:54:7b:2b:f4:f7:21:b0:2c:af:9c:e2:30:69:
                    e8:ce:90:db:d0:5a:93:cc:b0:88:03:fc:78:0e:73:
                    bf:88:ba:bd:08:2d:d4:5d:7b:8a:2e:08:89:c0:e3:
                    d4:cf:ac:96:f3:22:0e:bb:0e:d7:70:55:bc:7f:83:
                    4d:de:ae:92:90:09:21:d3:cc:fe:26:49:2d:51:71:
                    a6:6a:c8:5f:5e:5c:38:2d:55:b0:3a:52:5c:49:ff:
                    16:e8:0e:b3:3e:9b:c7:ed:51:21:79:47:ba:50:34:
                    72:8c:70:dc:04:c0:29:48:bb:9c:f1:43:5e:2b:3e:
                    01:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:44:8E:27:9F:FD:AE:EA:E0:29:6D:1A:2B:20:C2:5C:53:02:DE:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/4925d209-f003-3bb9-b12d-10cc44b06d40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl

            X509v3 Authority Key Identifier:
                keyid:AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:6a:17:70:98:43:fe:c0:46:44:00:3f:2a:75:0a:28:34:60:
         b8:11:f4:90:27:8e:be:84:2b:09:9a:76:6d:0c:e3:ec:54:d6:
         b3:7e:15:c5:22:0c:2c:e3:9a:6e:f2:09:af:51:b6:58:83:e5:
         de:ca:c7:5c:50:c4:ae:d3:72:a9:b8:18:72:34:87:48:6b:ae:
         5d:83:a8:68:9c:2b:0a:6f:2e:58:11:0e:8f:71:90:23:3e:91:
         e7:25:18:db:7a:80:d6:67:64:5f:7b:50:c7:22:67:8a:8e:a6:
         6c:1e:da:8f:e1:80:d1:8c:47:e8:eb:46:8e:ea:34:5e:41:a5:
         dc:88:f3:74:d2:23:5b:47:00:f0:a6:21:c2:f4:52:63:74:4d:
         4f:54:8d:4c:a0:d0:8c:15:ef:e9:85:d2:4a:a7:0a:9d:25:3f:
         75:ce:08:29:8c:60:a8:65:2f:7d:e8:c6:71:24:2a:2d:88:ce:
         38:8f:43:21:84:a3:8e:1f:cb:c9:e2:3c:56:6e:58:63:bc:27:
         9e:7e:3d:3c:e3:53:92:2a:76:39:d8:9f:72:96:48:9b:5f:c9:
         8c:b8:90:08:53:a0:46:04:42:26:b9:af:e8:c7:4c:59:0f:08:
         bd:cf:79:92:c5:54:89:e3:0b:9c:9f:ae:3f:b9:c4:2f:f7:cd:
         d0:47:59:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1uXWxtQdewUh9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQwZmYyMjEtZjBjNC00YzU0LTk2ZDktNWYzZTBmMTZi
OGUyMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk
NDRjNjM0ODQtZDNhOC00ZmMxLTg1OTgtNGQyMzI5M2ZlZmJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZaVuH9LLb/RcaKb/gjpO1SYSRZPLpkNtkm3
iLZxV+P7TrpQ95xi+RZpRqdveg1jG1ZXpgSMJzvNWyvSsHHuw1Z7B+In0EgkX4P8
GNd+XWJt5F0gk8sINK3DB82UP5b0UbY6gu5AMklmf1OsGV1C4plmdr/7dqcjrsSt
csPiueBp1IUSDx4t2lR7K/T3IbAsr5ziMGnozpDb0FqTzLCIA/x4DnO/iLq9CC3U
XXuKLgiJwOPUz6yW8yIOuw7XcFW8f4NN3q6SkAkh08z+JkktUXGmashfXlw4LVWw
OlJcSf8W6A6zPpvH7VEheUe6UDRyjHDcBMApSLuc8UNeKz4BEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFhEjief/a7q4CltGisgwlxTAt4LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBm
ZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNlMGYxNmI4ZTIvNDkyNWQyMDktZjAwMy0z
YmI5LWIxMmQtMTBjYzQ0YjA2ZDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGQwZmYyMjEtZjBjNC00YzU0LTk2
ZDktNWYzZTBmMTZiOGUyL2RkMGZmMjIxLWYwYzQtNGM1NC05NmQ5LTVmM2UwZjE2
YjhlMi5jcmwwHwYDVR0jBBgwFoAUr/lVUKXBkBjOWn14MlY8OgsCrd4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBmZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNl
MGYxNmI4ZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnU0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHtqF3CYQ/7ARkQAPyp1Cig0YLgR9JAnjr6EKwmadm0M4+xU1rN+FcUi
DCzjmm7yCa9RtliD5d7Kx1xQxK7Tcqm4GHI0h0hrrl2DqGicKwpvLlgRDo9xkCM+
keclGNt6gNZnZF97UMciZ4qOpmwe2o/hgNGMR+jrRo7qNF5BpdyI83TSI1tHAPCm
IcL0UmN0TU9UjUyg0IwV7+mF0kqnCp0lP3XOCCmMYKhlL33oxnEkKi2IzjiPQyGE
o44fy8niPFZuWGO8J55+PTzjU5IqdjnYn3KWSJtfyYy4kAhToEYEQia5r+jHTFkP
CL3PeZLFVInjC5yfrj+5xC/3zdBHWeo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:29 2025 by rpki-client