Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3c47f804-4c7c-3094-91fa-3f424c66366b.roa
File:                     3c47f804-4c7c-3094-91fa-3f424c66366b.roa (raw, json)
Hash identifier:          h7zev57hvc5bhKpGWahiW7CMJd6rXvNUcnQEVnFayNM=
Subject key identifier:   CF:0F:99:40:6D:84:AD:E4:F7:34:43:F1:FD:76:09:56:9F:2D:92:D2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848A99654230A1D2F0024D30B80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3c47f804-4c7c-3094-91fa-3f424c66366b.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     19905
IP address blocks:        204.74.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:54:23:0a:1d:2f:00:24:d3:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=8161db01-f9ec-4cb7-b98f-849cb620b267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9d:6c:e0:37:a7:cd:a5:4d:1a:34:6a:1c:ca:
                    b7:00:e4:93:4b:1c:64:f0:b5:1f:af:32:42:e1:89:
                    8e:e4:a7:7a:ec:fd:7f:17:e1:d5:76:fa:24:a2:34:
                    66:06:1d:a2:0d:be:c5:ea:aa:a9:ed:45:30:8e:14:
                    4b:2f:0a:47:d2:e1:79:e2:4d:9a:d7:f0:5f:c1:ea:
                    d8:0d:71:53:1e:09:c7:27:c8:c7:d0:55:a3:e3:d6:
                    63:b2:78:03:e6:a4:2c:0e:8e:cb:2e:1a:70:c3:16:
                    76:e9:75:15:fb:e4:f5:82:47:d9:da:50:21:a3:a6:
                    85:a4:e9:91:37:a6:0c:49:b3:e0:6f:ae:16:41:33:
                    9f:a1:50:db:a0:62:2a:3f:0b:f8:b5:7b:54:a3:5d:
                    1b:b3:36:c1:82:38:3d:7a:3a:e2:92:e2:fd:88:42:
                    6b:cb:f9:40:f9:75:ac:05:92:fd:03:de:86:ae:b2:
                    55:e1:2c:4f:2f:1b:9c:96:8c:0e:a2:4d:73:1e:0d:
                    e7:24:0b:8e:01:f8:38:f1:f8:4a:43:76:d5:87:61:
                    bc:b8:24:27:40:3e:88:fe:14:00:2e:34:90:e5:65:
                    2a:67:eb:30:66:d1:58:b1:6a:46:3e:03:a7:3c:49:
                    55:de:df:24:fd:4f:b6:9d:84:09:55:5b:d9:80:7b:
                    28:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0F:99:40:6D:84:AD:E4:F7:34:43:F1:FD:76:09:56:9F:2D:92:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3c47f804-4c7c-3094-91fa-3f424c66366b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:1e:2e:03:a7:be:95:09:5e:a6:51:c7:b6:cb:70:2d:11:82:
         7d:86:fd:c0:cc:09:14:f3:db:66:27:60:d4:6b:d7:88:dc:7e:
         d5:e1:a4:c0:7b:49:b1:22:ca:eb:f7:4c:8e:0c:c8:c6:51:74:
         f3:af:39:5f:57:53:48:4c:4c:ca:69:d4:95:a8:f4:55:34:41:
         f1:64:74:c4:02:09:6f:ef:1f:ef:94:94:89:e3:c6:1e:75:f6:
         06:33:f9:2c:da:85:bb:fd:a1:9a:a4:97:80:41:fa:b9:b3:99:
         89:e9:e4:4f:40:e4:06:7e:63:e9:f4:6e:d8:1b:4c:4a:0d:7a:
         06:d2:31:b9:fe:83:32:12:db:d8:34:a6:90:0a:7f:74:3d:c5:
         03:ab:bb:ee:35:17:4d:5e:4e:79:35:e8:3b:8a:ee:1a:87:69:
         d1:3b:84:f8:ce:4e:f7:65:2c:8a:d5:46:85:f3:0e:c8:f1:c0:
         11:33:30:3a:39:94:79:1e:47:81:70:91:2a:da:b7:94:9b:8b:
         16:3a:57:6e:d3:3b:e6:b4:2a:57:31:8a:60:ae:b0:28:ad:57:
         b7:23:59:ce:56:30:0a:e2:84:08:f6:54:29:fe:57:ee:b5:d4:
         d3:f8:a2:45:14:7e:98:fa:25:4c:96:c7:6e:cf:f1:eb:d0:7c:
         c3:47:3f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:50 2025 by rpki-client