Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/9a46e47d-38b3-38f9-b8ae-789a7c69addd.roa
File:                     9a46e47d-38b3-38f9-b8ae-789a7c69addd.roa (raw, json)
Hash identifier:          w8JXrix8FDkF2LMKBWynQTSyE+eIMLGlqBI0RqDnIBQ=
Subject key identifier:   4E:15:76:5E:A2:39:6D:D7:BC:6F:D2:21:1C:8A:F7:0C:F4:A8:0A:6E
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F432858494E4DEEDBE79DB4D8CF863600
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/9a46e47d-38b3-38f9-b8ae-789a7c69addd.roa
Signing time:             Tue 25 Mar 2025 14:03:54 +0000
ROA not before:           Tue 25 Mar 2025 14:03:54 +0000
ROA not after:            Mon 23 Jun 2025 14:03:54 +0000
asID:                     834
IP address blocks:        74.81.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:4d:ee:db:e7:9d:b4:d8:cf:86:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Mar 25 14:03:54 2025 GMT
            Not After : Jun 23 14:03:54 2025 GMT
        Subject: CN=508a1cf7-981e-4885-bddb-73d0d0f1da5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:f4:c8:c5:9d:32:48:14:e9:ef:65:f4:0f:
                    6b:5c:54:e8:8c:b0:c6:ea:57:73:90:06:1b:4a:21:
                    c1:f4:6a:95:02:44:ae:c7:2f:76:cf:56:92:c2:8d:
                    41:8d:cf:1c:e6:7d:5d:cc:12:1f:d9:c4:d8:08:61:
                    a2:c3:0f:65:e9:fe:41:6d:03:ab:3a:6e:9d:63:ba:
                    c1:f1:51:f3:98:8e:6a:51:00:43:23:73:90:32:c2:
                    db:e4:3b:8c:05:25:5b:08:34:90:d5:50:85:fa:41:
                    f4:e7:8e:7e:d7:e5:80:9f:11:f7:3b:07:2e:7f:bd:
                    3d:81:39:50:b3:f8:7a:ed:d8:8f:57:3f:f1:a5:a5:
                    11:cc:59:99:72:fe:9f:31:29:76:9a:a0:0a:e0:80:
                    a6:aa:35:59:8f:37:4b:91:4e:b8:d0:3b:4f:4e:92:
                    2d:31:c2:d0:8a:bb:48:38:95:3e:7a:40:fc:a2:db:
                    79:da:1a:17:47:ca:4e:fe:d8:f9:d4:23:f2:2d:28:
                    b6:31:28:02:7e:19:62:0f:ad:29:ca:36:12:83:c2:
                    4e:d5:b3:06:cf:90:ff:f6:20:5a:d2:59:ae:3d:c0:
                    83:1f:b8:75:0a:a2:70:5e:d9:af:ee:c8:37:d4:fc:
                    11:4f:88:5e:b3:07:f7:b7:4a:39:7f:ff:db:d4:61:
                    3a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:15:76:5E:A2:39:6D:D7:BC:6F:D2:21:1C:8A:F7:0C:F4:A8:0A:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/9a46e47d-38b3-38f9-b8ae-789a7c69addd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.81.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:bd:94:47:a2:49:9d:f6:9e:c6:ee:a6:4e:be:13:ba:6c:ac:
         29:7e:af:f1:22:da:ab:ac:e3:6d:77:19:c5:e8:cb:80:4d:65:
         26:37:cc:82:0d:d7:a0:d5:9f:bf:16:87:43:61:e6:88:6f:2e:
         52:82:40:20:8b:1a:4a:46:29:b6:f7:c0:89:9e:71:d3:f5:bb:
         29:1e:37:9d:e6:b7:24:f5:f3:a6:02:6c:ba:f5:6c:93:9b:bb:
         40:06:10:94:99:6c:0d:2a:b4:85:5a:40:53:7e:22:09:89:5c:
         f4:c0:93:21:3d:ac:58:1b:e5:0d:a7:a5:cf:66:02:fc:3e:54:
         26:b5:97:bd:a9:59:b6:f0:45:3f:59:5d:05:6a:02:62:90:6b:
         a6:0c:49:d6:0a:e8:3b:f7:5e:8e:f4:c5:11:c6:a3:b6:e1:3d:
         b2:ff:51:be:e7:fb:60:34:30:7e:26:f0:ff:f0:e3:07:38:a5:
         34:68:6b:2c:c3:20:2f:42:a9:e7:d4:ea:26:3c:e5:57:63:5b:
         c4:df:21:06:52:85:8c:29:95:d3:7f:e7:a3:d2:ec:c6:6e:28:
         d5:32:4a:32:e9:05:cc:95:b9:3a:85:f1:7f:50:a7:60:69:f1:
         97:af:78:e8:b9:56:2a:f8:89:b8:14:4a:7c:c2:d9:07:01:67:
         ae:47:7f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:41 2025 by rpki-client