Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/f23f0547-2385-3d82-b362-a65cce74e39c.roa
File:                     f23f0547-2385-3d82-b362-a65cce74e39c.roa (raw, json)
Hash identifier:          NRPnm/aNfTqYcZSVhwD+VXZuw+Sa5rehY+6wuOUHxok=
Subject key identifier:   A7:07:1A:CE:47:51:98:BD:D0:2B:9B:AE:64:A0:3F:3A:D4:D0:8B:3B
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F432858495C2447A7A3245BFC04C424E0
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/f23f0547-2385-3d82-b362-a65cce74e39c.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     7029
IP address blocks:        74.80.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:47:a7:a3:24:5b:fc:04:c4:24:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=25a3c88d-f096-4a35-aae3-3a3d22b5b67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f2:81:be:97:34:5a:a0:07:ab:1d:3c:04:e2:
                    ae:31:25:46:f1:86:31:b5:7b:82:db:ce:f1:3f:dc:
                    d0:24:00:06:fb:3a:30:83:52:05:2e:75:b4:07:ff:
                    26:9a:d6:6b:96:c2:23:03:01:78:39:51:ea:93:65:
                    c5:ee:42:2d:ba:6c:bb:55:29:4c:48:86:1a:e4:a8:
                    cb:7b:f7:6a:cb:a0:29:36:57:13:8c:e8:6d:27:20:
                    f8:e5:19:16:9a:fb:aa:af:39:f7:f1:c2:46:de:23:
                    bb:39:d4:78:64:65:87:8f:f7:5c:56:be:59:53:c6:
                    34:06:4c:d5:26:2d:51:dc:0e:de:6e:4b:57:d4:77:
                    74:8a:28:b4:57:5b:08:64:c8:27:36:92:7e:fa:0c:
                    c1:23:f1:c0:3d:9e:62:ea:fc:b4:81:8e:b2:09:06:
                    a0:ac:99:54:58:63:b9:47:51:fe:cc:96:16:27:32:
                    91:4e:29:9b:96:aa:a3:e0:f0:ce:08:d7:d7:a8:28:
                    99:52:26:89:3a:9d:ef:ca:ed:37:00:7c:96:a3:1f:
                    f4:6e:ef:1e:bc:a6:31:4b:ba:7f:cf:22:21:55:4b:
                    56:eb:60:61:9b:1a:70:b5:9a:a2:33:6e:cd:1b:c4:
                    e2:19:20:74:b7:84:48:f3:00:fd:93:ce:ea:cf:a2:
                    cf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:07:1A:CE:47:51:98:BD:D0:2B:9B:AE:64:A0:3F:3A:D4:D0:8B:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/f23f0547-2385-3d82-b362-a65cce74e39c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f4:52:df:4f:ef:f2:a1:8f:e5:8c:4f:0b:80:df:95:6b:fb:
         f0:84:75:83:00:0b:45:65:22:4b:95:bf:dd:12:ff:56:dd:4b:
         86:74:9f:15:70:11:5b:20:71:80:bd:31:0a:1f:6c:92:2a:6b:
         83:0d:8e:c9:1e:37:1c:c9:92:27:c2:61:09:d2:de:49:6a:3f:
         75:cd:cb:14:f1:11:a2:ff:19:bb:ee:e8:3e:00:92:16:67:f4:
         ab:67:11:cf:1b:1d:b1:19:08:e9:bf:d2:17:da:41:3a:c7:e5:
         19:46:02:ce:97:b7:8d:01:ae:c9:e5:ff:1f:63:8f:9c:b7:d7:
         1b:d6:27:a1:50:0a:3d:67:47:f0:ee:e0:f5:e7:74:56:40:71:
         f6:66:af:7b:f4:3a:4a:92:ef:51:20:01:13:c8:c6:10:bb:e6:
         c5:49:95:4a:37:39:30:83:f5:45:1d:f7:44:4a:64:0b:31:78:
         db:d0:9c:d7:17:8f:bb:16:ab:6d:8a:16:ae:38:0e:63:08:18:
         b3:b3:44:2f:7b:3c:53:c9:38:45:f0:bd:79:ab:9a:15:98:38:
         70:0d:3f:ac:7a:e4:47:77:9e:bd:6f:67:13:d2:48:3a:6b:03:
         29:03:34:6d:33:1e:0e:41:ba:d3:df:ad:dd:6e:3b:f2:1f:72:
         a2:b1:14:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:21 2025 by rpki-client