Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7a10d492-831a-33c5-bc7c-3be49149899d.roa
File:                     7a10d492-831a-33c5-bc7c-3be49149899d.roa (raw, json)
Hash identifier:          mmo9jl+Thwm542GFyE5gFklOdfvybDUL5+MLJjNSUTk=
Subject key identifier:   93:37:CB:A2:F4:00:0D:B9:27:80:E8:5B:6D:91:9E:04:5C:2E:21:F3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1A00142C29A0E1AAEC400
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7a10d492-831a-33c5-bc7c-3be49149899d.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     33588
IP address blocks:        184.166.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:a0:01:42:c2:9a:0e:1a:ae:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=7d83f737-d551-4b3b-8482-e53a55675e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8e:29:3a:a6:20:0b:fc:ed:5c:6b:72:3e:16:
                    93:66:58:8a:1b:d4:10:5f:b9:22:84:24:18:f2:0a:
                    45:ad:cc:3c:4f:56:e1:f1:5c:45:c0:29:13:88:48:
                    9f:7d:2b:ac:9c:c1:d5:65:96:16:4d:00:1d:4c:a5:
                    fb:a9:72:20:73:d4:ad:8a:56:b5:fd:3e:44:d4:28:
                    46:de:c4:4c:b1:5c:c1:55:54:c0:91:cf:a1:aa:f2:
                    9d:9e:dd:b4:53:a5:3c:d4:0e:1b:eb:0c:5e:5d:6d:
                    ec:b2:d6:9f:e1:ce:0d:50:79:65:77:40:a0:1a:c9:
                    34:07:7c:7f:76:e9:f7:3a:3a:5f:6a:c5:77:09:cf:
                    e3:9a:62:bd:61:cb:a5:63:56:6c:d1:e8:5b:63:45:
                    d7:3d:89:7b:fd:13:d8:ae:5b:d2:9f:f3:6f:a5:53:
                    f1:7c:41:c0:88:79:77:b9:96:12:8c:4d:ed:60:9b:
                    e7:63:dc:55:a9:0d:93:2a:f9:3a:36:fd:e7:c0:1f:
                    ac:59:92:9c:e8:0e:c3:37:19:b9:a0:ff:86:57:1a:
                    69:f8:ef:b1:bb:f2:8f:66:82:72:2c:86:6f:a3:d1:
                    7c:2c:83:c1:4c:fc:4d:e9:c0:0d:45:04:60:53:92:
                    08:6d:a8:b8:00:85:85:08:b2:f0:46:10:5e:b3:17:
                    bc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:37:CB:A2:F4:00:0D:B9:27:80:E8:5B:6D:91:9E:04:5C:2E:21:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7a10d492-831a-33c5-bc7c-3be49149899d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.166.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d9:68:8b:25:c1:d5:11:fe:3a:59:69:34:b3:3a:94:85:8d:
         c6:45:e7:61:20:cf:18:dd:9b:2a:4e:6e:f6:d3:ba:f6:86:ad:
         fd:2b:1a:dc:e0:50:41:ce:ff:d0:bc:50:31:88:11:2b:6b:8d:
         8e:a8:6c:47:be:cf:12:9a:dc:46:ea:b0:5e:05:03:8e:af:47:
         99:f7:a0:e1:95:5b:b1:9b:ac:f6:61:d7:25:85:d1:de:06:dd:
         cf:00:a6:85:00:c9:8c:71:81:d4:7b:f9:92:cf:6c:cf:06:cb:
         b1:1a:4b:c5:af:1c:38:6a:66:dd:37:e4:63:e9:9f:b5:a5:24:
         7b:31:56:f6:08:a2:c7:81:57:d5:55:5f:f0:4c:4d:fc:33:cc:
         4f:27:09:e7:c0:bd:cd:f5:4c:89:b2:b7:b4:e5:50:75:c8:12:
         b4:87:f9:13:fa:84:0d:3e:5e:7f:6d:1d:4a:02:9f:9e:98:0c:
         a9:6f:61:85:c9:ab:3a:a3:8f:c6:7a:1d:94:2d:f3:9b:d2:c7:
         5d:3d:92:49:be:52:15:71:f1:88:0a:dd:f6:f8:f8:c7:3a:bb:
         e7:03:b6:8f:9d:91:a6:21:76:2d:3d:9b:26:c2:bd:8d:af:a6:
         03:9f:1f:c4:25:35:17:dd:cc:b3:5f:78:61:37:63:51:a7:3e:
         bd:c7:9c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:31 2025 by rpki-client