Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/171df6ff-e8b3-3960-a913-2090f4245383.roa
File:                     171df6ff-e8b3-3960-a913-2090f4245383.roa (raw, json)
Hash identifier:          44HtDdp3Dox+ow471/3qL/+FRpAM9dgOPeyfQi+I2hg=
Subject key identifier:   54:A5:C7:0D:2D:70:F1:9F:4C:CE:97:E5:63:2C:23:85:F3:89:DD:6D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584937D940DA6B3B0960A3B2F7C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/171df6ff-e8b3-3960-a913-2090f4245383.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     6939
IP address blocks:        74.82.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:40:da:6b:3b:09:60:a3:b2:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=31159560-eba6-4613-85d8-b269a576bb1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:02:c6:19:de:79:36:74:ec:4b:aa:c6:c7:20:
                    75:8d:18:51:d5:92:dc:16:d2:08:c2:4b:f8:0c:6b:
                    81:b3:14:2e:1b:d7:a3:e1:de:a3:a4:9b:32:23:3d:
                    2a:49:60:55:ca:9b:56:ce:c7:9f:37:36:2d:d3:9c:
                    04:ea:47:97:98:84:7c:07:8b:f6:09:a7:7f:ef:11:
                    32:cc:33:12:85:9f:68:6c:b6:74:4c:06:bd:fd:4f:
                    fb:b8:2d:35:2e:cc:07:75:c8:e1:ab:f5:d8:d1:99:
                    01:a5:4e:df:1d:3e:84:1e:9e:c9:08:e2:90:c6:79:
                    84:16:62:f6:70:ac:41:c2:3e:a7:9c:df:f5:be:7d:
                    7d:58:64:76:f8:61:27:41:9f:d9:7b:90:3f:97:67:
                    97:b9:20:c5:9e:5c:a7:0e:18:d6:a9:2d:90:8b:6c:
                    8e:e7:7b:06:eb:79:1e:50:69:d7:28:28:11:6b:c5:
                    7d:10:6f:f4:c7:b4:ea:a7:f3:5f:c3:e3:ba:12:9b:
                    7f:eb:72:80:f2:aa:61:16:cd:db:02:44:cb:81:47:
                    08:7f:bf:66:50:f9:9e:ed:ef:15:1b:a0:f1:75:a9:
                    0f:f0:d3:2f:48:b6:79:b1:78:22:7b:ec:8f:b9:1e:
                    47:82:06:76:f6:34:d4:9c:e4:6d:19:f5:44:77:ac:
                    c0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A5:C7:0D:2D:70:F1:9F:4C:CE:97:E5:63:2C:23:85:F3:89:DD:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/171df6ff-e8b3-3960-a913-2090f4245383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.82.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:a1:98:06:76:48:e2:7e:e5:d8:8d:49:d3:29:50:cb:ac:24:
         86:9f:a5:06:f1:ce:05:03:55:3f:aa:7a:fe:ea:3f:45:2f:66:
         00:af:5b:c1:95:c8:9d:3a:6f:73:56:bb:56:00:02:d2:28:37:
         2e:94:25:64:88:e1:2e:36:9d:18:62:e0:85:8d:dd:76:25:14:
         7d:ec:a9:9b:b8:98:3e:ba:a2:6a:e2:5a:70:96:b2:35:41:d2:
         52:bf:72:59:e9:4d:85:0e:72:c5:80:58:28:6e:b1:85:a1:a2:
         7a:96:bf:95:a3:46:08:11:a4:48:52:6a:4e:2e:7f:74:29:a7:
         4d:6a:fb:89:ef:32:d6:33:f8:46:51:bc:05:fe:9e:c2:53:c0:
         87:81:56:63:c2:fe:36:80:5e:48:45:8e:b2:f1:ff:f5:5e:01:
         75:a6:2f:63:69:32:61:82:fc:79:25:be:b1:b3:1d:8a:8e:1d:
         51:76:61:3f:78:8f:03:e3:74:88:56:2f:1a:a5:f6:86:a9:d5:
         2f:56:57:02:b5:39:0d:74:89:9c:c6:d5:d5:68:6a:61:34:f2:
         3b:03:ba:3b:5a:bf:f4:f5:04:4d:4a:a4:9d:bd:ec:ac:74:c3:
         3a:b5:3b:af:23:dc:44:30:e1:2a:53:09:3f:f2:d1:36:fe:ec:
         91:52:96:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:56:44 2025 by rpki-client