Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3ea63cd8-c107-351b-8ced-4cdf20449c53.roa
File:                     3ea63cd8-c107-351b-8ced-4cdf20449c53.roa (raw, json)
Hash identifier:          CFpNyDR7p6VAgLr7EZr96EZtwXAH258rgnCkT+9hD0I=
Subject key identifier:   E3:E4:17:17:09:A9:DC:4C:DA:25:61:45:73:C9:CA:DD:E3:D2:25:22
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F432858487755D1CE8E2D37B7DE94AD00
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3ea63cd8-c107-351b-8ced-4cdf20449c53.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        74.112.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:d1:ce:8e:2d:37:b7:de:94:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=2878ff1f-7f07-47e0-8049-06d153568ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d8:c7:4b:3a:76:8e:2e:2b:f6:8a:8f:f7:26:
                    d9:47:b2:78:0b:4d:60:72:d0:b8:b3:8a:20:b4:21:
                    ff:73:73:e9:4f:b6:22:7a:d0:b8:4e:3a:13:43:b6:
                    a3:42:e0:4d:84:84:d8:c5:f3:00:c5:4b:0b:07:c1:
                    d0:b1:e9:df:aa:54:ae:aa:47:2c:eb:14:d9:d8:b1:
                    53:c0:d8:9f:c3:fa:86:91:95:51:15:dc:04:2d:c3:
                    d2:da:c1:66:70:8c:88:36:10:e7:d8:3e:e9:82:32:
                    47:41:35:26:98:b4:f5:4d:d4:75:e3:7a:6c:16:bd:
                    06:b9:5c:3d:37:7a:95:7b:9a:73:c5:77:b1:c5:5e:
                    0b:1d:fc:91:9c:d4:d2:be:51:05:0e:27:46:33:1a:
                    19:42:d3:52:15:b7:85:d7:9b:bb:f3:05:24:de:6b:
                    a8:85:bc:5b:13:df:6d:aa:d7:fa:2d:8f:22:cd:01:
                    3d:54:38:52:bc:68:3d:7a:bd:df:ce:be:b1:b0:ea:
                    ee:50:91:b6:5c:71:8f:95:8a:51:89:19:c0:2c:77:
                    6a:4d:fd:e4:14:c7:ea:df:70:18:ae:e2:28:c0:80:
                    38:d6:eb:dd:ac:c0:98:61:da:a5:6e:3e:6b:60:b6:
                    f3:9c:07:c6:17:51:7c:15:2e:f9:ac:bc:a3:93:ad:
                    0b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E4:17:17:09:A9:DC:4C:DA:25:61:45:73:C9:CA:DD:E3:D2:25:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3ea63cd8-c107-351b-8ced-4cdf20449c53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ac:6c:0a:a8:aa:10:95:e4:c9:56:fc:7f:88:50:23:2c:d6:
         32:69:6c:dd:c5:25:ba:b3:ec:ca:d4:41:07:12:39:13:92:90:
         3b:bf:a6:80:10:78:2b:9a:38:62:4b:37:10:65:ca:28:11:63:
         88:da:f1:bc:ad:aa:b3:a5:c8:d8:34:a5:1f:02:d6:48:45:6f:
         be:22:92:99:b7:7a:a9:26:42:c1:c6:b3:d4:58:03:9d:5f:ce:
         37:39:18:6f:4f:7c:e0:e4:bf:63:61:c5:0c:46:f3:15:f9:e8:
         33:45:4f:ca:7c:76:27:34:08:b6:bf:78:68:95:41:a7:f9:4c:
         f2:b5:ac:c0:de:04:83:c3:9f:13:b4:32:63:03:71:01:0b:0f:
         1b:07:52:b4:d2:17:a0:ac:27:7c:3f:0d:5e:d3:30:9f:e7:44:
         ee:9f:81:8a:1c:c3:89:4d:50:55:ea:7c:0f:63:05:6d:47:d6:
         26:f9:d2:cb:23:27:d5:1e:3b:5a:d2:d6:b7:38:06:2b:7f:74:
         9c:55:ee:88:22:d9:ad:33:b8:65:1c:b0:a9:3d:3e:11:ad:e0:
         77:d3:e9:99:43:c1:c6:58:33:85:2c:41:2a:53:25:4c:0b:01:
         78:7f:24:83:dc:9b:0d:7b:6d:66:77:47:60:35:75:ce:55:ae:
         10:0c:11:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:13 2025 by rpki-client