Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4a6045af-f1df-3d71-a83c-d933493e83d3.roa
File:                     4a6045af-f1df-3d71-a83c-d933493e83d3.roa (raw, json)
Hash identifier:          jcmD1hIbOMwWyHUuj5Eidktlg0e4PT2c6HK4ybQvBkc=
Subject key identifier:   1B:85:19:25:E6:CD:B7:AB:4E:46:9B:87:8E:CC:6A:53:8D:F0:0A:32
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F432858487755D326C83F1A6A3A876200
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4a6045af-f1df-3d71-a83c-d933493e83d3.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        74.121.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:d3:26:c8:3f:1a:6a:3a:87:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=b2a2a063-2b1c-4ecd-9d24-44f464d233a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:58:dc:e5:5a:4d:f4:93:70:73:5c:35:2e:7f:
                    bf:32:d1:6c:02:c5:0e:38:58:40:9b:3b:70:e9:99:
                    d8:5d:14:7a:f6:99:88:e0:c3:d0:ad:41:29:38:fd:
                    63:89:5e:8f:62:29:35:41:72:cf:2b:ce:3d:48:c7:
                    f4:7c:72:cb:61:fa:e8:1d:1d:24:6a:6c:22:06:f9:
                    e6:e3:a4:3e:4f:ca:f9:a5:40:81:be:59:2c:80:82:
                    2c:3a:cf:15:84:a0:c0:71:b7:e0:db:5f:3c:81:14:
                    83:37:e9:2b:23:99:4b:d7:1b:b9:ed:e9:a7:5c:de:
                    f6:b5:ad:10:83:11:73:b6:24:5e:dc:2d:e0:b5:5c:
                    8c:5f:d1:a0:ab:c9:72:03:32:13:af:a6:42:6a:85:
                    0c:cb:a8:5c:1d:8a:88:70:8f:f7:ff:43:c1:d9:e8:
                    78:15:b9:1c:f5:e8:49:d7:e3:58:52:fe:f0:6a:b0:
                    8c:6e:38:bd:46:97:f0:ba:fe:d7:4b:46:4b:03:ab:
                    11:d3:d5:b1:fd:1e:a1:ec:91:00:f8:79:97:7a:18:
                    36:c0:cd:13:ab:81:e3:8c:7f:66:7b:fd:f6:6c:71:
                    8e:42:fd:da:10:f0:6d:62:ad:45:82:51:6c:6f:e8:
                    eb:26:bc:ba:86:71:b8:3e:98:ad:f9:31:bd:54:a6:
                    40:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:85:19:25:E6:CD:B7:AB:4E:46:9B:87:8E:CC:6A:53:8D:F0:0A:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4a6045af-f1df-3d71-a83c-d933493e83d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:e5:de:c3:be:8c:d8:ae:27:c5:3f:fa:46:e6:6b:f9:7d:8a:
         40:71:24:61:4f:00:b7:cb:f1:78:2d:22:d8:03:e5:10:f6:93:
         48:61:89:99:c5:ab:ea:fa:e0:05:10:26:1a:6c:3f:1a:d0:10:
         79:e0:2a:8d:fa:2b:00:d2:8b:51:80:c4:f3:07:2e:35:3f:37:
         39:67:44:65:26:fa:05:89:20:8f:96:12:11:7a:44:2d:13:ea:
         c8:42:a1:c1:5f:df:17:5f:f8:6a:4f:14:46:b4:6d:45:4f:87:
         15:93:fe:45:cf:c1:81:3e:aa:1b:98:e2:7c:d6:ba:e6:90:fb:
         25:f0:ac:3b:a2:f6:90:3c:f6:77:c5:48:09:6f:77:85:1a:fe:
         69:de:c2:b4:bf:99:bc:1b:a0:41:cf:58:6b:c4:71:14:41:a3:
         2d:6f:1a:93:7a:7c:2a:52:1e:0f:04:81:1d:30:1b:fe:05:02:
         c3:a5:96:95:94:81:b4:c6:22:eb:4a:1f:c3:09:0a:4b:0d:7b:
         c0:a7:01:da:21:6e:51:d6:46:42:cc:09:2f:f2:0a:c8:5d:af:
         0d:df:49:0d:5f:2c:05:2a:41:c6:c5:9a:20:62:e6:5e:fb:2c:
         27:af:54:39:2a:b2:33:98:51:2b:bb:d3:6d:47:72:76:89:e0:
         d8:df:6b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:04:22 2025 by rpki-client