Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/8196ce71-f355-3b28-8960-2849aa992ce8.roa
File:                     8196ce71-f355-3b28-8960-2849aa992ce8.roa (raw, json)
Hash identifier:          GXhGbfdiLySsSlnJy/57yYwe/xA0xOq/YWzYpXn/IqA=
Subject key identifier:   75:96:98:FA:C9:75:7F:AF:8B:B0:8E:83:DE:3D:EE:F6:EA:1D:B2:07
Certificate issuer:       /CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Certificate serial:       010D0C9F43285849AA4F735F0317698DDE8D0500
Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/8196ce71-f355-3b28-8960-2849aa992ce8.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     20278
IP address blocks:        74.122.198.0/24 maxlen: 24
                          173.243.112.0/24 maxlen: 24
                          173.243.119.0/24 maxlen: 24
                          192.208.184.0/24 maxlen: 24
                          216.107.144.0/24 maxlen: 24
                          216.107.150.0/24 maxlen: 24
                          216.107.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:73:5f:03:17:69:8d:de:8d:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=b94e4cd0-b54a-42ac-b6c2-8bcb74f8f50d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2b:ca:06:b4:2b:f7:da:2a:ae:14:f3:9c:97:
                    6f:96:92:89:65:73:6e:4a:87:a2:71:aa:b1:7d:05:
                    46:e0:c1:d2:87:96:3f:f7:31:3f:6b:2f:77:f7:23:
                    a1:6c:26:4c:7b:1f:55:14:ef:dc:f7:c2:84:75:49:
                    a4:4e:53:a3:da:37:fd:51:79:b6:af:8b:92:59:07:
                    50:31:81:db:dc:aa:6a:d0:79:01:bf:c2:35:23:29:
                    d3:bf:90:27:2a:08:4a:9a:74:6a:df:5e:d4:e7:74:
                    5c:11:23:ca:47:2e:72:aa:5e:34:94:90:94:96:ba:
                    dd:22:35:40:09:a1:82:b9:32:0f:96:09:71:ad:a2:
                    3d:61:af:dc:62:e2:43:d1:f2:17:18:67:92:f6:c2:
                    e6:6c:ec:c8:96:6c:98:40:81:92:13:3b:1f:18:f8:
                    f9:2b:d3:34:e7:65:ed:e9:97:29:6d:ce:d3:47:4b:
                    03:04:45:59:99:32:5a:34:d1:7c:b5:a5:8a:1c:0b:
                    f7:a3:f9:c4:e6:36:70:d1:39:0f:ab:7f:4d:12:75:
                    49:af:11:49:63:bd:72:d8:20:6a:c7:ee:5a:24:7e:
                    52:56:99:78:cf:55:0f:b4:ba:39:27:c8:eb:c0:f5:
                    ea:ab:cc:0f:27:e0:33:32:09:79:38:94:ca:36:a7:
                    42:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:96:98:FA:C9:75:7F:AF:8B:B0:8E:83:DE:3D:EE:F6:EA:1D:B2:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/8196ce71-f355-3b28-8960-2849aa992ce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.122.198.0/24
                  173.243.112.0/24
                  173.243.119.0/24
                  192.208.184.0/24
                  216.107.144.0/24
                  216.107.150.0/24
                  216.107.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:5a:b6:74:b4:75:21:6c:bb:bc:0a:c0:0d:08:39:9c:0f:fb:
         f7:cd:c6:aa:70:c1:71:3f:a6:41:20:4e:ca:12:5b:f8:41:57:
         82:39:94:b8:21:da:2f:c3:f1:c4:97:72:67:6d:15:3b:5c:8f:
         b1:45:c0:47:bc:13:e5:c8:11:5e:ec:84:ec:a6:29:6c:4c:d8:
         95:89:05:d0:00:ad:d0:b1:e9:0b:a3:f5:46:63:b1:12:3a:98:
         41:26:84:1d:57:cd:0f:43:b2:86:38:fe:dc:77:83:bc:87:9b:
         86:4d:7c:38:2f:d7:12:8b:46:d6:28:8f:9c:a6:9e:28:7b:de:
         aa:79:ff:ec:fc:69:ad:ce:ee:c9:85:ff:3e:4e:f1:49:52:5e:
         4c:57:11:ba:d5:fb:18:c1:93:f3:f5:f7:ce:aa:65:a7:a7:8a:
         0c:c7:9f:4b:39:c0:37:7e:13:73:16:97:08:ed:9b:e8:97:60:
         50:55:89:cd:d2:d7:3d:3d:2b:5b:fb:d3:65:56:24:0d:71:03:
         2f:50:aa:8f:1e:c3:13:d0:c0:fb:cc:ed:da:ca:b6:4d:ae:1c:
         70:63:c7:89:64:78:17:0d:01:54:06:57:a3:06:d5:b8:d2:ed:
         92:62:e9:8f:b3:3f:36:08:44:05:9c:e2:2f:f1:ac:33:7a:7b:
         1a:2d:db:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:38:11 2025 by rpki-client