Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/fa2b50ed-edd4-32f1-ab35-33ca0df9bca7.roa
File:                     fa2b50ed-edd4-32f1-ab35-33ca0df9bca7.roa (raw, json)
Hash identifier:          QvPIdtF+pSScaRjhEX32Ah+xFzZYnrHNUbRS45T6LLE=
Subject key identifier:   E9:D7:A6:C3:AB:0E:AB:94:6E:E6:E5:D4:3B:D9:3A:33:2F:50:F5:CC
Certificate issuer:       /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Certificate serial:       010D0C9F4328584A480AE8AC1E04C629EDA9F100
Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/fa2b50ed-edd4-32f1-ab35-33ca0df9bca7.roa
Signing time:             Mon 23 Jun 2025 01:00:49 +0000
ROA not before:           Mon 23 Jun 2025 01:00:49 +0000
ROA not after:            Sun 21 Sep 2025 01:00:49 +0000
asID:                     4900
IP address blocks:        74.51.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:0a:e8:ac:1e:04:c6:29:ed:a9:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
        Validity
            Not Before: Jun 23 01:00:49 2025 GMT
            Not After : Sep 21 01:00:49 2025 GMT
        Subject: CN=743cd7f2-2e49-428a-afa0-e188843ad39e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ed:43:2e:0e:49:93:fd:25:fe:7c:b7:38:65:
                    01:7b:fd:1e:b4:72:49:4d:ce:79:bc:44:e8:e3:79:
                    54:f0:db:82:54:b7:af:eb:8e:4a:30:f1:70:07:e8:
                    32:6f:5d:15:c9:51:4b:ad:a9:62:66:8e:b7:a1:b6:
                    12:46:40:4d:08:7e:6c:9f:eb:da:fc:5e:c6:20:0c:
                    29:dd:4f:d9:37:6d:35:f5:c6:41:25:e2:2e:43:15:
                    de:32:a1:48:a4:79:ab:4e:04:38:d8:41:ac:17:6c:
                    af:9e:ee:c1:8f:5d:92:0a:66:cd:7c:49:77:cf:e6:
                    24:8b:7a:81:1a:e6:1d:d2:cf:51:e4:23:7e:e0:f4:
                    1f:67:bf:47:98:29:35:b2:6b:5b:2f:a4:68:71:ad:
                    88:c9:c8:53:d8:3f:8a:c7:92:d0:8b:6c:0c:d2:93:
                    26:cc:ac:6b:da:fa:da:28:5c:81:8b:03:74:21:cc:
                    b0:ba:3e:0d:5f:de:cb:d7:90:c5:b6:8a:a1:a5:e7:
                    5b:fe:a2:20:30:ee:f6:a5:6e:0a:39:29:c5:96:0e:
                    4d:05:64:50:3f:a9:2a:71:2d:bf:1d:29:21:e1:1c:
                    65:8f:e8:b6:71:4f:d3:74:fd:02:d4:d7:81:af:84:
                    31:75:ed:50:94:26:fb:7f:37:ba:57:1f:b2:56:e1:
                    11:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D7:A6:C3:AB:0E:AB:94:6E:E6:E5:D4:3B:D9:3A:33:2F:50:F5:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/fa2b50ed-edd4-32f1-ab35-33ca0df9bca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl

            X509v3 Authority Key Identifier:
                keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.51.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:1b:bc:fa:bc:ef:76:63:d6:0a:46:2b:76:3f:8e:51:90:15:
         c8:4c:b8:4b:c4:91:65:6e:65:13:7a:ea:25:08:ec:e0:32:82:
         25:f0:b1:8b:8e:47:aa:df:85:a2:ad:2c:8b:cd:48:d7:55:27:
         96:69:b5:01:e8:6a:98:76:be:d9:0b:fa:73:be:30:99:3e:60:
         f9:58:eb:6c:77:20:2b:fb:e7:2e:dd:e4:6b:f1:66:49:c2:42:
         b1:68:d6:ab:dd:95:9c:95:2e:56:30:8f:5b:2e:d1:d5:50:00:
         e9:bf:20:91:cd:8c:41:b9:ee:39:d0:dd:b9:f1:92:c9:ae:65:
         d4:82:dc:39:2c:d5:81:aa:ec:0b:fa:c7:5d:8c:7b:1d:7f:5c:
         4f:72:98:8f:e8:69:e5:06:52:b2:a2:b0:3c:c3:50:a7:10:6c:
         4a:0e:3c:2d:7b:09:54:95:e1:10:79:8c:43:84:fa:a2:8a:48:
         73:82:9b:b7:a2:fd:a0:c9:a8:40:50:2a:81:84:14:32:af:b0:
         af:f9:e4:de:bc:dd:d0:43:87:c0:1a:2b:62:67:72:b4:09:7a:
         89:b9:17:f9:d8:d6:52:0a:cb:9c:62:60:51:2d:48:4d:ac:23:
         80:c5:c9:02:80:90:49:83:ea:7c:6c:cb:2e:57:11:e5:0a:e8:
         42:c9:00:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:08:27 2025 by rpki-client