Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/b2961625-afdd-3c57-ae0c-90c9e114d526.roa
File:                     b2961625-afdd-3c57-ae0c-90c9e114d526.roa (raw, json)
Hash identifier:          iMM7iO69rKSBbpfhF4x/4vvM2wa0qdkKlKvDqvCZqfo=
Subject key identifier:   97:6D:FE:E2:7A:E3:80:CC:55:53:E5:F6:12:A0:65:BD:2E:B3:F8:41
Certificate issuer:       /CN=3bb6068b-be48-4cc9-ad75-338daae24880
Certificate serial:       010D0C9F43285849CE9A5F115561E5075E8DC580
Authority key identifier: 6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/b2961625-afdd-3c57-ae0c-90c9e114d526.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     7029
IP address blocks:        74.117.216.0/21 maxlen: 21
                          74.117.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:5f:11:55:61:e5:07:5e:8d:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bb6068b-be48-4cc9-ad75-338daae24880
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=c1f122ce-6cad-4679-9729-ae2061d969a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fe:dd:89:1a:fe:cb:1b:b1:08:f9:70:bb:58:
                    d1:e0:44:81:b2:06:d6:cd:b2:9a:6e:3a:94:84:43:
                    c0:1a:0d:08:98:85:f9:5c:40:64:80:6a:21:c9:7e:
                    2c:01:55:08:aa:76:13:89:a3:4b:cb:23:81:3c:8f:
                    24:f0:bc:42:bb:4e:cf:7f:2c:34:55:d0:bd:cc:c8:
                    82:c6:6d:cb:64:7f:7b:3a:3c:e1:a9:3a:57:84:82:
                    34:79:16:b2:4e:d1:69:da:55:72:de:f0:4e:13:e7:
                    c7:d4:1a:1b:0d:fa:c8:0f:df:2f:f3:6c:be:42:c7:
                    80:be:db:d4:2b:69:c0:8f:13:46:2a:dd:3e:f8:ee:
                    61:08:76:55:3b:e7:0e:61:69:bf:1e:53:3b:cf:e5:
                    18:2a:99:d5:b0:e7:bd:11:7d:60:de:3e:75:28:ee:
                    18:2f:df:d6:88:f7:6a:c4:98:ae:13:fb:86:c8:40:
                    24:40:07:c9:11:9d:2a:b0:70:15:2a:c9:7d:4c:5f:
                    11:e0:04:68:a7:c9:bf:fa:e5:28:67:6e:4c:22:42:
                    8d:e5:e3:d4:9e:fd:18:dd:a2:39:2f:e6:96:bb:7a:
                    fb:75:d6:8d:18:1a:78:1d:21:41:ca:55:a0:0c:dd:
                    ed:ad:20:34:d7:94:69:cf:a0:cd:e8:9f:9e:2d:71:
                    62:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6D:FE:E2:7A:E3:80:CC:55:53:E5:F6:12:A0:65:BD:2E:B3:F8:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/b2961625-afdd-3c57-ae0c-90c9e114d526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl

            X509v3 Authority Key Identifier:
                keyid:6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d1:a6:0c:0d:c7:f7:5f:da:d4:b1:23:61:be:39:63:2b:e7:
         f8:b3:8d:9e:5d:40:2b:6f:87:9d:31:ef:8e:91:15:3d:1a:68:
         5f:3c:e2:84:55:b1:b1:24:d4:15:55:ab:cf:86:12:c0:3c:6c:
         aa:5c:4c:1f:31:15:61:8a:f8:d7:ba:58:fc:8f:fa:30:50:e2:
         a9:bd:ec:0d:38:a7:df:3c:d6:3e:13:a6:80:cb:27:4a:5b:29:
         94:90:5e:7c:92:cb:0d:f5:90:f5:4a:a5:1e:d2:74:04:64:e7:
         0f:97:d5:5d:4c:40:20:3a:f6:46:49:0e:57:f4:3c:1b:e4:80:
         88:d9:bd:31:c4:7c:3c:e3:88:0b:aa:a0:db:ab:9a:e1:c2:ae:
         77:6e:10:1f:3d:35:dc:d8:22:1e:3e:23:82:8f:cf:4c:35:3f:
         6b:ef:58:9e:be:7a:5a:70:d9:05:bb:4a:ec:8d:f8:b2:a8:0a:
         da:ce:70:3f:dd:19:63:02:d3:74:79:6a:89:cf:3e:d5:a9:e3:
         5f:22:44:67:cb:48:04:cb:5b:29:be:8d:ac:d7:a4:4a:1c:44:
         26:4b:d3:93:a2:c7:f9:32:7d:b7:ab:18:e8:ec:12:28:33:01:
         db:28:15:85:87:f9:8a:00:c2:cf:2a:c4:25:95:40:c1:d7:90:
         de:8e:58:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:23:11 2025 by rpki-client