Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/93929419-5010-3d66-bae5-2cde7ec1457c.roa
File:                     93929419-5010-3d66-bae5-2cde7ec1457c.roa (raw, json)
Hash identifier:          lOW0DPYxq+Wv/ObNAdKj8c0ot9AoEZShw3obtUpamz8=
Subject key identifier:   97:77:B5:E3:3E:A2:08:07:D3:85:6E:83:D1:46:B1:11:01:0F:BB:B0
Certificate issuer:       /CN=6887c8ea-d5ac-4f59-94cd-5de7a5c51600
Certificate serial:       010D0C9F43285849F17FB1D2CD8A4DB3D0712740
Authority key identifier: E2:F2:4C:FB:BE:57:79:1F:55:18:17:18:74:91:DC:1F:43:32:07:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/93929419-5010-3d66-bae5-2cde7ec1457c.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     53769
IP address blocks:        74.116.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b1:d2:cd:8a:4d:b3:d0:71:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6887c8ea-d5ac-4f59-94cd-5de7a5c51600
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=65465bd1-2eee-470d-84e9-d3ea1c427af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5e:78:12:60:71:d1:b5:00:85:7c:7a:1b:63:
                    87:71:21:c9:b5:09:4c:69:d2:cc:0c:33:92:61:9b:
                    ca:ce:a8:31:c9:48:c1:b0:6c:b5:56:a3:2f:34:b1:
                    3c:7f:cc:22:bf:9b:6f:c7:ee:d2:35:8a:93:22:b4:
                    27:25:7d:98:7f:73:98:24:f9:3a:c2:2c:6f:71:19:
                    ed:91:6e:53:7a:70:85:35:c5:25:05:23:d3:7e:8b:
                    fe:ac:52:a2:16:33:37:38:32:53:2f:f8:f0:dc:15:
                    6c:5d:f0:67:44:c9:f6:80:3d:fc:02:48:b5:d1:81:
                    3d:b4:26:91:71:0f:ee:30:ab:d8:a2:eb:0c:31:e2:
                    fb:70:09:7c:8b:0c:a9:3f:da:74:2c:0f:e4:03:68:
                    d6:53:e9:6e:cf:4b:ef:0f:d4:34:73:34:20:ef:45:
                    64:d5:c6:6b:40:01:5b:f3:27:fd:cd:c3:f8:97:a7:
                    5a:10:4c:9f:6b:0b:57:ec:5b:d8:08:8f:36:d9:cd:
                    ef:44:e0:23:79:5f:64:40:09:b7:d5:c1:74:9a:7c:
                    34:76:93:fb:ba:6f:58:9c:4d:a3:61:51:16:8e:8b:
                    7a:f6:fa:b0:e6:94:20:08:50:32:33:7f:13:1d:3e:
                    86:56:d1:07:fe:db:9a:5f:bc:54:6b:2d:47:14:b4:
                    2f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:77:B5:E3:3E:A2:08:07:D3:85:6E:83:D1:46:B1:11:01:0F:BB:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/93929419-5010-3d66-bae5-2cde7ec1457c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.crl

            X509v3 Authority Key Identifier:
                keyid:E2:F2:4C:FB:BE:57:79:1F:55:18:17:18:74:91:DC:1F:43:32:07:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b8:d1:e5:b2:5d:03:a0:73:9e:7c:b0:f7:ec:02:44:66:58:
         ce:ac:76:f3:9f:f4:48:83:58:dd:91:04:08:20:15:22:27:2e:
         4b:80:ac:bc:49:ac:97:1e:8e:3e:3a:b2:69:97:c8:82:89:8a:
         91:eb:59:a2:53:7a:81:e9:44:f0:29:9b:63:fb:8c:cc:78:fd:
         f0:39:9d:77:82:d7:c0:44:10:46:76:f2:71:79:35:3e:2a:7c:
         77:38:7b:fc:ca:1d:3b:51:2a:f1:70:b7:5d:14:5b:e6:f1:a3:
         59:41:96:29:1c:1a:83:3d:1b:44:99:0e:cc:5e:7a:ee:b9:7d:
         9f:2d:6f:15:04:1d:ad:97:55:c4:7d:38:38:2d:63:d5:5d:87:
         1c:d6:aa:d2:7b:9b:0f:ce:9e:cc:24:f5:41:b0:d7:47:eb:ea:
         70:90:ef:b7:49:7e:3e:ad:e1:a9:32:6e:a5:ba:d4:0d:e4:83:
         47:f3:8d:5f:ae:55:f0:54:25:28:27:bb:f4:a4:14:34:02:76:
         7a:18:21:f3:a7:20:12:a5:73:bd:c5:ec:76:94:25:ee:8c:7a:
         6d:50:87:1d:f2:40:a3:7b:cf:b9:9e:79:8d:7d:e4:19:2c:92:
         9d:29:16:72:a9:0b:43:a5:f6:0b:19:99:af:1e:cc:64:b4:fd:
         4c:c2:5b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:42:24 2025 by rpki-client