Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/0373f53e-cad1-3dea-a954-9140c0ef6507.roa
File:                     0373f53e-cad1-3dea-a954-9140c0ef6507.roa (raw, json)
Hash identifier:          oXu4faF0p76955cST2i19PLQaFSNre7PKl8Dm58GDSk=
Subject key identifier:   2E:3E:2D:4F:FE:40:C7:E3:08:56:17:FB:2A:09:FE:BF:A2:32:00:35
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F43285849A1A73A15E3378BF733386300
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/0373f53e-cad1-3dea-a954-9140c0ef6507.roa
Signing time:             Thu 24 Apr 2025 10:35:55 +0000
ROA not before:           Thu 24 Apr 2025 10:35:55 +0000
ROA not after:            Wed 23 Jul 2025 10:35:55 +0000
asID:                     35758
IP address blocks:        74.91.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:a7:3a:15:e3:37:8b:f7:33:38:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Apr 24 10:35:55 2025 GMT
            Not After : Jul 23 10:35:55 2025 GMT
        Subject: CN=0437574f-7d2c-474f-92d8-4aa9bd7e967b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0b:54:28:db:84:ed:81:88:c6:2d:13:87:3a:
                    de:af:64:f5:82:8e:c0:e1:dc:31:f4:75:33:74:10:
                    53:15:7b:91:61:ef:22:32:ea:ee:0e:42:2c:6a:0f:
                    14:86:6b:98:e1:9f:f8:33:1c:68:ff:0a:ca:e0:19:
                    ea:55:70:3d:c2:e7:eb:d6:19:67:54:b2:b2:26:2f:
                    56:5b:67:f1:9f:08:c8:fb:7e:99:dc:45:d5:4b:8b:
                    42:eb:76:a1:42:fb:5d:b6:1c:3d:45:e2:a2:e3:a9:
                    53:e5:21:64:6b:ce:51:b7:c8:05:64:1c:bf:fd:90:
                    e3:09:9d:13:e8:7d:42:6c:5c:4e:4a:f6:23:a1:df:
                    60:4b:32:1f:e3:8a:a4:c8:f4:01:d8:a3:58:ab:d5:
                    ae:6b:2e:62:5b:4a:56:2b:b1:3c:9c:c9:37:7e:c9:
                    37:a5:d8:66:4c:1e:90:68:13:45:11:46:5c:1b:4d:
                    72:46:dc:71:e8:0c:95:af:b7:c3:db:86:43:2b:2a:
                    be:8b:bf:50:89:2d:3c:ff:3e:53:ca:24:99:ad:d7:
                    f9:f1:de:f6:ce:60:5f:73:8e:7e:a5:46:5c:54:6d:
                    d2:a9:c3:1d:5f:4d:56:89:cf:b0:9a:fb:36:bf:a5:
                    29:5e:c4:23:60:c2:7c:e0:23:bf:0d:2c:83:93:e2:
                    19:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3E:2D:4F:FE:40:C7:E3:08:56:17:FB:2A:09:FE:BF:A2:32:00:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/0373f53e-cad1-3dea-a954-9140c0ef6507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:a1:57:f5:47:a8:23:a8:e6:b3:b3:95:0f:8d:f6:90:35:7a:
         57:3b:18:12:74:70:3e:56:99:22:5e:20:5b:d9:e8:d4:12:0c:
         f3:80:d3:fa:dd:8d:48:67:f5:15:48:49:42:37:62:67:27:72:
         87:24:c8:06:bf:a9:f9:50:04:95:5f:6c:85:01:ff:e8:55:cb:
         28:4f:f4:a6:d3:e7:af:d2:5c:88:f7:c4:da:47:81:e7:50:39:
         15:61:7d:1d:8e:9d:02:f7:19:19:74:ba:b7:fb:2b:95:1d:7b:
         a5:f1:08:4e:d9:dc:5a:c9:42:5e:ad:09:39:84:eb:b2:c1:61:
         fc:a5:44:93:56:07:21:46:ab:52:58:49:0f:ed:a4:34:3d:50:
         b8:b2:49:32:59:3f:35:d6:b1:74:13:43:ca:3f:62:ac:f2:79:
         01:0b:7a:db:57:ff:9c:6b:ea:98:b5:cf:3f:c3:ed:b7:47:82:
         4a:d0:17:85:84:ab:f3:0b:9b:45:31:0f:1b:9b:64:79:1f:62:
         cf:19:60:7f:f0:ce:30:81:89:84:94:1e:67:55:b1:b1:11:6d:
         91:d8:ac:2a:fd:fa:72:11:a2:e1:c5:19:da:6b:a7:d4:2a:a3:
         b3:ca:47:e4:83:06:06:6e:0f:c0:70:11:21:8a:ff:42:09:24:
         f5:fd:1f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:25:31 2025 by rpki-client