Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/958d41d1-764a-3025-a7b5-83795d79fa0c.roa
File:                     958d41d1-764a-3025-a7b5-83795d79fa0c.roa (raw, json)
Hash identifier:          xu3rzfNqmzkq+x+KqB+d1wa6L8nAHJhyEhw9t71D15g=
Subject key identifier:   81:3C:91:F4:0A:BA:19:0F:E3:C8:58:0F:37:CB:89:51:A0:1B:6C:FC
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20ACD9E920F6D70D9ABB440
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/958d41d1-764a-3025-a7b5-83795d79fa0c.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10838
IP address blocks:        74.87.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:cd:9e:92:0f:6d:70:d9:ab:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=f7fefc73-d9d8-47e5-b089-43c2cdf205dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:27:b8:48:02:88:24:d8:d9:7b:0b:62:a8:
                    89:71:9c:9f:70:f5:64:4d:e3:59:f7:aa:a3:10:08:
                    bb:a0:36:49:84:bc:b6:29:75:30:82:50:a7:a5:c8:
                    f0:f8:94:55:75:c5:3b:55:3a:1b:29:ae:a4:75:af:
                    3d:95:86:7b:c7:10:34:36:ee:89:54:59:4b:59:14:
                    7f:11:3b:d9:a4:67:b7:71:f5:3a:e7:50:59:ed:e2:
                    9a:ea:05:fe:90:b6:22:5c:af:2d:d7:87:36:18:7d:
                    cc:f7:3f:06:8b:f4:42:d5:3e:56:60:47:da:d0:fe:
                    7c:27:e3:c6:5c:e1:ba:8f:29:be:7b:a7:20:a5:de:
                    b8:12:21:1d:d5:d1:3b:2c:8a:57:bb:a1:2e:dd:1f:
                    ed:35:cc:33:63:41:89:1a:04:ed:d3:43:20:b5:fa:
                    a3:0f:42:bd:f1:f3:7a:d7:ef:a8:f3:38:c5:84:db:
                    6c:e3:a2:52:92:c5:fe:e6:5b:d4:79:67:98:1b:ed:
                    40:14:4b:27:60:8d:23:bb:7b:e4:23:e1:c0:8d:c1:
                    66:a2:e8:62:0b:06:6f:04:b4:59:33:a0:9e:b9:64:
                    47:db:ce:74:52:71:b3:03:87:29:61:98:f7:73:af:
                    33:d5:f0:dd:cf:b6:6b:34:88:e3:30:f8:04:b9:02:
                    20:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3C:91:F4:0A:BA:19:0F:E3:C8:58:0F:37:CB:89:51:A0:1B:6C:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/958d41d1-764a-3025-a7b5-83795d79fa0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:0b:a3:c3:0d:bb:6a:f6:2e:ee:8d:a5:f1:88:db:06:c9:51:
         67:6a:b8:16:3e:2b:63:40:d2:9e:52:dd:01:e6:51:f1:89:7a:
         62:7a:df:10:e6:f1:4d:9f:1f:28:d3:78:b1:f8:17:ce:a7:f3:
         84:8f:76:ab:8b:60:d1:66:79:43:72:42:0f:26:c9:76:04:34:
         10:3b:fa:57:e5:66:0d:33:15:ba:eb:d6:4b:75:d2:40:16:b2:
         88:b5:30:0c:4d:04:b4:51:58:bc:a7:c0:a5:91:31:0d:5f:fe:
         d9:cb:42:93:07:be:4d:94:18:e6:2b:54:24:a3:86:69:a5:66:
         c7:d5:44:e3:4f:43:9f:e0:53:a5:fe:f1:cc:43:56:e5:1f:10:
         f4:53:71:56:b5:59:04:e6:66:ae:48:36:ad:f7:02:b7:f2:91:
         02:ae:45:38:0e:24:7e:f0:8f:11:23:e1:e6:88:53:3b:d2:c6:
         34:d0:c6:a8:7b:25:5f:d7:3c:83:f7:b1:32:0e:1c:be:e8:01:
         e1:4b:6e:97:8f:be:42:7f:b5:0a:ea:cf:44:ec:d1:4f:48:a9:
         c9:26:b0:1e:87:9e:08:0c:40:8e:3c:53:97:80:bd:75:03:2e:
         ef:1d:28:16:27:d8:8e:8f:57:f1:f8:94:95:f5:78:fb:4c:c1:
         8d:47:1f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:00:43 2025 by rpki-client