Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/0751b212-4aef-33a9-8356-2edbfd06df0d.roa
File:                     0751b212-4aef-33a9-8356-2edbfd06df0d.roa (raw, json)
Hash identifier:          Tk/P4nx6NfTceSESo8TJVp3U0N+fOIRS5LQfu/j3ApA=
Subject key identifier:   94:7D:FF:DB:85:3F:92:A2:13:15:C6:52:7B:01:29:CA:20:DB:DE:AD
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584A7A4B467D2B51C3DF69D04320
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/0751b212-4aef-33a9-8356-2edbfd06df0d.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     394437
IP address blocks:        74.124.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:46:7d:2b:51:c3:df:69:d0:43:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=adeb1772-b069-4725-badb-395fffe4f4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e9:a0:f4:6c:e6:18:27:47:0c:c6:5f:70:94:
                    e6:12:ed:43:d5:6d:c2:a1:c6:f6:14:aa:ad:30:a4:
                    31:33:8f:4a:9c:b7:8e:eb:66:09:09:d6:8c:1f:75:
                    f9:f8:d5:d5:bb:27:76:94:68:06:1f:66:ec:76:25:
                    59:fb:43:03:93:42:63:c2:37:12:89:3d:74:4e:e2:
                    10:c6:93:37:20:ff:6c:2b:8c:66:bb:d0:43:8b:32:
                    9b:39:ec:a1:67:bb:ac:8f:dc:41:bc:5c:b4:90:ab:
                    34:59:61:01:eb:1b:16:39:91:a5:d7:0d:4d:2b:c2:
                    a9:0f:ca:11:cb:24:f8:a4:05:2a:ce:64:ca:ee:cc:
                    38:71:2c:f0:50:27:ae:bc:4e:5d:b8:b1:88:32:8f:
                    ca:b8:36:d8:db:ff:7e:84:19:3e:3b:21:1c:3b:46:
                    c6:51:e4:98:a5:c8:28:06:47:68:a5:cb:cd:80:1e:
                    ec:a4:05:af:8b:46:64:b9:3c:1a:e5:90:ee:11:2e:
                    2a:6a:a0:05:2b:d6:8b:c9:59:6e:af:54:6f:99:b3:
                    46:c2:dd:78:1a:65:46:0a:fb:24:2c:22:39:9f:77:
                    3b:ce:dc:b6:da:1c:ca:2c:a9:6e:f7:45:98:9e:4a:
                    43:17:e0:e0:f9:9e:c9:3e:d5:9e:6d:b4:d5:21:03:
                    b1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7D:FF:DB:85:3F:92:A2:13:15:C6:52:7B:01:29:CA:20:DB:DE:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/0751b212-4aef-33a9-8356-2edbfd06df0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:74:dd:de:39:00:75:8a:f4:e1:6e:63:79:05:ea:97:85:ac:
         b5:7f:ca:e9:48:28:ea:aa:9e:99:85:aa:cc:1a:33:2d:b5:c6:
         52:fb:1b:5d:df:0a:dd:21:3b:c1:e8:6e:05:5b:70:0f:3a:94:
         a0:ff:3a:33:f6:3d:83:19:c9:c3:a7:dd:5c:64:f4:74:36:cf:
         69:5c:42:3e:49:c3:6d:06:1e:b5:3c:33:ea:3c:4f:5c:75:f9:
         f4:df:30:06:29:c7:7e:ad:0a:84:66:fe:8a:b9:9e:1d:33:92:
         96:ef:31:ba:5d:f3:30:07:35:49:cc:99:de:26:5d:5c:f7:01:
         95:d3:e8:7a:b3:73:ca:59:b0:8d:61:42:4b:0c:4f:48:69:66:
         96:47:25:b3:61:ea:57:0c:1d:99:ce:1d:23:ee:a3:a8:ed:1a:
         72:82:0d:c5:6e:c9:cc:1f:e8:8f:91:e5:78:19:0e:61:ec:e5:
         09:fb:2b:39:e1:6f:6b:c0:4d:05:b0:a9:ca:99:8f:6d:a0:30:
         e2:80:10:59:45:b2:c4:de:79:c0:01:ee:e3:b4:7c:4b:76:d6:
         34:8a:49:31:c9:ae:1b:18:47:19:45:a1:85:e4:e8:29:30:d1:
         eb:9d:45:fb:eb:85:3d:ca:1b:b9:e0:49:45:07:6c:0e:38:8f:
         a9:49:20:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:08:28 2025 by rpki-client