Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/d5cffdd6-8efe-33e1-a230-15cd93cce406.roa
File:                     d5cffdd6-8efe-33e1-a230-15cd93cce406.roa (raw, json)
Hash identifier:          0xbmZ/jXB0h7bwoh7M2Y5Io6kTqfvlN8PxZ/vyJNiRg=
Subject key identifier:   49:A2:ED:2C:96:BD:C2:94:6F:23:E3:95:99:D2:84:57:02:14:BC:B8
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F4328584A3FAAD06E8723623243044720
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/d5cffdd6-8efe-33e1-a230-15cd93cce406.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     834
IP address blocks:        74.115.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:d0:6e:87:23:62:32:43:04:47:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=839d958f-6b47-45c9-a289-44cd1e1a39b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f3:2b:f3:65:3f:0b:1e:60:f5:1f:90:da:cf:
                    39:8f:ff:bf:98:30:a8:76:ba:55:b5:75:5b:83:b6:
                    01:1b:c2:57:d7:d5:a7:d9:8e:94:0e:13:aa:0a:1f:
                    10:2c:ee:96:8a:fe:59:fb:26:09:64:87:f5:a1:77:
                    1d:d8:08:f4:db:95:12:2a:2a:da:5d:7d:3d:27:57:
                    f5:31:f0:f6:f6:bc:32:13:6a:21:ca:f8:8d:95:f1:
                    b2:48:1b:09:f8:a4:f0:c6:7a:9f:7b:63:27:b9:b3:
                    40:c3:69:15:e5:fb:fb:c1:c9:22:74:f9:1a:a5:d8:
                    e3:4f:60:16:f6:58:21:7a:ff:19:46:ef:c5:a1:21:
                    eb:92:7a:8b:04:df:ac:02:a6:bd:2f:d5:0f:10:e7:
                    66:a4:20:56:99:28:f8:8c:68:bb:b3:1b:4c:70:1d:
                    6b:ba:2c:2f:b3:36:1e:84:c2:c8:76:5e:92:0e:55:
                    ea:af:6b:43:67:27:3c:3d:6b:de:3e:b0:09:76:f4:
                    a8:ef:a2:25:ff:f8:3e:4a:4d:ae:e2:34:23:9b:c0:
                    9f:fc:3c:ee:0e:28:23:75:11:2a:61:83:a4:bb:ce:
                    19:7a:2a:a7:28:e0:09:bb:33:ff:d3:88:4b:7c:48:
                    78:a3:2f:bf:8c:b8:d9:9c:c7:cc:0a:de:ee:b1:77:
                    8b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A2:ED:2C:96:BD:C2:94:6F:23:E3:95:99:D2:84:57:02:14:BC:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/d5cffdd6-8efe-33e1-a230-15cd93cce406.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:8d:1a:4c:f5:b6:c7:de:75:dc:ef:5e:ed:04:7e:04:78:58:
         e4:31:39:05:93:b3:8a:18:88:eb:79:55:2d:81:93:b0:44:68:
         bd:8e:be:c9:d5:59:09:1e:dd:c7:a6:58:96:a2:82:ab:b5:2a:
         d8:ac:d5:84:eb:fd:44:c1:c1:a1:73:44:b9:12:66:e0:c7:79:
         f3:03:bd:8b:24:80:c2:9f:05:45:2a:da:9c:8d:7e:e3:7c:37:
         3d:d4:0d:12:36:61:a8:5c:1e:a1:d4:6b:49:73:cb:c7:82:eb:
         3a:53:88:01:46:b7:8e:73:64:d0:68:b2:c4:5a:59:3c:02:8d:
         07:53:20:72:2d:54:fc:33:25:72:b8:1c:4e:72:61:7e:6c:a4:
         13:12:ac:db:04:f6:90:c1:41:69:c5:e5:e9:16:3a:c0:0d:fa:
         dd:5d:f7:a9:20:b5:dd:70:e7:29:61:b6:fe:b2:e7:1f:25:f5:
         c2:f4:ee:ac:a2:d5:46:ae:28:53:8b:b0:55:2f:f6:ee:cc:c6:
         12:ba:33:49:69:37:2f:95:5a:a8:af:7f:fc:9b:bd:1d:ad:ff:
         5c:21:c0:8b:71:da:46:71:99:ae:43:81:e6:c1:11:4c:6f:7e:
         b9:d8:38:1d:e2:8f:24:62:34:49:3c:e7:56:70:72:90:38:80:
         c3:f0:f3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:06:29 2025 by rpki-client