Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c15dc0c5-98eb-3e1c-9f92-ba55497f947d.roa
File:                     c15dc0c5-98eb-3e1c-9f92-ba55497f947d.roa (raw, json)
Hash identifier:          toTt9vma4ezWNtphum4H/+PWx5Rh3TBxG79nfu15gIE=
Subject key identifier:   1E:1B:27:F2:86:F4:60:58:A2:33:2F:10:DE:E3:04:01:C5:2A:9F:71
Certificate issuer:       /CN=c5188e20-1297-4b61-a494-1ca0036777f2
Certificate serial:       010D0C9F43285849849EFD35A0D8916BCF501400
Authority key identifier: B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c15dc0c5-98eb-3e1c-9f92-ba55497f947d.roa
Signing time:             Mon 14 Apr 2025 01:00:43 +0000
ROA not before:           Mon 14 Apr 2025 01:00:43 +0000
ROA not after:            Sun 13 Jul 2025 01:00:43 +0000
asID:                     8075
IP address blocks:        74.117.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:84:9e:fd:35:a0:d8:91:6b:cf:50:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5188e20-1297-4b61-a494-1ca0036777f2
        Validity
            Not Before: Apr 14 01:00:43 2025 GMT
            Not After : Jul 13 01:00:43 2025 GMT
        Subject: CN=825ea9d3-5b48-40a1-bd27-472f8bfdad60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b6:45:74:de:91:ee:9f:32:42:29:1e:fa:ec:
                    31:54:fa:71:5a:4e:c3:a6:86:f3:fd:29:56:a2:36:
                    9c:8a:51:29:f0:84:fe:b5:be:7d:c8:ad:60:84:57:
                    11:aa:87:6d:c0:d6:cb:8f:81:01:e6:96:cc:ef:05:
                    24:b6:94:96:e6:ec:a6:0e:db:29:16:3c:4a:4d:29:
                    d1:91:0b:fa:ff:9c:70:d4:ff:5b:80:de:cb:b1:53:
                    e4:f7:28:34:6f:77:38:26:79:4d:78:bc:77:e6:3f:
                    a6:1a:4d:95:fa:b7:18:4e:f4:8e:3b:bf:93:ae:b1:
                    dd:e6:d6:f4:89:22:3d:32:49:0b:13:c6:da:38:3e:
                    bf:4b:c9:0f:73:40:fb:d9:4f:25:59:40:40:08:95:
                    06:6e:c7:11:af:93:e5:33:95:af:59:f0:e4:f8:9d:
                    1f:15:4f:7c:18:71:0f:c1:02:3b:64:de:f0:dd:71:
                    cc:fa:8c:da:6b:7b:b9:af:bd:a6:4e:56:e8:e7:e1:
                    6a:76:5b:dd:18:c4:96:cb:a1:a5:40:03:8d:99:d7:
                    3c:94:84:00:8b:51:d2:7d:8b:20:05:7b:ce:97:14:
                    27:c6:61:4c:92:97:4f:46:fe:29:16:cc:76:47:50:
                    69:df:87:16:78:71:de:54:1d:c7:47:be:ac:03:f7:
                    46:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1B:27:F2:86:F4:60:58:A2:33:2F:10:DE:E3:04:01:C5:2A:9F:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c15dc0c5-98eb-3e1c-9f92-ba55497f947d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl

            X509v3 Authority Key Identifier:
                keyid:B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:9e:be:8d:a4:76:ae:ec:66:fc:c7:bb:7c:3c:1a:60:2c:27:
         d3:a1:43:45:5f:e1:37:31:5d:8e:ef:47:10:7d:68:dc:5a:1f:
         fe:32:f1:51:e3:69:fd:0f:d9:48:80:80:bd:01:1e:08:2e:27:
         80:b4:cc:93:0d:51:bc:ad:49:0a:25:c0:d2:7e:d7:a7:c2:9d:
         05:40:01:3e:31:85:7d:de:90:58:58:49:65:85:a1:cd:9c:c4:
         a6:53:89:ae:0b:51:38:30:24:18:00:55:47:ee:a0:d2:63:b3:
         fa:e7:ed:86:b3:f0:0d:84:ac:42:a6:dd:bb:c2:b9:e3:05:87:
         3d:79:81:c2:ac:43:c4:c9:8a:a5:e6:da:0d:46:69:59:28:18:
         8e:c7:0c:fc:d0:76:3a:21:51:e1:a7:91:24:36:be:ad:5d:87:
         01:e8:85:58:06:d4:9c:be:f7:29:85:1e:d4:37:c5:94:1b:6d:
         97:48:d2:22:2c:db:55:da:18:d6:9e:fd:97:9e:ba:b7:98:5e:
         61:7c:1a:25:18:ba:68:12:2a:8a:6b:7a:10:10:97:6b:8f:fc:
         61:90:0f:a4:0d:06:a2:da:5c:a2:75:d7:13:40:3f:fc:7c:2b:
         e2:b9:f3:98:1a:52:ff:13:11:c8:eb:33:0d:e9:e8:47:b9:1b:
         78:7d:0a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:30:47 2025 by rpki-client