Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/e87834f7-fccc-3d54-b691-86c753624379.roa
File:                     e87834f7-fccc-3d54-b691-86c753624379.roa (raw, json)
Hash identifier:          sHQ/1HDUg/rgdR04mBP/rV6J1Mcj5jSXa8HiEne7bpM=
Subject key identifier:   30:B9:3C:2B:D6:24:A5:4E:E4:0B:8F:11:DA:95:CA:BB:8E:34:44:FE
Certificate issuer:       /CN=22d4b872-8325-44d1-958d-897bd254f68b
Certificate serial:       010D0C9F43285849849EF4CF1877C6E6888A4C60
Authority key identifier: A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/e87834f7-fccc-3d54-b691-86c753624379.roa
Signing time:             Mon 14 Apr 2025 01:00:43 +0000
ROA not before:           Mon 14 Apr 2025 01:00:43 +0000
ROA not after:            Sun 13 Jul 2025 01:00:43 +0000
asID:                     272814
IP address blocks:        74.118.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:84:9e:f4:cf:18:77:c6:e6:88:8a:4c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d4b872-8325-44d1-958d-897bd254f68b
        Validity
            Not Before: Apr 14 01:00:43 2025 GMT
            Not After : Jul 13 01:00:43 2025 GMT
        Subject: CN=caddda1e-935d-421f-a19a-7aede42d7670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1c:ea:1e:66:8d:24:5d:7c:69:06:b7:16:dd:
                    dc:83:e1:5e:a4:ba:1e:a5:09:91:18:73:ac:f4:0c:
                    23:01:d9:c4:7f:c6:15:f6:d9:5f:56:70:81:a4:c9:
                    f9:3e:c5:9c:82:cf:09:f1:70:ce:b6:bf:7c:9d:e5:
                    3d:d9:34:0a:c9:e0:6b:6a:db:fd:38:71:1b:cf:34:
                    71:ad:0a:32:f4:72:a6:ba:e8:da:70:07:83:c4:fa:
                    87:83:32:34:b9:56:79:a6:14:c6:8c:79:16:9a:81:
                    03:20:f2:31:10:6f:f8:78:62:85:fb:48:66:af:72:
                    91:1d:1d:db:25:8b:af:dc:6f:39:c8:1d:8a:66:8d:
                    57:2d:1b:67:37:68:e1:3b:82:87:bd:ec:8c:ed:e6:
                    09:c9:4f:90:7f:35:0a:1e:fe:b5:f4:01:d2:fc:28:
                    5d:6e:f0:b1:1c:ea:2a:af:9c:21:02:92:77:73:15:
                    8c:71:15:34:2f:50:cf:56:e0:8f:53:73:ae:78:d1:
                    04:26:4d:29:f9:d7:2c:57:0f:40:c5:bc:4e:87:c1:
                    1b:2a:0b:15:61:72:d1:d6:cd:5f:22:59:47:00:0d:
                    34:eb:2e:88:9f:a1:83:e8:17:80:31:a6:97:5b:b4:
                    8c:17:52:17:be:81:70:b7:ee:f3:05:e7:33:f6:1f:
                    87:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B9:3C:2B:D6:24:A5:4E:E4:0B:8F:11:DA:95:CA:BB:8E:34:44:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/e87834f7-fccc-3d54-b691-86c753624379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl

            X509v3 Authority Key Identifier:
                keyid:A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:61:19:46:ce:d5:50:d6:2d:33:d1:ce:5c:ea:02:a9:d0:c5:
         0a:b2:94:48:d6:78:cc:fb:e6:43:38:52:ef:7f:c8:d3:a8:1f:
         65:fc:bb:fc:a7:17:5c:1e:ed:c6:31:a6:96:a3:b9:67:03:db:
         fe:f1:5f:f1:f9:64:2d:cd:43:91:2e:b3:3c:bf:95:07:12:4a:
         a6:8a:06:10:db:93:66:31:66:d0:9c:b7:d1:94:6d:a0:57:ab:
         b1:08:d1:a9:84:a1:a0:43:ab:5c:b5:5b:62:93:74:af:6c:f8:
         f3:7d:d2:99:1b:ec:68:2c:ac:d0:4f:4b:bf:7e:8f:1e:c5:35:
         56:e3:fa:e8:58:58:38:3d:54:6b:64:10:01:ef:67:7f:c4:74:
         90:64:16:b5:53:1b:7c:18:32:e2:0a:eb:18:b7:40:4a:a6:50:
         73:ba:4a:7f:0a:cb:0c:5c:5b:b5:3f:14:64:ae:aa:01:af:c3:
         b7:57:16:97:28:d1:b0:58:c6:ba:a6:63:9d:1c:70:f5:8c:2f:
         99:fd:41:e8:f4:5d:37:1a:7f:19:d8:de:d2:53:27:87:7a:f5:
         ee:9d:58:1f:0f:e1:4c:25:bb:52:ba:cc:a4:ad:26:55:00:03:
         dc:54:0f:4d:e7:f0:f3:86:8e:22:e8:d1:12:18:54:18:66:34:
         06:5b:e2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:39:51 2025 by rpki-client