Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/5b81b807-e2e8-3c1c-9739-7bff320ed738.roa
File:                     5b81b807-e2e8-3c1c-9739-7bff320ed738.roa (raw, json)
Hash identifier:          w3S1ZkoEA6qb0lgJQeGWDTY1Biq0XwuHHQxtqlxkLzs=
Subject key identifier:   AF:3E:9F:FB:D6:D4:C5:EA:5C:C8:E9:3D:A2:72:AE:D2:2A:03:11:3A
Certificate issuer:       /CN=6f206706-c108-40c1-8f2d-14fbbf92d951
Certificate serial:       010D0C9F432858499AF47ED99065B2DF6C9CD280
Authority key identifier: 1B:AB:C7:C1:2D:FF:2F:79:6E:9C:4B:DD:F6:2D:47:B8:5F:C3:EF:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/5b81b807-e2e8-3c1c-9739-7bff320ed738.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     32484
IP address blocks:        158.120.74.0/23 maxlen: 24
                          158.120.74.0/24 maxlen: 24
                          158.120.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:7e:d9:90:65:b2:df:6c:9c:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f206706-c108-40c1-8f2d-14fbbf92d951
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=6e6f8bd2-353b-4a05-9fdf-d95c860d8ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9b:a7:47:89:9b:e0:2b:ec:08:0b:fe:27:c3:
                    d7:ca:69:99:a7:03:a2:80:51:03:2f:1f:20:7e:8a:
                    69:c1:66:e2:76:2c:1b:f1:15:0d:00:b2:58:05:c1:
                    2f:6f:72:f4:d7:25:5e:b2:04:15:0a:62:9c:b9:f8:
                    9e:fa:03:ac:88:47:f8:a1:69:fb:9c:20:95:ef:8e:
                    20:77:e8:80:cf:14:cc:c7:50:dc:5b:75:e1:b8:62:
                    93:a8:cf:81:50:e5:da:86:1a:56:ef:60:af:53:55:
                    16:52:18:0a:c8:cd:62:82:f6:00:79:af:03:6c:8f:
                    f7:3e:0a:c2:25:85:7a:9b:36:52:d1:ac:ff:3a:b8:
                    80:72:9b:28:48:af:7b:4b:a6:00:ee:de:d7:b5:0f:
                    1b:44:f6:f1:1e:57:cb:e7:0c:3f:57:a2:21:c6:18:
                    79:ad:13:33:2c:65:0d:52:91:d8:27:f8:ef:34:bc:
                    3f:3e:a9:13:95:44:c9:e1:e0:a3:0f:4f:d6:43:56:
                    8d:7a:97:28:03:9f:83:6f:4c:cc:5e:6e:fd:c9:8a:
                    b1:8b:ff:8d:81:00:b4:70:2f:df:21:12:9b:58:3e:
                    ac:98:b9:ae:93:fb:ed:79:de:06:ab:a3:6e:2e:fe:
                    56:c3:3a:2c:69:c6:ae:a3:45:29:15:d7:b3:bd:9c:
                    dd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3E:9F:FB:D6:D4:C5:EA:5C:C8:E9:3D:A2:72:AE:D2:2A:03:11:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/5b81b807-e2e8-3c1c-9739-7bff320ed738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.crl

            X509v3 Authority Key Identifier:
                keyid:1B:AB:C7:C1:2D:FF:2F:79:6E:9C:4B:DD:F6:2D:47:B8:5F:C3:EF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:81:7c:60:f2:a3:d1:ac:a9:58:b8:cf:44:6d:c2:b0:64:f8:
         4d:58:cf:71:31:63:5d:7b:5d:17:8e:3b:c5:7f:f4:34:4e:49:
         a2:b0:3a:5d:09:f1:1d:20:5d:21:11:cb:41:26:43:c5:70:47:
         13:f5:a7:25:70:d7:10:74:36:38:43:22:4f:a6:b2:51:eb:1b:
         6f:4c:97:21:b8:aa:d5:d9:79:18:df:ec:99:8e:7d:a1:e8:7d:
         24:b9:d5:99:37:ad:7e:da:71:fa:2b:3c:88:8b:23:19:0e:61:
         17:43:b2:a2:c7:57:ef:98:c7:84:f0:10:fa:66:12:cf:bd:0b:
         79:b5:3e:54:e8:db:a4:81:fd:03:0a:49:59:ea:73:3b:09:68:
         09:e3:e7:88:29:c6:32:8e:69:83:47:53:34:7b:f6:89:c0:07:
         b0:3b:78:50:78:98:d1:ca:aa:84:2e:3a:30:76:85:86:89:9a:
         05:93:36:60:29:db:2b:fc:61:35:8c:7e:43:07:a7:7b:50:a9:
         1b:92:b6:f3:85:24:9f:24:19:0b:fe:8a:52:8c:88:f9:26:ef:
         80:76:41:df:33:5b:9e:cc:f8:5c:1d:02:a0:3b:71:a7:e4:3f:
         5f:f6:e6:85:70:a9:0b:02:50:c1:2f:0a:26:64:4c:4d:b2:2e:
         23:3e:94:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:30:05 2025 by rpki-client