Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/9f196a61-a3fc-3c3e-a5f5-26f1d768537a.roa
File:                     9f196a61-a3fc-3c3e-a5f5-26f1d768537a.roa (raw, json)
Hash identifier:          Cj4o3ChqeHMDP8u0VIJ6jWkf7eGRhlL4bZoaX4Ml5aM=
Subject key identifier:   6B:88:C4:77:56:1A:CD:AE:86:47:82:15:17:C6:E8:E1:50:4F:92:EC
Certificate issuer:       /CN=9052f135-bd8c-426f-88a5-6b30bb6e99c8
Certificate serial:       010D0C9F43285849CBCD900C452E0224019B1E00
Authority key identifier: 9F:C6:2E:69:31:8C:74:09:1B:0C:D7:1C:02:B0:DB:FF:C2:8E:2D:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/9f196a61-a3fc-3c3e-a5f5-26f1d768537a.roa
Signing time:             Fri 09 May 2025 12:57:06 +0000
ROA not before:           Fri 09 May 2025 12:57:06 +0000
ROA not after:            Thu 07 Aug 2025 12:57:06 +0000
asID:                     46958
IP address blocks:        74.113.204.0/22 maxlen: 22
                          2620:126:d000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/9052f135-bd8c-426f-88a5-6b30bb6e99c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/9052f135-bd8c-426f-88a5-6b30bb6e99c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cd:90:0c:45:2e:02:24:01:9b:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9052f135-bd8c-426f-88a5-6b30bb6e99c8
        Validity
            Not Before: May  9 12:57:06 2025 GMT
            Not After : Aug  7 12:57:06 2025 GMT
        Subject: CN=860206dd-2d2a-4c3b-99b0-475bc4729c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:f6:44:1f:3d:0e:02:33:6f:2a:22:05:6b:
                    9f:9e:f1:e6:04:03:2b:9f:d6:b5:2e:22:f7:e9:f0:
                    45:88:a2:e6:f1:aa:9d:a8:aa:9a:17:a1:06:bc:6f:
                    4e:0e:da:9f:14:76:44:c8:80:02:2d:77:20:27:d1:
                    a7:59:49:d9:8a:0b:2d:0b:f8:b8:8c:b6:e0:da:50:
                    f0:58:7d:8c:87:f7:0a:3a:37:03:8b:f1:cd:6e:7a:
                    06:0e:61:77:ab:a0:87:6b:47:7b:17:71:c4:74:df:
                    64:82:6c:55:12:da:fd:5e:0c:aa:b8:00:1d:f2:b2:
                    e7:48:aa:26:85:42:41:3d:ca:76:d8:93:54:0f:28:
                    0b:08:48:24:d4:13:eb:d4:3c:6b:e9:67:59:6c:75:
                    0b:42:e9:83:e7:b6:b9:08:c0:eb:2b:11:5d:4e:e0:
                    45:69:bb:7e:14:52:51:0a:f0:c2:74:47:66:39:d7:
                    77:67:b7:ea:85:42:86:c2:24:13:73:8d:44:c2:98:
                    b7:44:c4:8f:1c:65:cf:97:e8:f6:b5:ba:4c:d2:f7:
                    db:52:e3:73:ba:4d:7e:e4:f9:56:e7:27:d4:b4:c5:
                    e4:07:00:33:90:ac:65:b7:59:8a:97:f1:ae:a1:7a:
                    03:ae:fa:38:79:0a:79:2b:85:d7:5e:4f:06:48:dc:
                    74:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:88:C4:77:56:1A:CD:AE:86:47:82:15:17:C6:E8:E1:50:4F:92:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/9f196a61-a3fc-3c3e-a5f5-26f1d768537a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/9052f135-bd8c-426f-88a5-6b30bb6e99c8.crl

            X509v3 Authority Key Identifier:
                keyid:9F:C6:2E:69:31:8C:74:09:1B:0C:D7:1C:02:B0:DB:FF:C2:8E:2D:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.204.0/22
                IPv6:
                  2620:126:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:70:9a:fd:13:98:4d:2a:16:4d:57:0e:03:88:df:d4:77:13:
         15:b5:56:33:e7:00:26:3e:10:63:30:09:77:ef:32:60:bb:d6:
         39:10:4b:df:61:66:9b:75:d2:fb:59:47:2c:bd:c4:2e:97:37:
         f9:36:e6:51:73:5b:36:0a:fd:f7:5a:a6:c1:a8:39:fa:1e:78:
         d3:c0:07:3f:90:3f:93:81:d3:d4:1b:90:37:7c:93:17:21:c3:
         f6:2f:00:04:bd:4f:1e:bc:a3:ce:17:47:db:52:5a:3f:1e:eb:
         e2:a7:46:87:8d:61:fc:1e:d4:8b:f2:28:6b:50:3f:b0:c3:da:
         89:73:58:60:0f:12:42:6f:e3:57:ed:e7:74:8d:0c:af:65:66:
         da:18:5a:2c:0d:ed:bb:97:36:50:02:88:b6:29:74:89:60:24:
         24:8e:2c:88:52:42:5a:5e:33:98:16:aa:bb:c3:b7:f3:56:91:
         86:91:5b:9b:8c:b0:28:58:51:be:8b:df:66:24:54:7e:d8:bb:
         78:ee:4d:5a:ad:b6:a0:87:3e:e5:42:fb:ac:d9:33:bf:15:3e:
         ff:ac:a3:35:7e:87:32:9d:e7:7a:13:5b:47:11:1b:7f:ef:04:
         2b:39:f3:36:9b:c3:ad:61:9e:61:4c:5f:4d:09:9e:f1:0d:25:
         b8:6c:00:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:39:52 2025 by rpki-client