Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5044ac6f-8e12-39a8-98d2-ee42e740aebf.roa
File:                     5044ac6f-8e12-39a8-98d2-ee42e740aebf.roa (raw, json)
Hash identifier:          eqRVwWASWM1LkNnKk814PKk66C/xTflYSAqJQeTjBQk=
Subject key identifier:   FC:F7:2B:B6:C6:21:9C:21:4A:F3:69:53:02:25:DE:31:F2:F9:E0:53
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285849B149EE9F3B6DD9603A414080
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5044ac6f-8e12-39a8-98d2-ee42e740aebf.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     31898
IP address blocks:        67.217.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:ee:9f:3b:6d:d9:60:3a:41:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=eca0f692-ce6b-4c1c-a6b1-3edf6efa1a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:14:70:b0:fe:02:a4:cb:34:62:fe:c7:1a:
                    e1:73:31:c8:74:87:21:23:df:c5:fe:74:17:a5:02:
                    87:7a:28:70:18:83:29:ff:5d:70:c1:9a:83:d5:84:
                    0e:42:48:b4:9b:05:4e:9d:ab:c7:55:ff:57:c3:0b:
                    85:10:c1:39:12:96:e7:7e:fa:46:03:a7:db:44:c0:
                    ae:aa:f6:32:dc:e4:4d:01:fe:a2:f3:9d:21:4c:29:
                    01:06:d1:04:c4:d9:7c:c0:b4:b0:a2:58:93:59:1a:
                    46:d0:1f:80:93:6e:2d:0b:f2:e3:27:2d:30:27:fa:
                    c9:e6:63:ee:85:b9:b0:59:6a:b4:2c:ea:c7:bf:98:
                    83:13:ac:cf:e0:cd:fc:b4:2b:04:76:f1:2b:71:a3:
                    d6:50:70:16:f8:a0:51:48:ed:ca:4e:9f:4d:bb:fc:
                    c3:4d:00:81:87:59:ea:d2:21:f8:70:41:3a:26:84:
                    a7:de:9c:f4:cb:46:9c:11:9b:14:57:48:9b:b8:77:
                    2c:77:67:0d:13:3c:73:32:12:6b:b8:1e:21:f5:24:
                    d2:af:05:87:32:5b:1d:c9:4a:07:0c:ac:ae:4e:a0:
                    87:8a:dc:73:6c:ce:ad:67:88:3d:be:58:0c:e8:1c:
                    c3:fa:5d:bc:1f:66:6e:0a:ba:00:7f:26:c0:18:a5:
                    d2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F7:2B:B6:C6:21:9C:21:4A:F3:69:53:02:25:DE:31:F2:F9:E0:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5044ac6f-8e12-39a8-98d2-ee42e740aebf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:b3:0f:76:91:63:6c:8c:ca:36:77:eb:e2:ab:7f:29:1e:a3:
         4c:37:09:ab:58:f6:06:93:ae:8c:bc:e9:89:8f:d8:13:04:35:
         91:2e:d9:ca:1b:89:d4:3e:1c:cc:b5:45:6d:5f:e9:d7:8b:94:
         ef:c2:77:29:0b:ae:dc:d3:1e:df:8d:77:db:a4:86:02:18:67:
         6e:b3:05:9e:30:d4:5d:2d:15:b5:bc:84:82:85:5f:c6:e5:b3:
         1a:ca:67:ff:69:01:cb:e3:01:20:73:17:07:43:0b:74:3d:fd:
         29:d2:6c:6f:2a:63:b0:99:f9:56:23:07:2d:a6:64:d4:db:42:
         e6:21:de:7f:42:05:9c:60:63:33:f8:78:95:09:71:9b:8c:ab:
         f0:69:3d:97:fe:7d:43:0f:1c:37:cd:c7:3f:9c:27:e1:d4:6a:
         e4:c2:01:56:b2:8d:b2:06:a4:b6:3c:ad:6d:99:49:23:37:74:
         ea:64:42:ce:c5:b2:88:df:1c:de:1d:dd:bb:74:91:fc:be:4c:
         dd:af:bc:de:7e:98:7a:94:6d:b0:ca:95:3f:f2:c7:22:ec:e4:
         f0:2c:b2:a0:0c:ac:f0:01:13:49:5d:6d:fe:77:50:64:f6:47:
         d6:87:f9:91:8e:4e:a2:69:b6:84:a7:fa:9e:58:57:cb:f1:5f:
         73:6d:45:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:30:41 2025 by rpki-client