Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/06677e83-0c67-3aee-be47-b4de3ad1063f.roa
File:                     06677e83-0c67-3aee-be47-b4de3ad1063f.roa (raw, json)
Hash identifier:          fUufsGV/pbEKFv43EcaIHM8S2WbethaX1gAVfXbstRs=
Subject key identifier:   B8:28:13:BA:75:09:9F:99:C8:F0:EF:5C:E3:61:2A:9F:94:91:02:7E
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584A374ACF055FCC1063A8109F80
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/06677e83-0c67-3aee-be47-b4de3ad1063f.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     16509
IP address blocks:        74.121.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:cf:05:5f:cc:10:63:a8:10:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=901e35ae-aa82-4a3e-90ff-321a1c7df3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dc:5e:a3:a6:08:e4:96:bf:fa:39:62:71:a7:
                    25:eb:38:42:41:af:4c:f8:f2:eb:a9:f6:63:be:05:
                    3b:e6:52:7d:71:96:56:09:47:9f:2a:18:de:39:21:
                    c8:a3:53:53:ac:df:f4:41:d8:61:85:86:06:18:3f:
                    ed:ee:c0:51:ab:a2:01:b9:40:57:1d:2a:c7:b1:96:
                    ca:af:09:9b:a5:67:0a:44:18:08:bd:31:69:15:94:
                    1a:dc:63:b5:37:01:f0:27:8c:10:42:e3:81:36:a6:
                    27:b7:db:8f:c2:d3:1a:55:a5:96:21:cc:ba:0b:44:
                    d2:18:8e:bc:6f:6c:92:18:fb:58:d1:f6:61:e9:36:
                    5d:ef:c1:d7:ce:29:a1:e7:d7:d8:07:c4:51:a0:e0:
                    77:cc:93:a6:d1:fc:f6:84:9b:b6:95:10:01:12:7a:
                    ee:e3:9f:e7:b5:33:50:9c:a2:13:ad:7d:0b:00:fb:
                    1d:c8:92:b2:21:9f:7b:17:0e:af:a7:ba:16:fe:36:
                    d7:5e:39:aa:d7:be:40:5f:51:9a:77:c1:52:94:eb:
                    5b:5a:2a:0f:2d:b7:42:07:5b:e7:3a:dd:bd:ef:18:
                    17:69:f2:34:9c:e5:ca:a9:04:15:c9:af:bb:51:ca:
                    45:b2:f9:8f:21:d4:ec:6a:93:ed:0f:fa:0e:bf:97:
                    b0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:28:13:BA:75:09:9F:99:C8:F0:EF:5C:E3:61:2A:9F:94:91:02:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/06677e83-0c67-3aee-be47-b4de3ad1063f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:09:97:c1:6d:f5:c7:d3:2f:d7:3d:4c:49:9a:7c:eb:dc:ca:
         e5:21:c5:37:eb:90:a9:d2:63:75:88:8b:e1:04:a3:43:1a:15:
         46:6e:ac:d7:d6:0e:f0:f6:80:f2:b1:58:36:57:67:30:a3:d9:
         70:7f:0f:65:50:33:76:56:c7:ae:c8:b1:36:cf:65:d1:db:76:
         ce:0e:c5:58:f1:66:7b:04:95:a1:5c:f4:44:86:43:db:46:85:
         3d:b4:30:32:7a:69:bc:99:9c:6f:8a:db:ad:32:05:ed:ff:d0:
         af:7d:ff:e6:f8:59:d2:e3:b8:1c:06:66:31:95:b1:ef:42:a5:
         02:26:a0:a7:75:82:41:c1:bc:7a:60:95:40:e5:4c:98:ad:fc:
         d0:59:a4:ae:ef:52:01:71:ad:58:66:33:7f:01:bb:8e:e3:6a:
         69:94:aa:fd:bf:92:f4:11:c4:5c:42:69:db:79:c2:ce:ec:55:
         a4:0c:fb:13:0f:95:f2:0d:88:c4:a8:2b:89:6b:95:d7:3b:e9:
         5d:0e:6d:03:e2:f7:2b:db:b4:f9:7b:31:c0:ef:48:18:43:3f:
         41:62:f8:b6:85:54:b4:cb:e0:f7:03:1d:49:88:97:0e:67:db:
         e3:cb:d8:f8:6a:5b:c0:97:47:a4:30:e1:f9:50:a7:ed:a0:70:
         26:50:cc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:40:34 2025 by rpki-client