Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/67e46d88-8e2e-39ea-8a3c-ce409226fa92.roa
File:                     67e46d88-8e2e-39ea-8a3c-ce409226fa92.roa (raw, json)
Hash identifier:          LcAMeTeDaSvpDV3RVKvD+QS+/OTzfTa1gJDYq37uDZw=
Subject key identifier:   60:7B:16:02:7F:13:E0:16:7B:34:5F:A0:F7:2F:E4:F1:3D:C8:BB:7D
Certificate issuer:       /CN=08c424ab-20c3-4a52-bba2-1ccddeee2e34
Certificate serial:       010D0C9F4328584A3B7AEF1E14BDB555EA09F500
Authority key identifier: 0C:CA:C2:AC:1B:F8:B7:04:E6:D2:85:37:B7:55:32:4B:E7:DC:E8:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/67e46d88-8e2e-39ea-8a3c-ce409226fa92.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     16509
IP address blocks:        74.80.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:ef:1e:14:bd:b5:55:ea:09:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08c424ab-20c3-4a52-bba2-1ccddeee2e34
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=28204bb0-6f4d-4838-82d0-b07df19c646a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7e:4f:33:ec:c1:ba:18:41:46:59:37:af:70:
                    ea:ca:55:e2:35:25:1b:78:d5:23:68:03:b7:a3:55:
                    3c:cc:00:f6:d0:ba:ae:35:a8:74:41:c6:81:c2:27:
                    42:f9:94:93:09:4a:23:64:5b:e5:96:ed:54:c2:f7:
                    66:2e:a0:a8:ab:50:4f:91:70:49:67:fb:5d:5e:32:
                    3e:db:0e:ac:5d:6a:a2:b5:4d:ce:7c:4a:00:b9:a5:
                    98:e8:2d:1f:f4:44:f3:c1:43:af:b5:2d:74:75:2a:
                    2f:3d:49:dd:17:31:d0:12:6c:43:0c:19:4a:fb:e2:
                    23:cf:00:fe:cd:73:80:4e:08:77:a1:e5:d8:bc:b6:
                    1b:c5:5a:60:7a:d2:c3:ae:d6:17:ed:94:d4:58:01:
                    17:b1:38:f7:b8:9c:3d:97:e1:d9:7b:5a:dd:9c:a7:
                    b9:3b:95:94:ee:04:5b:be:14:5d:dc:4e:21:93:9d:
                    58:f4:c3:0b:86:d3:7a:dc:55:48:a2:e5:be:b1:6c:
                    72:62:78:32:34:8c:f1:94:fc:d6:6f:b4:d9:3a:5c:
                    e0:4d:05:cc:ff:b4:db:1f:58:08:84:49:f9:74:e5:
                    48:7f:86:d7:a7:07:c7:68:1c:85:18:4a:12:0c:c4:
                    32:79:e6:f0:3d:61:43:73:1f:09:26:de:d5:4b:79:
                    44:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7B:16:02:7F:13:E0:16:7B:34:5F:A0:F7:2F:E4:F1:3D:C8:BB:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/67e46d88-8e2e-39ea-8a3c-ce409226fa92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.crl

            X509v3 Authority Key Identifier:
                keyid:0C:CA:C2:AC:1B:F8:B7:04:E6:D2:85:37:B7:55:32:4B:E7:DC:E8:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:45:6d:41:21:52:a2:02:a4:49:ec:ec:be:84:42:f9:db:4f:
         e2:a3:0e:1c:f1:9f:64:28:0c:2c:7f:52:cb:19:be:d7:93:42:
         38:e7:c7:96:56:aa:5a:38:c5:4c:22:a7:0a:7c:c7:f1:80:b8:
         f5:39:f3:bd:77:ed:ed:55:66:00:cf:e6:8a:69:39:2c:7f:4d:
         96:6b:12:86:83:7b:90:10:f0:04:f7:b6:8b:4d:41:29:50:06:
         40:d8:18:ef:d6:c2:7c:42:67:15:84:22:69:94:a5:09:69:a3:
         73:84:c8:f6:b4:9a:cb:0e:4d:5b:1c:d8:6d:57:bf:ba:37:45:
         94:17:4a:7e:2b:22:ee:40:6c:e1:00:69:d5:fa:20:5d:6d:e9:
         e0:cb:7d:cc:4c:23:47:11:63:63:60:10:6c:c3:20:bf:dc:ce:
         14:81:f0:1c:bc:57:9a:b8:38:65:35:fc:72:26:27:d7:94:77:
         a8:0f:99:d6:7a:7f:a1:ee:6d:a1:3d:d6:c6:66:36:b4:ea:7f:
         20:42:ae:d0:16:ed:e7:65:75:6c:0c:c2:23:18:a9:1c:0b:86:
         c6:34:b7:49:bd:b0:22:f2:92:f9:12:47:b9:09:fd:83:08:59:
         8c:69:02:f7:b4:bb:5e:03:6b:8f:3e:0f:58:0e:fe:2e:e2:7a:
         6f:a6:91:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:54:58 2025 by rpki-client