Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/3a92cd84-af85-3568-b08e-19814c859ad8.roa
File:                     3a92cd84-af85-3568-b08e-19814c859ad8.roa (raw, json)
Hash identifier:          bD8Z4XgozMDMjXh3SrNf0ULaOXcBmJ+55XcJ97zr8mQ=
Subject key identifier:   24:25:AA:88:C1:B8:D9:56:B9:21:3A:F8:0E:60:0C:96:05:30:E6:EE
Certificate issuer:       /CN=58eef8b8-39c9-495c-b889-44faff13a8aa
Certificate serial:       010D0C9F4328584A43DAFFC3A46F647FD91029F0
Authority key identifier: DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/3a92cd84-af85-3568-b08e-19814c859ad8.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     397016
IP address blocks:        74.81.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:da:ff:c3:a4:6f:64:7f:d9:10:29:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58eef8b8-39c9-495c-b889-44faff13a8aa
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=fe6d6ab0-32b4-458c-9b48-c7e438ef80ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d7:cc:8a:27:1c:4c:0a:29:28:50:5b:b5:03:
                    1c:c8:29:45:2c:9c:fd:30:eb:77:6b:3d:d5:12:2d:
                    50:b5:33:0c:02:67:64:f9:58:db:75:67:4d:d1:37:
                    ae:f3:17:91:99:0b:2a:51:ae:e7:b8:c6:29:e8:9f:
                    de:16:e0:5d:1c:90:42:02:de:df:5a:b2:b5:ae:ec:
                    0d:9b:b3:47:9e:10:d2:eb:5c:cd:be:2b:3e:28:b2:
                    2f:a9:af:aa:87:d8:bc:a4:7f:a6:05:ac:4e:09:40:
                    14:f9:86:92:0a:f9:aa:84:4f:04:83:27:39:63:f4:
                    0e:8c:ff:9e:ca:dd:3c:83:e5:c5:3a:f5:df:97:67:
                    ed:bb:3d:d1:bc:ef:04:fd:da:58:0f:49:af:fd:04:
                    07:fd:0b:26:1c:c8:b7:7f:e5:9d:1e:eb:51:c6:79:
                    fe:84:15:cf:43:6d:72:84:53:1c:be:19:3d:63:18:
                    e7:c9:31:19:f0:f5:94:74:48:b5:34:63:ae:63:69:
                    41:6d:4c:c0:98:09:8e:0c:19:c2:ad:31:4e:42:1d:
                    6d:27:26:59:3a:4c:07:24:3f:cb:04:d8:1b:15:7c:
                    09:0e:27:e5:dc:c5:6e:78:c4:95:34:f7:ca:34:d7:
                    fe:23:50:16:9c:90:3e:82:20:33:ec:b5:d3:40:e4:
                    ce:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:25:AA:88:C1:B8:D9:56:B9:21:3A:F8:0E:60:0C:96:05:30:E6:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/3a92cd84-af85-3568-b08e-19814c859ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl

            X509v3 Authority Key Identifier:
                keyid:DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.81.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:c7:87:3d:a6:97:e1:c2:f3:50:83:4a:23:6c:ab:eb:61:65:
         98:3d:28:91:45:69:39:6f:be:4f:42:5f:09:64:72:0d:97:ed:
         ef:68:b5:0e:90:47:a9:d3:4f:32:68:e4:f6:94:64:24:72:92:
         5e:b6:ed:df:04:9b:f2:bd:d6:17:62:34:09:23:4a:36:94:d9:
         6c:7f:a5:38:05:e7:37:df:02:a2:78:82:c4:e6:c9:d0:1c:8e:
         50:27:f5:b0:e3:b4:74:25:0a:18:f2:d4:f3:bd:fc:b1:a6:87:
         43:b2:06:94:50:48:d3:fd:9b:9b:d4:4a:1e:cb:62:f1:a1:97:
         68:fa:a0:cf:bf:89:a2:e1:44:7e:54:ca:1b:27:6a:09:a6:40:
         4d:b4:50:48:6f:ae:b6:d0:bb:d5:76:0e:83:b6:62:9e:de:d3:
         56:4c:84:d7:66:b8:db:fd:f7:47:3c:1c:8d:e9:41:b8:6c:c3:
         78:a5:e6:6e:55:42:b4:2a:bb:90:2d:68:18:da:81:14:a3:be:
         ba:99:b9:b9:d2:7a:8f:c6:92:18:d4:cc:31:81:b5:81:ad:33:
         88:d0:7a:85:e5:d3:3d:af:d6:8c:81:10:46:bf:f3:a2:51:66:
         c7:ea:c9:34:60:59:6f:68:7b:67:6d:f0:96:49:99:d4:5d:57:
         4f:2b:28:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:11:55 2025 by rpki-client