Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ad579ec0-f705-35d7-8ad1-396e1b0d2385.roa
File:                     ad579ec0-f705-35d7-8ad1-396e1b0d2385.roa (raw, json)
Hash identifier:          8qq5RxFakkgljFBUl6YFj4Zdzg4qSaQ0kSKj24QkahQ=
Subject key identifier:   1E:94:3F:7B:30:AF:98:14:BD:2D:7A:7B:2C:39:9D:5E:17:29:BB:62
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE196772EE7658FCDCDCC48C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ad579ec0-f705-35d7-8ad1-396e1b0d2385.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36522
IP address blocks:        67.69.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:77:2e:e7:65:8f:cd:cd:cc:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=14d8de0d-b474-4251-80e3-1680601bff6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4d:2b:fb:1a:43:83:f8:2c:a5:94:7b:d3:35:
                    f6:0c:08:a3:be:44:dd:33:c1:c5:f4:3a:73:da:0a:
                    d1:5e:f7:6a:c8:8e:77:2e:ef:b0:56:c5:7c:e7:76:
                    9d:ee:b4:45:4c:6a:2f:ff:a0:9a:18:42:16:b6:77:
                    47:54:7a:b9:b2:b6:57:fd:ee:48:19:44:be:fc:66:
                    fa:ea:81:2e:fc:e8:08:1e:ef:7b:35:aa:ec:42:ea:
                    71:5e:28:66:65:74:4b:da:5f:f1:80:85:a3:ec:f4:
                    41:b9:49:cd:b2:87:41:bb:3f:41:55:ee:f9:d3:9b:
                    ed:46:fe:a4:4f:36:2b:61:f5:cb:f1:ea:b3:7f:9a:
                    89:c3:3c:8c:84:af:81:4c:21:77:eb:4e:ad:d0:c8:
                    cd:a1:13:f4:81:49:02:ee:d4:5b:c3:85:64:05:e5:
                    84:cc:d8:90:d3:36:d9:e1:a7:cf:7d:ca:51:09:d2:
                    d8:bb:cf:fe:44:9e:60:35:64:dc:91:78:5c:74:44:
                    55:6d:16:75:e4:16:26:51:b2:54:d3:2e:36:b9:f9:
                    ee:11:fa:57:1e:bd:2c:12:b3:64:73:1b:79:57:8e:
                    e4:27:e5:18:c6:f5:7a:ed:80:53:35:28:3c:b0:1a:
                    73:10:ab:a4:4e:4c:1b:8a:83:9d:cc:16:54:05:83:
                    1b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:94:3F:7B:30:AF:98:14:BD:2D:7A:7B:2C:39:9D:5E:17:29:BB:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ad579ec0-f705-35d7-8ad1-396e1b0d2385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:5f:c3:26:57:62:31:71:2b:16:8e:cc:f9:00:03:76:36:12:
         dd:6d:a9:b0:3a:be:48:9b:ab:3d:c4:a1:c4:c0:9a:7b:1d:f9:
         39:21:81:cc:2a:f9:8d:ca:d2:0d:17:80:1b:f1:ee:6e:82:17:
         30:0e:a3:35:60:c0:9c:55:46:28:f7:c1:e7:8d:e8:ed:73:c4:
         37:f8:cd:c5:cf:bf:c8:ff:ac:61:b9:2c:a3:6a:e7:24:83:e1:
         87:79:a8:22:2f:c0:69:02:bc:55:11:a4:8c:c7:c3:83:9b:c2:
         c4:51:81:52:c7:be:36:70:2e:5d:de:b9:ba:ca:19:53:65:82:
         1b:ac:37:03:dd:2e:2e:ad:1c:10:3c:87:57:69:e4:35:c5:64:
         d4:e9:32:c6:6d:e1:6a:51:44:d2:00:bd:f6:12:2f:2c:f0:41:
         35:b0:88:98:b1:a4:19:ec:27:18:f6:84:61:7e:d4:96:12:b6:
         8b:e4:34:50:e7:f2:64:6b:97:fe:6b:43:cf:92:01:34:0b:f2:
         b9:44:54:2b:31:7d:bb:09:43:27:52:64:57:24:4c:3e:af:57:
         91:10:20:df:66:59:f6:53:f1:a8:fb:6b:ee:07:3c:82:1e:2e:
         e7:9d:52:2e:25:9f:e6:0f:ec:56:27:b8:50:84:3e:af:68:d7:
         48:7b:a4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:52 2025 by rpki-client