Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/c1428898-ff6a-36ce-9129-b74449e03ae0.roa
File:                     c1428898-ff6a-36ce-9129-b74449e03ae0.roa (raw, json)
Hash identifier:          m+0zmYh37Whc+rMj58I+eHVB3hpjNXCRsj4tHAOV8cY=
Subject key identifier:   26:24:B4:4F:DA:71:50:10:24:4D:93:32:77:BD:1D:C7:BB:29:96:28
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584B3987029CF8262CE8F44D2F80
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/c1428898-ff6a-36ce-9129-b74449e03ae0.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     4213
IP address blocks:        74.116.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:02:9c:f8:26:2c:e8:f4:4d:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=e9d6f23e-129d-4519-8f58-b5939b61d166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:74:a9:a4:6b:02:74:9d:68:4a:73:52:40:78:
                    93:27:50:4a:e1:6b:1d:e8:7e:bf:73:14:d7:45:9f:
                    41:4a:83:9c:3d:cc:af:67:49:34:e1:74:e0:dc:fb:
                    34:4b:89:25:1b:15:22:65:50:cc:b3:62:4e:8e:ba:
                    e5:a4:09:5f:36:fc:7a:92:8e:b8:93:09:b8:dc:de:
                    95:45:ef:6f:f1:1b:ed:aa:f6:fa:dd:c9:2d:84:11:
                    be:ed:af:fd:64:0f:82:8f:dc:2c:15:fa:bb:f9:f7:
                    b2:28:38:23:fc:e4:e3:c5:fb:80:d2:c0:f5:56:77:
                    21:f7:fe:fb:3c:6c:ac:9d:fd:5c:e9:c0:4c:09:fd:
                    0b:2d:7e:0c:6e:70:be:01:65:d4:f3:c7:0a:ea:84:
                    96:6b:6a:1b:0c:5a:bc:2b:76:07:5a:c7:33:03:a1:
                    2e:30:ed:ee:93:fb:b8:25:8b:53:2a:f6:7f:ec:12:
                    58:f9:bb:b6:30:fe:c5:09:3b:f4:be:3f:1f:6d:9f:
                    f5:60:f8:c6:90:3f:ee:61:a4:72:87:92:41:6e:47:
                    0d:81:4c:a3:ed:02:ca:df:65:48:1a:77:e2:79:b3:
                    52:8d:36:4e:a6:da:93:e7:2e:09:5c:0a:d9:3d:11:
                    0f:f9:93:e2:4a:76:52:5e:95:7e:19:b0:a4:c4:fe:
                    10:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:24:B4:4F:DA:71:50:10:24:4D:93:32:77:BD:1D:C7:BB:29:96:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/c1428898-ff6a-36ce-9129-b74449e03ae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:3b:5d:d9:b0:42:84:ef:64:df:f4:57:fa:15:83:2c:82:5f:
         25:1d:da:e7:ad:4d:50:18:01:fb:0b:d9:25:1e:a4:53:ff:98:
         23:39:10:7f:46:e1:d7:1c:ce:6b:ae:a0:ad:41:04:a2:df:50:
         69:d7:23:53:0a:92:57:b0:25:9b:b8:ad:37:96:a0:ca:82:46:
         ae:eb:95:c1:de:cf:40:c6:3e:69:d2:cd:6d:22:3b:16:1b:27:
         92:61:07:47:bb:5d:fb:05:80:7c:2a:e5:2c:a3:38:91:e3:f3:
         51:fc:12:ec:26:89:4d:73:1f:72:44:2f:5d:06:3d:b1:7d:f5:
         ab:ce:64:74:1d:1f:e3:bc:a9:29:9b:6e:12:3d:6c:58:35:76:
         44:67:84:65:00:fb:35:62:3a:6c:bd:fd:9c:7f:ed:8e:24:2b:
         1f:2b:6e:11:83:05:ee:e4:f5:8a:eb:2b:5b:e2:35:d3:73:fe:
         0c:43:c8:91:1d:3e:23:7e:0f:9e:cd:32:b4:b0:5a:14:88:a3:
         c1:c1:ae:36:08:f4:e6:43:01:bc:7c:7e:6a:1a:23:bc:1e:31:
         c6:3a:ee:9f:11:e3:a7:3a:2e:96:dc:3d:69:bb:92:ce:82:bc:
         a5:0b:7c:2a:71:c7:fd:da:7a:fc:36:a4:65:2c:cb:af:2e:8c:
         80:fb:1c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:06:16 2025 by rpki-client