Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/2bd77894-b575-3384-81b8-b994869b3293.roa
File:                     2bd77894-b575-3384-81b8-b994869b3293.roa (raw, json)
Hash identifier:          OOpWzqK7OU2jxagidKEBHcqm40J7kIpNp6B/1wswGG4=
Subject key identifier:   7E:1D:FB:8B:2E:96:AE:42:DB:D0:1E:6B:6A:7E:D4:E9:49:29:EC:11
Certificate issuer:       /CN=bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9
Certificate serial:       010D0C9F4328584A4DA043AF4EEE718912A14A00
Authority key identifier: F5:0C:E1:7B:3F:80:EB:2A:B8:70:CA:72:EC:70:69:50:0A:C7:8B:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/2bd77894-b575-3384-81b8-b994869b3293.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     29909
IP address blocks:        74.220.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:43:af:4e:ee:71:89:12:a1:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=408e26ad-a4f4-4023-a448-faef6e37e2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:46:c3:0d:fb:b7:a2:7b:07:c2:f0:f6:84:bf:
                    ce:7a:96:6a:30:2d:f3:5c:20:76:1a:b5:31:68:27:
                    58:f7:ad:39:00:1a:96:12:62:9a:b8:fc:57:d4:b1:
                    98:01:61:94:d6:ec:cd:39:93:0b:64:f2:d5:ce:c4:
                    13:50:67:8f:57:0e:20:1c:6c:ad:a6:81:0a:c5:34:
                    1a:4f:a6:f4:df:ba:9a:a3:b8:0d:9d:96:59:95:28:
                    64:a4:41:f3:bc:ad:f0:ee:0e:7e:cb:ba:c2:e6:19:
                    c6:62:d5:32:cc:a7:12:c9:ac:d0:d6:9b:fe:36:c4:
                    e1:5f:17:54:25:a5:3e:9f:40:9d:4d:cc:82:65:f9:
                    0d:4f:85:42:4a:ac:f4:cb:52:16:e6:fb:a1:b4:35:
                    51:c1:f9:54:81:02:1f:62:9b:43:d7:ee:14:fb:25:
                    72:14:1f:10:42:7b:b5:c4:5e:b8:64:89:ed:6d:70:
                    7e:34:9f:e1:89:28:61:f8:71:a8:9c:c3:62:52:5f:
                    96:18:fb:57:11:72:27:4c:98:e4:c4:cc:5b:7c:30:
                    92:66:83:85:30:c1:72:96:63:d3:e7:d6:b8:86:1d:
                    77:fc:0e:10:15:9d:7f:17:12:43:f3:96:79:84:42:
                    d8:cc:71:f9:db:e8:c7:48:ab:71:fa:6a:1d:d0:01:
                    41:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1D:FB:8B:2E:96:AE:42:DB:D0:1E:6B:6A:7E:D4:E9:49:29:EC:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/2bd77894-b575-3384-81b8-b994869b3293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.crl

            X509v3 Authority Key Identifier:
                keyid:F5:0C:E1:7B:3F:80:EB:2A:B8:70:CA:72:EC:70:69:50:0A:C7:8B:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.220.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:36:79:64:4b:15:10:0a:7f:cf:36:4a:bb:ac:aa:ca:9d:2c:
         ce:16:f8:83:d7:6f:36:cf:e1:23:af:f8:cd:d7:13:dd:84:5f:
         79:4a:bf:24:70:cc:05:8d:cc:54:61:75:c7:71:06:85:9c:de:
         5d:85:20:35:64:30:2e:e6:fc:7f:e1:78:76:95:c1:35:13:e0:
         10:af:a1:aa:a9:1d:33:fc:b6:c5:28:a9:d7:45:58:a9:40:30:
         84:3e:75:67:4e:d8:a6:b6:af:2d:e9:9a:b3:e8:dc:75:c8:7e:
         f0:3b:c5:f3:37:f9:49:56:93:8e:63:1d:a9:ea:28:18:ba:14:
         6a:14:33:1c:24:ef:7d:03:c1:e6:a3:8d:ed:14:1b:60:08:b6:
         b0:8c:8d:20:32:d8:39:fc:d5:e5:a5:05:7e:e9:0e:c3:4b:a4:
         84:e8:9f:7d:94:ff:4b:09:cf:d3:6e:26:68:22:e0:3b:7f:b4:
         af:ab:36:ff:ba:a3:1b:a5:06:a4:70:de:cc:60:d1:3f:76:ec:
         78:db:81:2a:50:7c:f0:7b:9f:4e:71:16:8a:39:40:8c:48:77:
         59:20:af:f7:b4:41:46:51:e8:f0:41:61:4e:14:16:82:d3:7d:
         a8:5f:5f:3c:5d:6e:47:96:20:78:84:37:2d:55:8b:d0:7d:f8:
         21:06:ff:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:27:16 2025 by rpki-client