Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/3c7c2961-8a03-3720-9395-0ed37fe9f383.roa
File:                     3c7c2961-8a03-3720-9395-0ed37fe9f383.roa (raw, json)
Hash identifier:          txacakLOB9H9cMPcwrtTOmK05XGfHh3tMtwmZPcz5kw=
Subject key identifier:   98:58:C5:72:5A:21:14:B6:03:41:81:BD:95:00:2D:9E:CD:4D:CB:33
Certificate issuer:       /CN=17c62883-899d-4b86-8800-e9715d10a482
Certificate serial:       010D0C9F4328584ACE0B90FD41BA2B1D6A20F680
Authority key identifier: DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/3c7c2961-8a03-3720-9395-0ed37fe9f383.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     26630
IP address blocks:        74.113.192.0/21 maxlen: 24
                          204.86.64.0/19 maxlen: 24
                          206.201.64.0/20 maxlen: 24
                          208.93.241.0/24 maxlen: 24
                          208.93.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:90:fd:41:ba:2b:1d:6a:20:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17c62883-899d-4b86-8800-e9715d10a482
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=fc434bb7-cfd4-4e6e-afa2-ce68be7fd696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f0:01:3f:e8:ca:95:af:c0:82:1f:de:23:b1:
                    c2:0e:f5:aa:9e:1e:c7:f3:4a:e3:67:a8:0b:34:de:
                    21:a9:0d:62:1a:f0:00:c8:f7:0a:a4:28:8e:b2:74:
                    90:b8:d6:40:36:af:1a:fa:2a:86:c4:23:b9:12:70:
                    2c:70:98:e8:13:68:2e:8b:02:fa:1b:9c:d3:1a:0f:
                    40:20:9d:db:7e:6f:92:64:13:b4:70:0f:47:05:4c:
                    8c:9c:96:cc:ff:1e:dc:46:0b:cc:d9:21:82:8f:35:
                    ac:ea:91:ca:ee:67:48:5d:f5:e9:99:8a:ea:25:9f:
                    8b:bc:38:fd:27:d6:de:71:96:8f:27:0c:66:8e:a7:
                    d4:1c:69:a8:f6:bd:ec:d4:fc:91:fb:e9:c7:eb:cb:
                    7d:5d:f8:21:65:a5:5f:5c:14:ef:e1:f4:6a:19:e2:
                    9a:c1:08:f3:54:c7:d5:e8:e4:98:33:de:1b:f6:fc:
                    b1:91:bd:13:73:88:00:c7:b9:95:07:ac:7e:51:02:
                    01:bd:8c:83:af:83:4c:71:be:89:f0:4c:5f:ff:a2:
                    13:49:9b:a5:76:13:8b:e8:22:40:e7:a2:12:8e:8e:
                    8c:0d:93:93:28:02:1b:49:ce:27:51:e1:43:5a:1f:
                    ad:c6:c6:90:6f:73:a1:f1:a8:50:39:7b:7f:0f:3d:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:58:C5:72:5A:21:14:B6:03:41:81:BD:95:00:2D:9E:CD:4D:CB:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/3c7c2961-8a03-3720-9395-0ed37fe9f383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl

            X509v3 Authority Key Identifier:
                keyid:DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.192.0/21
                  204.86.64.0/19
                  206.201.64.0/20
                  208.93.241.0-208.93.243.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:6b:e0:44:a3:6b:f9:e4:d6:3e:e5:04:2e:32:f6:9d:dd:ae:
         f2:58:52:3e:5f:d3:ea:ac:77:4c:31:3e:bb:d3:38:6f:57:e3:
         c2:b1:53:2d:3d:c7:b3:4e:6d:b1:b5:45:57:e1:da:95:9a:02:
         55:55:eb:62:fe:ce:01:a3:12:25:01:c2:f0:35:3e:79:d5:50:
         93:af:ec:95:c0:96:63:2f:77:5f:9e:e6:f3:98:11:c0:75:5b:
         60:30:6e:c8:f6:2c:24:61:1a:5a:e8:af:b4:ed:72:00:c2:69:
         2a:24:d6:2f:bb:cb:c8:c5:13:0a:79:37:ef:4d:13:49:28:12:
         05:6e:51:98:82:d0:fc:85:bd:92:14:c1:9f:6f:13:bc:5e:1e:
         42:81:d0:34:6c:ef:53:ee:4d:51:88:97:76:89:90:5d:fb:5b:
         a9:bd:47:8c:da:7e:a7:08:de:fb:ab:9e:f2:16:65:8b:a3:54:
         b8:ac:18:0d:f7:70:13:7c:de:7a:0a:77:06:44:a1:3a:77:64:
         e8:4e:9a:90:88:28:3c:9a:18:fc:f9:d1:5e:e9:1a:78:f4:13:
         d2:ff:9e:6f:7a:12:b2:38:9b:33:b5:91:80:1a:d9:55:d6:b2:
         3c:be:51:c5:a4:04:9b:14:a5:25:1b:ad:83:6d:7d:fb:4d:75:
         4b:cc:ad:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:50:46 2025 by rpki-client