Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/83df6527-ea07-3578-af70-41de2a6da837.roa
File:                     83df6527-ea07-3578-af70-41de2a6da837.roa (raw, json)
Hash identifier:          b/5bgtkKozmLJY9G4HaJ5rrUfbbsIN0fs8+HNYLx1gY=
Subject key identifier:   49:37:F7:F5:34:8A:A4:FF:AC:FB:E7:47:FA:91:0B:6B:3D:0F:9B:35
Certificate issuer:       /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial:       010D0C9F4328584B398704F3F02FD2F85EE31998
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/83df6527-ea07-3578-af70-41de2a6da837.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     398420
IP address blocks:        74.126.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:04:f3:f0:2f:d2:f8:5e:e3:19:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=97693ca0-5ca2-44cb-b846-ca7504383edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8b:dc:d3:98:7b:e5:09:0a:0c:b2:8c:4f:ef:
                    e1:d5:a4:a5:56:36:33:8c:01:80:7e:db:3f:96:2a:
                    57:64:14:cc:79:1e:32:5e:d3:ae:08:e1:6c:e5:43:
                    9a:b5:10:2e:0b:2c:ed:81:41:bc:c4:74:23:27:e8:
                    dc:3d:59:97:83:e0:64:4b:d6:5e:29:a9:21:43:18:
                    71:3d:47:8c:fb:06:c2:19:cc:9f:4e:bd:be:00:f4:
                    39:68:c6:b0:1f:f6:df:81:c9:b2:b4:d7:25:c0:ab:
                    00:83:df:57:82:ea:7a:c5:0f:dc:c8:98:bb:ea:8f:
                    8e:e3:04:d9:db:30:1d:e7:76:ec:89:78:d8:5d:d4:
                    3a:51:4c:de:9a:68:82:d5:76:fd:24:69:24:3b:c2:
                    24:ab:65:75:f0:ca:bb:06:e1:e8:b8:8a:bc:00:05:
                    03:3d:21:03:6b:bf:0e:bc:20:d5:97:1b:90:7f:1f:
                    3e:83:ba:06:c6:7f:73:2b:08:8d:98:91:42:de:75:
                    dc:02:e3:36:b9:bb:12:8b:b9:72:5f:81:8c:6d:5b:
                    8f:99:27:6a:89:6d:68:da:9f:e5:c3:89:55:4d:26:
                    88:20:85:d7:82:22:02:1c:18:26:70:b7:4c:45:78:
                    0f:b5:d0:0e:2f:1b:cd:f4:ff:0b:b0:ea:e8:e7:64:
                    ad:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:37:F7:F5:34:8A:A4:FF:AC:FB:E7:47:FA:91:0B:6B:3D:0F:9B:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/83df6527-ea07-3578-af70-41de2a6da837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl

            X509v3 Authority Key Identifier:
                keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.126.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:09:d5:41:ca:7f:ab:d7:a3:5b:af:6a:3b:c5:a3:b7:14:56:
         be:3c:52:5f:ca:fe:94:02:b6:f4:49:bb:14:a4:51:8d:be:33:
         9d:d8:63:e3:64:8c:f2:bf:cf:4d:c1:ac:6e:ee:6f:6c:6f:96:
         6e:93:57:b1:89:15:81:c8:48:b5:1c:99:95:34:7d:d1:4c:3b:
         d6:50:dd:b9:49:95:c2:6b:eb:7e:91:4f:04:a9:a5:ff:30:2a:
         72:d9:23:0b:b3:3e:76:e2:30:71:1a:63:88:ec:94:9e:51:b8:
         53:54:18:fe:08:83:75:a1:d3:45:90:a8:74:bc:89:af:a7:dd:
         74:5d:03:4a:40:a7:81:47:eb:7e:5b:55:c5:ae:bb:81:7f:7b:
         7c:72:7e:b4:ac:9f:51:09:45:3f:16:45:2d:a9:7e:56:97:0d:
         00:6f:4d:fd:6d:b0:6f:61:44:6a:33:43:1f:5b:a6:ae:26:2e:
         2d:e3:5d:31:cb:a0:e0:c4:29:f8:0f:c3:5f:50:7c:41:85:79:
         60:f4:8a:52:2e:9f:56:45:31:61:6e:e9:79:54:95:2c:c8:47:
         01:5e:0c:84:d4:50:6b:47:31:8c:e0:6a:e1:0b:78:4e:72:cc:
         75:24:fc:87:91:9d:ca:59:a0:1b:9b:a5:25:62:41:ff:0f:3a:
         dc:af:05:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:50:56 2025 by rpki-client