Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/0765952d-a457-3765-a944-105f3cf22bdf.roa
File:                     0765952d-a457-3765-a944-105f3cf22bdf.roa (raw, json)
Hash identifier:          lKLnTXCyk+u2QKueqE2vmtcBONiYmf+KGy357YM7WNg=
Subject key identifier:   B0:6D:32:13:91:B8:72:46:CC:51:40:01:EB:B1:98:CA:6B:45:99:87
Certificate issuer:       /CN=6719c5f2-5819-4972-b430-9d76eb88cb36
Certificate serial:       010D0C9F4328584B6A30A691E9ACADAC2E1A0AF0
Authority key identifier: D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/0765952d-a457-3765-a944-105f3cf22bdf.roa
Signing time:             Sat 04 Oct 2025 23:21:25 +0000
ROA not before:           Sat 04 Oct 2025 23:21:25 +0000
ROA not after:            Sat 03 Jan 2026 00:21:25 +0000
asID:                     397735
IP address blocks:        74.120.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:30:a6:91:e9:ac:ad:ac:2e:1a:0a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6719c5f2-5819-4972-b430-9d76eb88cb36
        Validity
            Not Before: Oct  4 23:21:25 2025 GMT
            Not After : Jan  3 00:21:25 2026 GMT
        Subject: CN=0bce505c-6aaa-47a4-976d-de4fdf8ce5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:eb:21:2e:b7:d7:7d:e9:02:4f:1c:c1:d8:ab:
                    14:84:ad:57:c6:47:68:12:3d:25:84:e0:33:e0:48:
                    fd:66:f6:dc:f3:4c:0b:5b:6e:c9:e1:51:1c:39:ee:
                    84:d1:48:03:ad:6e:01:a9:36:46:44:17:26:55:b4:
                    80:f0:61:4f:9a:a8:c1:04:81:f8:9b:a4:dc:e6:52:
                    e4:55:e0:0d:18:8c:1a:92:0e:08:2b:6b:9e:99:6c:
                    58:68:39:6e:36:32:3e:7a:02:3b:b6:01:ce:85:6c:
                    f5:59:80:6f:d0:7f:d6:e6:e7:f6:a1:c8:9f:14:28:
                    0a:f4:96:70:5f:f5:3c:2f:09:f1:52:a4:da:59:ac:
                    ba:d4:8f:de:72:a2:54:ea:78:e1:c9:7d:fc:9b:44:
                    d8:8e:bf:c5:79:44:76:aa:03:e2:4e:5c:a7:7a:c8:
                    46:46:82:f8:81:14:6a:24:93:1a:f0:54:fc:5b:00:
                    06:00:3c:72:dd:fb:c9:fb:5e:a9:23:d9:af:52:8a:
                    bb:04:36:5b:cc:12:a1:08:37:d6:fb:dc:89:6b:32:
                    32:fc:99:7f:91:da:44:71:bf:7d:3f:51:0e:a6:ca:
                    aa:e1:38:ed:d2:1d:ad:7e:12:4e:b7:44:d2:09:e7:
                    19:e2:27:d3:18:7c:2e:0e:0f:f7:15:41:0e:22:ef:
                    d0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6D:32:13:91:B8:72:46:CC:51:40:01:EB:B1:98:CA:6B:45:99:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/0765952d-a457-3765-a944-105f3cf22bdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:3d:8f:c6:bc:5d:c4:4b:45:e3:aa:b7:cd:5b:2e:36:31:c0:
         50:44:6e:61:c1:a8:9b:51:1f:af:6d:ec:c4:8b:83:27:ab:88:
         21:37:eb:c2:15:4a:68:53:17:af:2c:7f:6f:0f:a1:2f:cc:c1:
         fd:7a:40:e1:84:18:51:c2:82:ae:8b:3d:d3:02:1d:b2:8b:27:
         86:67:36:be:ad:7c:3c:86:99:6b:dd:4b:0a:b0:f4:ca:d4:5b:
         50:ed:b9:ec:8e:98:b8:47:51:fd:2d:b9:7d:45:34:73:d8:e9:
         e3:1b:66:e6:92:12:32:91:18:0a:2c:7f:c1:38:16:78:c2:7b:
         80:48:75:99:0d:a2:36:de:4d:8e:79:3f:d7:8e:37:16:90:b6:
         9e:a6:98:48:4f:6c:ce:72:61:a5:3b:fa:1c:b6:26:5f:d8:49:
         55:d6:1f:bc:c2:c2:dc:03:3f:5a:48:c3:ce:14:a7:55:2d:2d:
         09:6a:5d:01:47:2f:46:2f:90:d9:3d:ad:c3:a6:cc:43:86:5a:
         d4:5c:3d:0f:75:9c:fc:4b:17:5f:49:51:0e:a2:71:4b:ba:e8:
         b7:36:4e:d8:42:1a:88:fd:be:b2:a0:06:c5:96:d1:18:54:ff:
         13:97:91:6c:ed:3d:e4:d5:4f:01:39:ee:91:6a:16:07:fd:a1:
         a2:83:bd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:26:56 2025 by rpki-client