Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/af260bd0-8636-3259-a427-f13f89c8c476.roa
File:                     af260bd0-8636-3259-a427-f13f89c8c476.roa (raw, json)
Hash identifier:          FQcJio0cMRQnhERKNj7dCZZ4BkbJSiuohQs957y5Lbs=
Subject key identifier:   DA:88:E5:E1:93:10:5D:C9:DE:CE:08:C1:11:56:D1:61:18:65:A4:92
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A49A51EE082F5C88B38E75D80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/af260bd0-8636-3259-a427-f13f89c8c476.roa
Signing time:             Mon 23 Jun 2025 14:47:28 +0000
ROA not before:           Mon 23 Jun 2025 14:47:28 +0000
ROA not after:            Sun 21 Sep 2025 14:47:28 +0000
asID:                     15290
IP address blocks:        74.216.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:a5:1e:e0:82:f5:c8:8b:38:e7:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 23 14:47:28 2025 GMT
            Not After : Sep 21 14:47:28 2025 GMT
        Subject: CN=7329dbcd-4a8b-4678-872b-bf4ba2aae421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5a:84:4d:18:a4:e4:3f:28:3c:68:d8:40:cc:
                    59:a8:8d:31:f7:89:1f:38:df:53:14:3e:02:43:26:
                    dd:24:f8:db:e1:dc:90:c2:83:ef:99:c1:f5:2f:81:
                    2c:c8:10:3d:8b:22:6b:4e:98:80:a4:19:28:5f:d9:
                    f4:a8:fd:a0:dc:15:97:d1:7d:2b:34:22:78:d5:d3:
                    20:86:66:79:f3:c5:49:4d:52:4f:c1:62:66:25:6b:
                    dd:90:5d:2e:7e:7b:e9:80:4a:46:1e:4a:b0:dd:e2:
                    0e:16:e4:bd:b5:b4:2a:c0:17:64:65:eb:c3:f7:f4:
                    76:c9:42:30:46:16:fa:e2:61:31:54:b0:16:88:b6:
                    8d:2c:8f:ce:d3:ef:0e:7f:99:ab:d8:a1:9e:0d:1b:
                    78:1f:92:46:a2:02:5c:42:70:e8:b0:ec:ed:73:93:
                    a9:6f:9d:11:8f:7a:5c:42:97:25:f3:b6:31:e2:10:
                    37:c1:c4:fa:06:d6:23:ec:d4:d9:dc:05:3e:9a:ef:
                    68:9c:ad:94:aa:cb:79:f5:7b:e8:01:8e:3f:79:7e:
                    d6:92:cd:96:f9:05:64:99:86:48:97:a9:51:50:86:
                    b6:67:34:65:70:05:46:c4:a3:29:07:40:e3:7a:99:
                    5a:ff:29:6d:4f:6e:88:7f:34:cd:8a:02:13:fa:37:
                    d0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:88:E5:E1:93:10:5D:C9:DE:CE:08:C1:11:56:D1:61:18:65:A4:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/af260bd0-8636-3259-a427-f13f89c8c476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.216.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:cc:e5:26:85:a5:09:8f:74:74:f8:a4:9d:4c:6b:ba:9e:d3:
         96:34:c6:de:c9:87:d9:92:5e:5e:05:32:c8:f8:59:e7:c5:41:
         f9:c2:31:b1:45:07:dc:8c:34:75:50:5c:ad:75:a2:f7:c5:fa:
         35:a1:15:97:17:84:94:49:96:23:da:48:6c:e8:51:a0:1f:58:
         95:91:1b:42:da:81:9c:d9:af:1a:3c:ab:d6:0e:58:cf:13:96:
         9e:81:38:0b:e4:2b:2f:f3:50:aa:66:7a:76:18:3f:95:aa:d1:
         fe:19:d2:c0:d4:82:3c:e1:08:e4:bf:b4:16:5d:ab:61:85:23:
         29:69:fc:dc:7f:ed:b2:99:ff:d8:75:87:7d:f0:7d:55:1a:41:
         87:30:98:8b:58:13:5f:57:0f:a5:17:5b:a9:c0:0b:80:59:45:
         e6:52:00:1f:f4:e7:ed:7f:be:8d:c5:07:ae:25:67:74:78:22:
         09:88:3b:b8:26:0e:02:43:81:63:4b:6c:56:11:52:1f:5a:cf:
         28:b8:da:ea:a1:35:58:3e:29:39:37:d4:03:8f:f5:7d:b1:ed:
         81:67:dc:e9:48:a1:dc:63:77:4a:c6:05:ca:f6:b1:ea:03:4b:
         4d:c6:53:ba:ab:63:fa:f5:10:0a:a9:cf:f0:4c:71:c2:78:eb:
         85:a9:ac:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:33:43 2025 by rpki-client