Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/3ea9051b-7975-35bc-9f2f-e61d3077ba65.roa
File:                     3ea9051b-7975-35bc-9f2f-e61d3077ba65.roa (raw, json)
Hash identifier:          gRwtV/7dMHzHIEgdH1KfzTEkqahUef78FtGWqZsjqy8=
Subject key identifier:   18:BB:58:CC:06:88:56:4A:7D:7C:C4:60:23:04:5B:AD:A4:38:CF:5D
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584A34801C73E785F5DDA9DE6480
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/3ea9051b-7975-35bc-9f2f-e61d3077ba65.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     4540
IP address blocks:        74.50.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:1c:73:e7:85:f5:dd:a9:de:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=440f07ba-c639-4431-b7ce-429ed5e85021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:57:bc:99:14:b0:c9:19:f3:40:66:3f:fe:b2:
                    ba:dc:e4:95:66:0d:97:23:8d:32:63:35:fa:d5:35:
                    81:a1:00:28:f8:7c:53:0e:64:d0:10:80:8a:7e:10:
                    21:d4:8d:3e:84:53:99:1a:c6:27:b4:fa:de:4d:e9:
                    fc:3f:ed:64:cc:92:3c:bd:43:a4:41:61:4d:b4:b3:
                    6b:24:fe:38:03:07:64:d5:0e:1e:2d:96:3f:47:2a:
                    77:ee:09:13:9a:e7:4d:30:2f:dd:ed:d9:41:95:c0:
                    d5:3d:82:61:99:7d:2c:cc:f9:70:aa:10:52:6c:79:
                    63:93:d1:75:39:14:b7:66:b1:be:0f:bf:5b:ae:0f:
                    d9:23:12:52:9f:9b:c1:1f:92:3d:45:e7:7f:8a:45:
                    b4:2f:cb:83:21:ae:9b:02:a1:01:f3:62:fb:75:fd:
                    3d:95:60:95:80:97:64:0f:e0:91:58:37:72:c2:50:
                    1d:d7:9a:27:84:c1:fd:d1:39:81:b1:e0:0d:f0:e2:
                    c4:3b:e1:58:d3:f7:03:60:01:0e:4d:e5:51:55:d2:
                    b2:f1:4d:35:93:42:c4:66:62:a7:ef:f3:4d:fb:3d:
                    9b:6a:e9:58:ca:c4:5c:fe:73:1c:e9:66:76:6d:c6:
                    41:3c:79:2a:36:fd:1a:5b:e0:de:05:20:cd:c7:12:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BB:58:CC:06:88:56:4A:7D:7C:C4:60:23:04:5B:AD:A4:38:CF:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/3ea9051b-7975-35bc-9f2f-e61d3077ba65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:57:71:d6:aa:22:2c:8f:0a:ab:58:c3:93:35:93:ae:e7:4d:
         90:26:17:d8:34:93:31:17:0e:2a:25:ab:9d:a5:0c:bf:c4:6f:
         24:cb:b7:45:7c:de:d0:ab:9a:5c:4d:20:20:57:de:d9:44:42:
         dd:26:ed:86:2e:bf:99:54:7a:1a:ae:b3:2e:d2:a9:2d:4b:38:
         89:b3:9f:6c:13:10:21:dc:43:0a:68:bc:9b:fe:e0:e3:c5:c8:
         a5:62:bc:ea:f5:d5:8c:86:b0:9c:6b:c1:c7:e0:f2:d3:d3:f9:
         42:7e:1b:58:9c:e6:6a:2a:05:97:2d:9a:24:48:63:dd:13:4d:
         f4:8e:52:61:a5:50:b2:25:d6:3d:94:82:30:8b:21:24:d5:8c:
         1b:1e:11:de:6c:d0:0e:38:db:37:fe:f9:da:ea:a1:30:a5:3b:
         74:38:64:e2:cb:61:e9:53:a3:71:d1:1a:2f:a0:22:0f:bc:61:
         9c:08:b1:45:d7:ed:5c:0b:05:ab:7c:73:da:55:92:a9:2f:0e:
         33:a4:f6:28:3b:94:e2:52:0d:b4:82:3a:73:ff:0f:53:3f:e0:
         b3:e7:b8:b4:94:4c:ee:57:7b:0b:1e:f3:0b:68:13:35:38:f6:
         0d:b2:be:d2:49:0a:a1:f9:d5:3a:6d:82:1d:e8:6f:b7:09:6b:
         84:9a:82:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:05:37 2025 by rpki-client