Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/c7638a2d-de94-31cd-8168-33b5ac54fb2b.roa
File:                     c7638a2d-de94-31cd-8168-33b5ac54fb2b.roa (raw, json)
Hash identifier:          sDufS+SZ79gOXQhAntGVFiQbzfnMyjQfAEUIqhRfqwM=
Subject key identifier:   B5:02:4E:1A:A9:AD:FB:D3:DD:BD:3A:C1:88:67:0B:E5:4C:2C:BB:9C
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584A34801BC80B14A6C483F7AE00
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/c7638a2d-de94-31cd-8168-33b5ac54fb2b.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     4540
IP address blocks:        74.116.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:1b:c8:0b:14:a6:c4:83:f7:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=07d5a811-c68d-445b-840d-ca1fac2a90b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9e:bb:a0:f1:cc:66:be:00:bc:d6:c4:7c:80:
                    22:36:33:3b:43:ea:a8:06:5b:02:09:dd:84:7f:88:
                    76:20:97:26:8e:8a:fd:f2:32:c1:11:04:a8:53:4c:
                    0c:d1:15:be:0d:51:af:c5:01:1d:b9:16:17:4d:43:
                    04:2b:0e:12:f6:b2:2c:6b:09:34:d2:5e:2e:42:97:
                    97:89:ad:80:c5:0e:90:72:78:e7:ba:d2:e8:88:18:
                    84:d6:29:6a:8c:bf:f9:18:d7:b6:a4:e1:91:71:bc:
                    f0:38:ea:fd:90:ad:60:ec:21:b6:c3:11:00:b4:d4:
                    78:73:29:ad:ad:ac:39:c4:02:02:5f:c9:78:88:4d:
                    d8:7b:bb:e9:40:2a:6c:04:61:33:bd:bf:84:0b:73:
                    0f:3e:86:38:80:34:90:2b:3c:4d:5a:2e:4a:cc:82:
                    ad:d1:65:5e:d8:d1:6a:ba:fc:53:cc:70:bf:bf:d7:
                    00:3c:0e:c5:12:af:c1:42:ee:37:3e:0f:a1:d0:b3:
                    3c:dd:1f:f3:ca:89:93:0b:df:6a:59:09:87:ed:8f:
                    e0:2a:67:bb:26:1a:a7:02:a4:4a:2e:98:ed:e8:8d:
                    ca:74:4e:62:c3:c7:09:9b:3a:50:62:1a:6d:ae:d1:
                    42:b4:19:f1:db:8f:64:c9:48:bb:3c:a6:e0:eb:17:
                    db:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:02:4E:1A:A9:AD:FB:D3:DD:BD:3A:C1:88:67:0B:E5:4C:2C:BB:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/c7638a2d-de94-31cd-8168-33b5ac54fb2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:3a:2c:71:dd:70:b8:8b:3a:33:be:84:9b:18:55:6c:a4:fd:
         86:91:b2:0a:45:5b:38:9f:0e:77:35:70:1f:75:42:51:0f:cf:
         eb:bc:72:75:7c:1e:b3:f0:0c:a3:58:4d:b6:bf:70:3b:34:d5:
         0d:af:bc:66:cc:f8:ce:c9:b9:b8:6d:9f:54:c1:e3:0a:27:cf:
         4b:9c:b0:55:1f:a1:ab:5f:80:09:cf:b0:69:99:6f:f1:79:6e:
         a6:3f:d0:b9:c9:7f:97:be:8d:ff:a3:8f:4a:a3:b4:db:dc:4f:
         1b:3e:e9:79:a5:4d:d2:3e:e8:46:0b:19:5f:7d:25:54:2d:51:
         b8:61:b1:d8:6e:05:be:69:55:35:c6:40:f5:93:c6:2f:72:ec:
         43:56:94:1d:bd:7a:1f:dc:c2:1c:b0:fc:62:79:46:f8:e2:66:
         83:8e:0e:9d:0f:dc:01:dc:48:b4:e6:6a:88:7f:62:25:1b:a6:
         64:f2:80:f3:21:6b:34:9d:bc:0a:aa:0e:e5:f8:0e:12:d6:73:
         9f:27:65:7f:0e:fd:89:d5:e5:63:54:83:dc:d3:af:91:f6:97:
         80:16:6d:65:5f:8b:1a:cf:c8:6e:9e:aa:87:62:83:85:98:2b:
         de:27:01:47:17:92:f6:47:88:4a:5f:4b:6d:31:64:69:21:7b:
         4e:1b:57:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:50:40 2025 by rpki-client