Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/15493fa1-9b80-3ea7-94ee-7e20e71c42ea.roa
File:                     15493fa1-9b80-3ea7-94ee-7e20e71c42ea.roa (raw, json)
Hash identifier:          7RXY4TyJXtCgk85uqmTUQosNUJ+QxHgQIXIqanCs1Wk=
Subject key identifier:   32:D5:71:43:CA:9D:64:BF:51:8C:07:65:22:15:FF:51:2B:A3:A3:8B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D1338A54CAEEC4CF36300
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/15493fa1-9b80-3ea7-94ee-7e20e71c42ea.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20001
IP address blocks:        74.87.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:13:38:a5:4c:ae:ec:4c:f3:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=ff7bfcba-162d-4da4-8b0c-616057a81fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:c5:91:80:16:6a:b5:dc:66:c0:b3:37:d1:
                    c0:59:4f:10:46:0d:bc:f1:9a:5e:4d:79:da:d1:f3:
                    6e:32:3f:fa:02:18:b8:40:67:2e:df:38:00:50:65:
                    a9:1a:70:3b:67:75:a8:28:fd:02:3f:b8:5e:a0:71:
                    78:86:73:e2:2f:d3:03:77:08:15:74:20:d4:4d:93:
                    4e:7d:de:5b:23:fa:64:8d:6f:b0:31:57:80:b0:23:
                    b9:be:4d:35:50:32:08:a3:33:56:1b:e9:2c:be:93:
                    7d:b2:45:89:cd:c0:33:cd:86:5c:dd:8a:eb:cb:e1:
                    a4:93:bf:f6:35:38:ce:a5:eb:60:37:5e:51:47:50:
                    19:62:50:30:e2:45:97:58:9a:75:16:28:b7:06:4d:
                    26:b3:9d:4b:a9:db:4f:da:18:15:6e:57:e7:9c:26:
                    44:c5:88:c8:60:09:8a:db:16:58:53:15:5d:54:96:
                    70:c1:81:6d:00:98:f3:c2:fc:7d:64:91:f1:4c:f6:
                    32:93:9a:61:8a:aa:f1:d9:3b:d2:da:44:19:97:5b:
                    3c:b7:21:c4:55:92:da:7b:c7:61:96:e2:85:5a:ee:
                    b4:78:8e:6c:78:cc:bd:1f:86:f1:fc:1a:a0:04:b5:
                    f1:60:4d:db:c7:f0:b0:ee:57:cb:71:c2:54:72:4b:
                    3b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D5:71:43:CA:9D:64:BF:51:8C:07:65:22:15:FF:51:2B:A3:A3:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/15493fa1-9b80-3ea7-94ee-7e20e71c42ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:a6:8c:dd:f1:05:ce:aa:83:80:21:af:0f:95:17:fd:04:11:
         0c:8a:45:e8:3b:b6:04:22:da:3d:77:45:52:dc:49:7c:19:18:
         d1:95:53:7c:c8:2c:bc:cf:ba:c2:ce:96:ef:03:7f:ab:22:81:
         c5:26:8a:d9:91:3e:3a:da:e9:55:39:33:a0:aa:1c:14:ed:18:
         a4:d3:13:9d:09:56:7f:02:ad:83:56:17:39:a9:ba:cf:4b:27:
         1c:02:a8:fe:74:c6:dc:90:b9:78:27:b8:52:ef:79:a4:55:73:
         fe:b7:bf:09:89:85:aa:66:c7:fc:cf:15:61:c1:74:c7:1c:67:
         e3:94:0d:2a:13:1f:7e:91:b8:35:c4:41:69:b7:23:56:bd:5a:
         1f:de:91:4e:41:28:c2:d9:24:67:e5:b8:a8:d6:23:60:39:cd:
         67:32:bf:2c:d1:cb:6f:f4:1c:ab:6f:90:aa:a2:1c:6c:28:16:
         3f:ff:9a:9b:e8:53:e2:7a:67:68:78:0b:39:c5:9d:4a:50:a4:
         a0:52:d5:14:ce:79:cb:38:05:6f:d7:66:11:16:18:f3:a1:f3:
         c5:20:18:7c:b1:d8:f3:1a:ec:56:13:6b:11:43:31:c3:cb:29:
         03:d4:b8:6f:9f:73:56:e2:d9:f1:57:f0:c6:41:7e:f1:37:d7:
         9c:ba:4d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:04:27 2025 by rpki-client