Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/457a9cf7-fc52-3d09-85cb-b889c8576424.roa
File:                     457a9cf7-fc52-3d09-85cb-b889c8576424.roa (raw, json)
Hash identifier:          ROFWJ3mxo/w4QM1IywzX6PC1AL5naoK8TbH+Uo9VhFI=
Subject key identifier:   07:B0:9C:9F:2A:FD:15:27:68:61:70:18:AA:47:08:F4:7D:ED:56:D8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CEC93CF370180C7286F84
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/457a9cf7-fc52-3d09-85cb-b889c8576424.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        74.87.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:ec:93:cf:37:01:80:c7:28:6f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=c3cc5506-e2fc-4996-bd48-90a4c842579e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2f:d0:a8:fc:83:3c:ec:f8:a7:d4:b0:d2:9b:
                    f9:1a:ec:28:fd:34:13:ca:55:8d:9c:4a:2f:b1:79:
                    c8:a9:e7:4d:7c:8c:d4:d3:72:59:2d:e2:9b:7c:e1:
                    eb:eb:5b:33:20:8c:0d:2a:53:e0:d3:12:aa:08:27:
                    96:51:ab:8a:4d:85:e0:ca:e0:de:2b:2c:12:62:3a:
                    ed:1b:01:1c:a2:f7:8c:93:ad:9c:5f:de:9f:f3:dc:
                    3f:c2:24:67:07:1b:e9:86:8e:da:cc:97:45:5c:a3:
                    77:87:07:65:21:77:94:6e:e8:42:b7:a3:79:2c:23:
                    2f:1d:d8:a8:a7:b5:8a:93:d2:41:25:7e:be:2b:c6:
                    26:af:24:96:a0:60:1b:a8:03:07:fb:1f:c3:3d:1e:
                    88:a7:d4:65:3f:6d:8a:01:a8:bd:cd:21:d8:5e:13:
                    bc:1b:80:6d:c5:6d:99:41:12:5c:e2:a6:11:e7:af:
                    42:82:f5:16:ba:b5:00:bb:51:71:ed:a0:9e:eb:85:
                    14:54:28:2e:29:49:38:d2:d3:94:04:54:2f:8a:88:
                    5b:f8:0c:e0:45:48:de:5b:94:b3:01:1d:e3:6f:6b:
                    49:81:8c:6d:b0:c4:c5:35:05:37:0a:6a:64:0a:d3:
                    4f:03:a3:f4:ff:46:38:41:41:45:3f:6e:a2:3c:57:
                    5a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B0:9C:9F:2A:FD:15:27:68:61:70:18:AA:47:08:F4:7D:ED:56:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/457a9cf7-fc52-3d09-85cb-b889c8576424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ae:8b:68:4a:35:b3:8b:c8:59:b9:19:fa:25:1f:0f:79:39:
         0d:d6:b7:20:09:a8:9a:96:b4:53:a5:5a:5d:69:2c:98:82:ca:
         93:82:52:34:ed:e4:f7:2e:36:6f:c7:69:da:88:7f:1b:1e:f2:
         a5:1e:1f:54:7f:19:82:02:f7:ca:e0:3f:6d:7c:50:b6:7b:a3:
         03:15:91:3f:67:9e:bd:f4:57:cd:3a:f9:ce:f6:e8:e0:2b:d1:
         d4:6a:ff:01:09:c5:4f:19:7c:8d:b8:e9:fc:84:83:4a:cc:b8:
         d4:83:1b:11:d2:97:7d:9c:0f:66:b1:cd:1a:e7:d0:d2:c6:23:
         69:b2:3b:3f:e5:50:6b:20:bf:1c:9f:de:70:23:7e:62:02:78:
         e0:95:4c:6a:ee:ed:75:9f:1f:5a:35:9e:5e:87:05:fa:cb:12:
         0f:80:f8:e7:09:65:fc:f4:c2:0f:6f:07:91:30:d2:47:68:59:
         8e:e8:84:6f:87:3c:2d:f0:a8:64:70:fa:5a:21:58:59:13:cf:
         4d:e9:14:7e:39:0e:b5:e4:8a:5d:4c:c2:2d:f4:e3:c6:f4:30:
         de:c6:ff:fc:83:2d:6e:8a:96:b5:5a:50:20:74:b9:6e:ee:c8:
         42:ed:a1:d5:9d:ee:e5:fa:b4:6f:5b:53:89:13:79:a4:cf:2e:
         be:3b:8c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:21:08 2025 by rpki-client