Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9054e5d0-43f7-3229-8900-6f2124bfdf9a.roa
File:                     9054e5d0-43f7-3229-8900-6f2124bfdf9a.roa (raw, json)
Hash identifier:          qfhv+tXyVtIFaGWX9goPofKqdvHaAfwiZesJYq2OfuY=
Subject key identifier:   78:AB:CC:FE:91:B5:F9:4F:9B:1D:D4:52:6A:1A:1D:78:FF:38:1E:20
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DBCBAC4F0F62BF09EF180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9054e5d0-43f7-3229-8900-6f2124bfdf9a.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     32497
IP address blocks:        74.87.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:bc:ba:c4:f0:f6:2b:f0:9e:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=0c696f85-5cab-4241-bbf8-70d6e38b7580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:69:1c:43:c5:85:19:e8:98:70:59:31:28:22:
                    f3:c3:c7:33:39:b7:4b:c3:54:2e:58:93:77:25:b6:
                    f9:70:41:3b:b3:94:e0:f6:d2:0b:e7:bd:c7:64:88:
                    3d:99:31:9c:29:6c:94:a1:e1:9d:ed:80:41:49:cd:
                    1d:9b:b2:48:4f:e7:47:44:29:57:30:b8:b0:7d:d8:
                    3c:44:c7:46:c0:09:14:46:aa:9a:27:8e:a7:e6:c9:
                    96:24:af:55:1b:83:07:05:d8:f2:84:90:14:f1:d8:
                    69:17:59:b8:ee:1d:b7:65:23:13:85:5e:60:ae:e9:
                    7b:93:9f:06:8f:8c:b6:87:47:74:ac:63:c8:b0:8b:
                    fa:35:d8:f1:ed:c9:d9:ff:10:ed:24:25:7c:5c:8c:
                    88:ae:2e:3d:9f:be:e4:ad:f1:56:6e:b1:af:c9:8f:
                    2b:47:0e:5f:a8:f8:c4:35:71:c0:b6:41:88:cc:d0:
                    1d:81:d0:45:c7:c1:99:f4:65:94:d9:60:94:dd:71:
                    0e:1a:09:8a:4b:69:72:c0:24:6c:ca:b4:34:bb:e4:
                    47:63:88:30:5a:b5:8b:5e:6c:9f:24:1a:6f:2f:1e:
                    3b:50:f8:9c:3c:77:59:90:49:cf:a7:f0:65:fd:76:
                    34:1b:30:20:05:e5:c0:6c:c3:f2:e9:10:0f:78:66:
                    3c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AB:CC:FE:91:B5:F9:4F:9B:1D:D4:52:6A:1A:1D:78:FF:38:1E:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9054e5d0-43f7-3229-8900-6f2124bfdf9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:f2:5a:e0:9a:dd:cd:9f:85:03:e4:7c:ce:a7:a1:f8:b5:0c:
         ab:94:11:ea:42:9a:01:a8:98:71:83:3f:a9:63:aa:23:13:e7:
         64:f5:ec:b2:c3:43:78:ed:9a:09:d8:31:e1:df:17:68:c2:9b:
         cc:69:33:4e:83:96:ad:a7:57:6a:05:c9:e5:bb:a1:70:ae:01:
         e6:b9:eb:b7:9f:b8:7a:82:03:ba:3b:77:80:26:ba:d6:93:eb:
         b1:be:aa:18:47:01:3e:3f:b2:89:a8:ef:b3:2f:79:f4:0a:b7:
         f4:33:99:9c:a8:a3:3e:16:71:56:d8:9a:c4:69:a4:a2:d4:0b:
         31:87:3b:b7:0c:fe:28:e0:d4:13:d9:42:2b:a1:0b:2f:e7:ea:
         35:7c:79:56:16:80:f9:fb:7b:d2:db:f4:13:1d:aa:63:4c:e9:
         17:7a:5f:91:fd:b8:29:26:c1:66:01:b4:58:ee:87:4f:be:65:
         d7:70:cd:98:15:75:8e:89:30:20:a6:6e:55:f8:3e:89:13:84:
         5e:b7:aa:32:6b:58:b6:8c:12:bc:f2:d4:04:f5:a9:a0:23:96:
         1f:10:64:d6:6f:af:9d:e5:47:33:c8:b0:1b:4b:94:dd:d1:9b:
         df:c4:6f:cb:df:b1:4b:ec:95:46:12:9c:c6:3d:95:e1:70:7c:
         08:6a:5f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:52:04 2025 by rpki-client