Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c877f395-c302-3d5a-8d48-7fcad36f9ac9.roa
File:                     c877f395-c302-3d5a-8d48-7fcad36f9ac9.roa (raw, json)
Hash identifier:          fwHs5yj2N+XJLGVgaIqYcgN89NS5BS9m2N5r7m80FGY=
Subject key identifier:   AF:47:96:FF:68:31:D8:F6:8A:A4:33:38:20:EF:DC:C0:4B:E2:43:CB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DB0A8344AF9EEE9E70080
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c877f395-c302-3d5a-8d48-7fcad36f9ac9.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     12271
IP address blocks:        74.72.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:b0:a8:34:4a:f9:ee:e9:e7:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=ce5af996-14c9-4df7-bc54-396ad19af743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:89:29:18:92:f0:d8:ef:7a:d5:37:3f:6b:b8:
                    a0:b5:76:84:e2:6f:9f:ad:da:29:8e:e6:32:71:0c:
                    2e:ec:c4:0b:e3:29:03:38:62:98:c4:fc:4c:d0:11:
                    f2:38:62:14:cd:26:d8:6d:95:27:45:91:ba:37:4a:
                    e0:c9:95:e8:09:a8:da:c2:41:4d:67:22:b2:1f:03:
                    77:57:8a:48:6f:8a:e6:56:bd:c6:06:90:57:b2:0a:
                    09:b0:cf:86:ba:ae:98:ed:ff:3a:6b:6f:13:ae:7a:
                    ba:f2:7f:c3:1a:f8:c9:b6:95:e1:3d:6b:50:db:e0:
                    da:31:44:03:b3:fc:9c:85:eb:b0:6f:07:95:76:a8:
                    7f:90:15:a4:4f:a1:0e:2d:3e:00:a0:68:80:1a:eb:
                    b6:97:d8:87:57:3b:6c:60:93:b6:39:aa:f9:e0:ca:
                    89:ed:ec:47:08:b3:b7:a6:6a:9c:5b:d2:15:3c:ce:
                    98:ed:94:87:41:d9:ea:c5:18:dc:a2:02:c6:7e:73:
                    dd:51:f5:3c:3d:42:b4:50:74:5d:cd:3c:51:a1:5c:
                    7b:ed:5d:63:25:bf:16:6f:32:b5:bd:87:67:97:af:
                    5c:c0:b5:39:8d:95:76:af:e0:27:98:14:46:87:9f:
                    1a:31:0b:30:b6:ab:4e:ae:04:46:d6:86:50:20:b8:
                    93:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:47:96:FF:68:31:D8:F6:8A:A4:33:38:20:EF:DC:C0:4B:E2:43:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c877f395-c302-3d5a-8d48-7fcad36f9ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.72.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:4a:b1:36:c9:fb:b0:86:c9:63:3d:92:b8:7b:c3:8e:be:be:
         98:59:07:0c:a9:7f:bc:b9:4f:6e:05:c7:b9:ea:c3:3e:6c:a9:
         36:29:8b:cd:d3:06:b1:b8:f4:d1:38:88:b6:31:8d:ca:9d:06:
         8a:13:a9:9b:ab:28:23:ba:03:f0:81:ff:c2:d5:e7:81:8b:19:
         c0:68:97:d2:35:1d:9f:ac:2e:3f:90:f6:d5:03:53:cd:21:b5:
         f8:20:ac:35:c8:7c:61:d1:d9:c3:61:f6:86:b9:fd:ee:ba:82:
         1b:e7:7d:8d:f1:f7:03:67:07:71:94:d2:62:44:14:69:97:11:
         22:93:e5:85:43:ea:cc:88:b1:e7:72:70:7d:38:f6:36:c2:b1:
         aa:79:4c:ac:58:7b:b8:bf:4b:5b:66:41:4c:27:6b:6d:8a:34:
         0a:35:ee:77:44:99:67:6d:c5:8d:fe:21:6f:e2:95:2e:01:98:
         7b:c9:51:49:5d:f3:13:76:ff:4e:5d:fc:5e:a7:90:8a:00:47:
         7d:e5:94:f5:e3:aa:5a:2c:0c:be:a8:ee:55:a1:b6:35:70:d8:
         3f:a1:df:50:c5:78:99:a3:26:48:ee:58:11:79:99:85:30:4a:
         05:70:94:94:96:90:d6:c3:ba:d4:4a:f8:99:bc:73:a2:92:4b:
         78:2b:6a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:59:30 2025 by rpki-client