Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/99064c91-0420-359f-b74b-3fc7027efd48.roa
File:                     99064c91-0420-359f-b74b-3fc7027efd48.roa (raw, json)
Hash identifier:          ST8QawsOWlUyNBTFosTqsarKvpihI3eVJi+XysPkeuU=
Subject key identifier:   96:BE:E1:56:CF:07:4D:09:D5:33:1D:A2:5A:9A:4F:2A:AC:3B:B1:A0
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584AC5AB8F36CD527FE6DBCF6200
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/99064c91-0420-359f-b74b-3fc7027efd48.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     834
IP address blocks:        74.49.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:8f:36:cd:52:7f:e6:db:cf:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=07106a19-ec2e-436b-991a-73b07985ff6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:31:4e:e9:95:be:8a:05:91:61:24:6a:b9:43:
                    cc:30:f2:03:7d:80:7b:64:a5:71:90:6e:3a:bf:dd:
                    cf:5a:ad:ae:d4:ec:1e:80:79:50:83:9a:8f:79:9c:
                    1e:94:36:61:50:09:6a:e7:82:7e:a7:97:e4:ca:15:
                    38:fc:07:0f:21:aa:75:43:f8:2f:d7:26:81:ab:22:
                    5a:6c:a6:d2:0c:f4:3e:aa:90:35:9a:56:92:71:cb:
                    ee:d6:66:49:3f:c5:f0:17:da:75:13:46:e1:53:2a:
                    cc:38:69:e8:be:68:b8:ec:25:5f:d1:2d:08:57:6d:
                    73:3e:1c:3a:21:8f:82:3f:d9:b9:f0:d3:cd:f0:53:
                    94:7d:1d:f9:f0:c0:33:75:29:7f:91:b8:30:b8:22:
                    76:70:20:5f:b6:fb:eb:52:7b:35:59:7d:5e:54:1a:
                    8a:99:51:28:8b:0d:9e:15:63:ee:a6:99:08:ca:cb:
                    7b:03:e4:8f:b2:20:8b:de:93:d9:5f:fb:3d:46:7c:
                    39:e1:0c:9e:b6:44:79:6a:0f:06:2c:88:ff:04:45:
                    62:e0:b9:50:1b:5f:e3:ee:82:45:16:2d:69:eb:4a:
                    d3:ca:73:8a:aa:9b:cc:a9:a1:df:6a:b3:0f:e2:53:
                    e0:88:bb:04:7c:43:55:6b:c6:5b:97:f9:7b:cd:95:
                    e3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BE:E1:56:CF:07:4D:09:D5:33:1D:A2:5A:9A:4F:2A:AC:3B:B1:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/99064c91-0420-359f-b74b-3fc7027efd48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.49.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f2:46:00:d2:b3:52:9f:27:7f:11:58:03:af:4e:a0:5d:6f:58:
         0d:eb:e4:25:31:ef:1e:82:2d:87:bd:47:8d:d2:69:7c:fd:36:
         a4:70:c1:50:f3:24:05:c4:68:77:8c:56:b6:d0:63:9e:51:ca:
         ef:7d:f1:d4:be:70:cf:99:f1:a9:ac:6b:96:a2:a5:aa:1f:a0:
         bd:90:77:f2:c0:c4:ee:e3:9f:20:95:2e:1e:b5:ec:fe:7f:25:
         da:cd:54:2c:8e:b3:95:f4:a5:db:45:bd:ba:31:a4:75:c0:12:
         74:f7:4f:0c:23:b9:c0:df:61:4b:e8:3b:3e:c4:e1:12:4a:61:
         da:c5:8a:5e:35:f8:2a:21:a2:64:f5:54:ca:3b:b4:ec:b6:1d:
         3f:47:a4:d2:72:e0:0c:a5:dd:05:43:61:8f:bf:8c:ae:78:f3:
         d8:ea:eb:a8:33:82:3f:aa:99:ae:ee:82:be:93:9c:21:bd:b8:
         09:54:65:cf:bd:39:8b:57:fc:a8:59:0d:08:06:7b:bc:56:4f:
         ec:25:9e:9d:dd:8a:08:fb:f9:2b:1b:89:f7:3e:ee:a9:4a:e5:
         b1:bb:b6:ee:7d:eb:d8:76:61:fc:3a:bc:89:1c:c1:dc:f0:09:
         01:8c:25:87:4a:aa:39:9b:f1:26:f7:a2:ff:c9:73:b8:d1:c9:
         b0:70:b6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:30:21 2025 by rpki-client