Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/950988ad-bbd2-30cc-b7d7-250deb2ee4ff.roa
File:                     950988ad-bbd2-30cc-b7d7-250deb2ee4ff.roa (raw, json)
Hash identifier:          fWDqVHRlolDhEwpffgWT9Z0UY/Gq5LBzDiu3JZjRkMQ=
Subject key identifier:   3E:67:97:F7:E8:4B:B6:FF:E2:45:DD:52:C1:EA:69:06:1D:20:2F:B7
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328584AD23BC3612490F2384B8FC000
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/950988ad-bbd2-30cc-b7d7-250deb2ee4ff.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     922
IP address blocks:        74.119.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:c3:61:24:90:f2:38:4b:8f:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=b214b013-6349-4e38-a150-f5040f103db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:73:72:05:5e:f2:6d:fb:e5:40:2f:39:ad:e7:
                    b4:dd:19:a3:55:91:56:e4:28:c8:c7:f5:9d:87:6e:
                    86:4b:e1:3e:82:f6:8d:0a:ed:e8:c1:4c:92:bf:eb:
                    f1:4b:63:a0:d2:ce:b9:19:e3:c6:86:56:b6:ea:7c:
                    f8:ec:e1:c3:7f:60:59:a9:6d:90:f6:5a:91:13:99:
                    6b:1f:ee:a3:87:23:cb:c1:68:74:28:ec:51:96:6b:
                    13:6d:2d:39:74:7a:6a:5a:33:8b:93:d9:86:22:b3:
                    b3:e3:c8:0b:54:71:93:12:07:34:3e:c0:e7:ef:8a:
                    3f:e8:41:94:2b:6c:bb:16:6a:95:91:d5:5e:7e:fe:
                    03:df:2e:e2:96:fb:c4:2c:cf:2f:bf:20:b6:ed:1c:
                    a8:d3:92:54:42:2e:b6:54:bb:35:60:04:59:1b:b7:
                    fa:e4:6c:32:58:4d:be:3d:1d:00:08:56:b6:90:60:
                    5b:58:0e:4d:85:8d:2c:c8:b0:07:95:1d:13:fc:ce:
                    12:c0:08:09:09:94:75:65:0f:a0:8c:eb:10:21:54:
                    a9:fd:1b:0b:55:7d:f0:eb:e9:71:bc:25:bf:38:82:
                    46:27:00:58:a8:15:e8:3b:96:10:f2:91:ba:d6:44:
                    51:a9:fc:89:c1:ff:e0:3e:2a:34:64:8e:a5:2f:a3:
                    b2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:67:97:F7:E8:4B:B6:FF:E2:45:DD:52:C1:EA:69:06:1D:20:2F:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/950988ad-bbd2-30cc-b7d7-250deb2ee4ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:72:d1:81:15:1a:95:ad:f3:f1:5b:13:6c:2f:de:17:b0:dd:
         91:10:4f:b1:b4:e7:81:20:98:6b:98:88:90:08:a4:31:7f:a3:
         01:a5:00:35:99:20:33:23:e9:64:5b:5c:26:04:63:55:66:eb:
         39:fc:c2:e6:ab:55:b0:0c:25:05:90:3d:f3:a3:3f:37:be:95:
         b7:5c:13:35:83:e7:74:f8:af:31:2c:53:04:05:6d:4f:bb:be:
         88:b3:67:bf:ca:af:d5:7c:5e:41:2c:5b:12:a5:3f:17:fe:ae:
         13:b2:92:37:da:f0:f8:9c:0f:d1:d3:94:ca:02:8e:9e:d5:15:
         c6:61:db:53:74:6f:f2:0a:82:14:4b:b2:48:5a:c6:2c:2a:66:
         81:0a:cf:0d:c7:57:b6:a2:b3:65:c0:bb:93:55:f1:4c:c6:4a:
         86:dd:11:f2:61:aa:d6:cb:1d:fe:d8:6f:35:c8:30:b0:9b:f7:
         08:6f:ea:d2:6f:f3:5b:79:1d:cf:e8:8e:af:17:73:89:f9:33:
         63:6f:1b:4c:86:02:aa:26:a8:0c:9c:5f:1f:c6:0a:c5:fb:eb:
         6d:a3:b9:f5:aa:c0:03:fa:db:6d:fe:75:7e:8b:97:17:0c:a2:
         27:41:86:c5:fd:d8:ee:49:af:bb:10:13:78:3e:31:37:2f:28:
         db:58:39:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:29:26 2025 by rpki-client