Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/49d16395-3831-3e26-ac16-ed9d0957ee54.roa
File:                     49d16395-3831-3e26-ac16-ed9d0957ee54.roa (raw, json)
Hash identifier:          dOdtMSio6j0YRiOPZ75cdkpeyCtBfHI+0SwyCKS9yFQ=
Subject key identifier:   A2:FD:E5:4F:EE:03:86:77:B3:4A:05:31:EC:DE:1C:7D:9A:B7:AA:03
Certificate issuer:       /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Certificate serial:       010D0C9F4328584A51D073A9C30E8EFD906F9280
Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/49d16395-3831-3e26-ac16-ed9d0957ee54.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     3320
IP address blocks:        172.82.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:73:a9:c3:0e:8e:fd:90:6f:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=4b7ea84a-7be8-4ae1-b8a9-47ead108d908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4e:f4:1b:19:01:8e:ad:33:d6:ca:c0:d3:ad:
                    7c:c4:64:db:d3:92:99:fb:8f:77:86:3c:bf:1c:f7:
                    03:de:5a:a5:92:6c:49:1b:14:e2:4a:de:75:4a:3e:
                    b0:7a:7b:62:de:31:5d:86:07:99:33:ba:9d:6c:e9:
                    00:8e:ac:e0:1a:cf:f5:56:a8:cd:ad:12:cc:89:50:
                    d9:dc:3e:e0:11:e0:3e:2b:c1:f2:6b:f8:30:b2:9a:
                    47:9c:df:12:0b:ac:1f:1b:1d:e0:f8:26:a4:d2:f0:
                    96:a7:21:04:5b:a5:b2:6a:38:97:0a:45:29:5d:2c:
                    c2:67:a4:6f:79:c4:70:1d:1e:83:70:3e:c0:a8:85:
                    c4:a7:80:a6:0e:f6:bc:bc:2e:9b:25:d8:30:0c:51:
                    c6:76:d7:10:3a:c0:ab:f8:5c:f1:31:e8:46:f7:16:
                    b7:b7:b7:c9:2e:cd:e9:24:f4:62:c9:9f:cc:90:20:
                    cc:88:37:53:7b:4a:42:b0:1c:b4:ca:68:44:1b:c8:
                    f4:e6:39:33:ad:7b:74:f2:a0:57:f2:81:e3:7b:c1:
                    17:71:ff:81:22:20:0a:89:ab:8e:01:e5:19:89:0c:
                    68:32:1e:f4:63:a3:c2:9c:8a:53:eb:03:96:c4:80:
                    75:8a:73:b5:2c:bf:ee:fb:5d:78:cb:c3:41:c4:da:
                    ce:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FD:E5:4F:EE:03:86:77:B3:4A:05:31:EC:DE:1C:7D:9A:B7:AA:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/49d16395-3831-3e26-ac16-ed9d0957ee54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl

            X509v3 Authority Key Identifier:
                keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:f5:40:21:c0:8f:68:00:f6:03:a1:28:d4:5d:d7:db:fc:7f:
         a1:53:5b:74:90:66:0c:18:a1:e5:50:05:61:bd:10:aa:32:56:
         e1:68:c9:2b:f7:c4:1e:8c:55:9f:36:eb:ff:c1:c5:79:26:5f:
         75:d1:eb:07:26:d9:9a:2a:d0:22:cd:5f:4a:e8:b0:96:24:53:
         d2:a4:0f:c7:36:83:ce:70:f6:25:64:d5:27:2d:73:2d:e7:6e:
         18:ef:39:c7:d8:14:38:ac:56:78:e8:5e:30:8a:78:85:9a:95:
         13:56:53:6a:ee:ce:53:ff:dd:5b:4d:b7:12:cc:f5:bd:63:c2:
         ff:72:e4:8d:ce:f7:b8:f1:b0:0d:27:04:1c:3b:35:f2:5c:e0:
         67:5f:25:7e:92:23:bf:16:7f:ac:1d:e2:d1:01:39:19:fb:f0:
         ed:65:be:5a:87:98:14:3a:97:1b:3d:48:1d:3b:57:74:48:09:
         38:30:1c:78:69:c1:b9:18:35:15:65:8e:73:83:96:06:10:dc:
         e6:09:b4:c1:4b:a5:87:0b:67:4d:13:b5:50:5c:d7:1d:15:65:
         ca:1d:cb:b9:24:e1:ef:bf:7b:66:28:eb:bd:49:d3:e1:f1:2a:
         56:d0:15:9a:a7:22:68:0e:ba:f8:c5:e6:f8:30:c0:f0:79:e8:
         7f:d3:3d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:16:29 2025 by rpki-client