Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/8ef967d9-fa3e-3d2d-b2fc-eae52f94dfec.roa
File:                     8ef967d9-fa3e-3d2d-b2fc-eae52f94dfec.roa (raw, json)
Hash identifier:          BAEBcsplHPKtHzxPJgFnicouF6YgW3ft22sxxzgiVVY=
Subject key identifier:   D7:7C:04:15:84:79:F6:D1:23:1E:56:2F:3A:0E:E9:1D:A6:68:AB:28
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584AE1967276935D9D67DED44A80
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/8ef967d9-fa3e-3d2d-b2fc-eae52f94dfec.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     4451
IP address blocks:        69.74.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:72:76:93:5d:9d:67:de:d4:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=fbb5d2fb-246a-4790-b082-b6c49de55dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:32:35:41:67:28:4b:fe:2c:45:38:d8:87:
                    27:a8:46:98:79:72:41:ca:cf:55:ec:68:c9:96:24:
                    cf:65:88:8b:ba:13:c3:02:47:3e:5b:a6:58:2d:2c:
                    e7:4b:8d:90:f1:e2:62:52:be:d2:2d:ef:e2:96:f5:
                    f7:8f:49:67:c6:03:43:ec:b4:f9:0a:c2:81:80:83:
                    1e:b0:04:3d:b9:f5:a4:6f:59:32:21:f1:bd:00:7c:
                    cf:8b:20:f0:57:cd:52:76:a8:9b:7c:5d:90:13:5f:
                    d8:10:10:02:a2:ce:03:c4:0a:a5:1d:5c:4d:b7:4f:
                    b5:ec:d2:da:a8:08:c9:ff:1f:78:3f:a1:64:7a:a7:
                    8e:e0:2b:af:6d:3d:31:57:26:77:b9:1f:a4:5b:08:
                    23:70:ee:c7:b3:28:ce:15:a1:4a:07:e5:2b:25:b1:
                    17:9a:c9:ad:d7:b8:72:34:cd:11:b1:73:e3:08:9f:
                    08:51:af:ff:cc:b9:8c:c7:04:6e:23:b3:12:ff:c2:
                    05:8e:15:d8:3e:7d:f4:ec:ec:8d:16:15:47:6b:b0:
                    e9:e3:b7:32:05:83:7b:a4:bb:d7:fb:e7:84:a5:f5:
                    e3:0f:ab:ea:7e:9f:a7:56:b6:57:42:e4:8f:36:22:
                    fa:a1:95:1e:c1:b6:2c:ff:3f:59:a3:07:20:1b:50:
                    a5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7C:04:15:84:79:F6:D1:23:1E:56:2F:3A:0E:E9:1D:A6:68:AB:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/8ef967d9-fa3e-3d2d-b2fc-eae52f94dfec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:5f:4c:97:ee:f8:10:da:ba:e7:d8:b8:b5:6f:11:c0:d6:b6:
         ea:89:ed:dd:36:9a:ae:11:f2:09:70:0c:89:66:bf:f4:0f:29:
         24:20:9c:e7:fb:c2:7e:4b:e9:83:3c:07:d2:0b:ec:9e:76:e0:
         0c:88:d2:73:2f:4f:d2:43:68:e1:24:15:7d:0f:df:69:6f:b9:
         71:c0:3c:72:a9:63:99:56:76:fe:f5:2d:dd:67:e9:86:f7:a8:
         89:6f:36:e1:09:bf:32:16:ce:7b:24:23:7d:67:eb:f9:7e:0a:
         c2:b9:94:64:a2:8f:7e:12:a6:16:02:32:2a:ec:6a:2b:83:9f:
         eb:38:6f:b3:b6:61:91:a9:ad:08:93:5d:99:4f:d1:51:8e:67:
         d2:ed:84:0e:7f:d6:51:e1:87:af:57:2b:a0:b5:49:52:57:67:
         1d:87:08:39:02:54:10:8c:50:51:aa:3c:9e:6d:1e:c7:6c:db:
         bc:04:50:27:7a:db:3d:46:c3:20:ba:9b:bf:17:32:9f:40:49:
         c5:08:c6:c3:ce:b3:c7:cf:12:84:92:13:d3:03:a8:b9:41:c0:
         38:07:2e:4c:b6:b9:ca:22:23:bd:6c:a9:df:dd:8c:66:1c:d9:
         94:ae:46:00:d6:a4:1c:35:45:21:be:9c:d7:c5:50:fa:46:c1:
         6c:7d:10:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:43:52 2025 by rpki-client