Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/c4d17b3c-31b2-30d5-9514-a5ae2da2a1f0.roa
File:                     c4d17b3c-31b2-30d5-9514-a5ae2da2a1f0.roa (raw, json)
Hash identifier:          CYvFHXlccAG4pligox/e2z4kAEIbTQRRp/MGRpLe7fM=
Subject key identifier:   EA:B5:5C:5D:77:5A:7C:05:F9:DC:CB:EC:0C:E6:E1:ED:8D:83:38:EB
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584AE1966D2E8B76F3CB01D32500
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/c4d17b3c-31b2-30d5-9514-a5ae2da2a1f0.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     17278
IP address blocks:        69.74.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:6d:2e:8b:76:f3:cb:01:d3:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=520ddb9e-e2d0-438d-9e5d-c0d17c005e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:f9:e4:fe:01:b2:e7:26:eb:0e:9e:17:d9:
                    4b:06:48:98:67:7a:d2:44:cf:46:20:46:73:b1:06:
                    c2:91:8e:6b:7c:69:6c:6f:27:98:b6:5e:b4:69:2a:
                    5b:26:59:ca:f7:5b:dd:4a:f2:b7:3b:d4:6d:35:d9:
                    3b:a9:8c:8d:fc:c8:4a:33:9e:14:f4:23:ba:27:69:
                    35:7a:31:5c:c0:48:0d:07:c5:55:10:ac:3d:b9:73:
                    db:20:81:4a:df:12:87:d5:62:36:e3:85:09:6d:db:
                    46:5c:e7:d6:30:b5:66:89:8c:66:6b:ca:49:63:88:
                    df:95:af:cd:c4:86:2f:53:a5:ed:86:6f:d6:8a:36:
                    2f:33:25:a4:49:93:8c:09:01:31:db:fd:45:f3:cb:
                    25:d4:7f:66:79:e8:56:5c:c7:39:09:5c:b0:de:46:
                    08:e0:bd:b1:66:1a:c8:9b:68:a6:ce:86:21:20:7b:
                    7a:b4:bc:fa:b3:e8:37:b7:6b:38:b4:f3:79:e5:ab:
                    b7:55:87:94:7e:5d:96:4c:af:12:da:66:28:59:14:
                    21:24:bd:0b:3b:0d:cd:a6:e4:42:60:ae:22:a3:37:
                    dd:a5:5b:27:68:a0:14:c2:4d:29:d2:ee:1f:fa:fd:
                    46:e7:8d:28:1f:9e:fe:af:74:67:79:3c:ba:f2:8c:
                    84:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B5:5C:5D:77:5A:7C:05:F9:DC:CB:EC:0C:E6:E1:ED:8D:83:38:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/c4d17b3c-31b2-30d5-9514-a5ae2da2a1f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:3e:5d:43:17:8f:00:b7:b3:05:a3:1d:69:95:5a:ac:fc:9b:
         cc:4c:b4:58:d0:87:ee:4d:1b:63:60:77:be:ea:1c:07:ca:c1:
         28:49:07:f5:5b:31:d1:71:11:73:76:be:c1:f4:7c:5e:22:ed:
         82:11:03:ce:f9:f8:c3:e7:0f:0b:2a:a0:87:4a:ca:13:6e:1a:
         1a:ed:07:51:c1:3f:2b:c9:75:55:15:a4:e2:4c:c3:af:3f:ff:
         9f:45:71:15:c8:55:90:31:3a:1d:22:43:a1:5d:7c:45:8d:f1:
         0c:18:fc:f0:e8:5a:cc:4f:68:8e:d7:e9:c4:a4:74:3f:7b:de:
         55:18:dd:a1:44:91:7d:31:8d:03:09:b1:36:94:6e:61:f0:a6:
         af:f1:a9:5a:49:f1:bd:49:22:79:6e:83:9f:ee:35:e8:f5:05:
         24:d0:57:ca:c7:06:cf:84:50:41:79:57:74:2e:22:a1:06:10:
         db:b7:c0:26:27:f1:67:d0:50:d5:13:7e:da:29:47:18:a0:73:
         a9:51:77:28:96:26:f3:7c:1e:04:7d:8e:6a:8f:aa:b7:ca:b9:
         bd:e2:a9:8a:0d:9f:21:99:5c:e3:a0:3f:fb:c8:dd:fd:90:11:
         74:30:07:3b:33:44:8b:f3:73:a2:da:bc:95:e8:b4:b7:52:65:
         4e:7c:0c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:52 2025 by rpki-client