Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/2f818ed1-7ebd-3c75-9526-3558cf90abe1.roa
File:                     2f818ed1-7ebd-3c75-9526-3558cf90abe1.roa (raw, json)
Hash identifier:          dB1PyH+P5F5/WwTYRrj//NKMG2F5XgoWLNVw+u6vuCI=
Subject key identifier:   38:4F:74:97:D9:5B:78:2E:6B:E3:9E:C6:55:8B:EE:33:2C:20:05:45
Certificate issuer:       /CN=0412f035-b376-4807-a8ac-e98680ab0e36
Certificate serial:       010D0C9F4328584A268AC2DA296105E0EC0BEB00
Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/2f818ed1-7ebd-3c75-9526-3558cf90abe1.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     6142
IP address blocks:        74.85.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:c2:da:29:61:05:e0:ec:0b:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=4cc3d9d1-7293-405b-8a80-509f44b47205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8e:77:27:b0:13:a3:ef:c8:fd:c1:bb:d9:1f:
                    88:15:b2:d0:e3:31:06:89:bc:ec:77:6d:72:93:e7:
                    1c:44:11:1c:fe:f2:5c:47:94:5d:8a:e2:90:8d:c6:
                    f8:38:94:bc:41:30:3e:0b:05:f8:58:ad:8b:e8:b7:
                    78:b4:25:7c:60:f4:ed:bf:c2:44:92:dd:14:29:10:
                    a3:e5:bb:c0:67:bb:47:a5:c3:a1:f6:3a:78:ea:f8:
                    9e:26:f8:aa:ce:38:35:21:53:f3:9e:ea:c8:97:6b:
                    e8:26:2a:ae:eb:65:1e:6e:53:92:4e:6d:78:f6:80:
                    cc:f0:42:2d:f2:7a:0b:2c:9f:3f:67:42:0e:8a:4a:
                    5d:7d:9d:2d:f2:11:06:82:95:68:f9:6b:77:ad:a3:
                    9f:42:0c:33:f4:05:2a:b5:81:0b:88:ac:76:7a:6e:
                    27:98:aa:18:db:3a:36:be:1b:90:fb:ff:8a:61:ef:
                    64:8c:3f:64:b7:a7:c1:49:0f:07:45:97:8f:b8:6b:
                    45:8f:f0:9e:b6:36:16:3c:bc:41:94:a0:0f:73:f1:
                    57:20:88:87:ee:e7:52:83:b0:51:c3:b7:4c:5e:ca:
                    b1:54:78:9d:26:51:a6:8a:05:40:9f:5c:9f:88:5e:
                    bd:2c:29:7b:6b:d7:ad:b4:ef:c6:80:3e:6c:5a:8c:
                    55:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4F:74:97:D9:5B:78:2E:6B:E3:9E:C6:55:8B:EE:33:2C:20:05:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/2f818ed1-7ebd-3c75-9526-3558cf90abe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl

            X509v3 Authority Key Identifier:
                keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.85.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:0b:f2:a6:8c:6b:b2:b0:88:66:38:33:3f:46:fa:98:2d:a4:
         41:bc:cb:ee:0a:d4:0c:af:fa:9e:d1:36:f0:3c:85:88:76:93:
         20:ca:7c:35:53:63:6f:f1:32:61:31:e4:71:e8:6f:13:ee:83:
         1c:fc:1a:f7:fd:aa:94:97:42:59:1c:5f:bf:99:45:bb:6f:05:
         5a:ec:18:2b:c7:09:00:72:83:27:4b:11:5c:4b:72:2b:8f:48:
         8f:8f:c4:36:55:e8:73:43:99:89:8a:7d:23:21:33:51:9d:bd:
         96:37:a7:52:89:29:0e:17:ec:77:5f:1d:1f:6e:9a:9c:45:ff:
         37:f6:06:1d:81:90:c9:28:f2:3c:6a:a3:5f:f4:cf:91:f4:7e:
         26:46:22:08:a1:a0:ad:13:b4:46:6d:69:ea:8b:27:be:7d:3f:
         37:15:33:dd:0b:b2:a8:7c:00:92:1f:c2:4b:3d:52:fe:23:a5:
         fc:ce:5f:80:91:ca:06:9f:53:7e:a2:df:39:2b:7b:5d:67:f5:
         52:8e:29:20:64:03:b7:55:61:e8:93:7d:bd:27:74:9b:9f:04:
         32:54:97:4d:a6:23:a5:39:6e:da:22:7e:6e:df:71:18:0c:62:
         e1:18:ed:e9:90:5c:aa:90:ce:2a:06:fb:36:a9:25:16:af:2a:
         34:bf:ce:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:12:43 2025 by rpki-client