Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/0af87d50-ff39-3506-a496-981dbf2cf6e8.roa
File:                     0af87d50-ff39-3506-a496-981dbf2cf6e8.roa (raw, json)
Hash identifier:          9hCPS7fK0W54eUhPe8MTu+AL5RQeiVd4qif8/62mks8=
Subject key identifier:   68:6E:94:58:7B:0F:DD:24:93:9B:29:17:66:F0:1F:DA:7B:08:30:6B
Certificate issuer:       /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial:       010D0C9F4328584A3B21B1B61E7C2B2908C61500
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/0af87d50-ff39-3506-a496-981dbf2cf6e8.roa
Signing time:             Wed 18 Jun 2025 10:01:21 +0000
ROA not before:           Wed 18 Jun 2025 10:01:21 +0000
ROA not after:            Tue 16 Sep 2025 10:01:21 +0000
asID:                     215304
IP address blocks:        74.118.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:21:b1:b6:1e:7c:2b:29:08:c6:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
        Validity
            Not Before: Jun 18 10:01:21 2025 GMT
            Not After : Sep 16 10:01:21 2025 GMT
        Subject: CN=093610a1-122e-4abf-9f34-12e7eff8970b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1c:31:48:dc:99:97:6a:42:f6:ad:17:a6:b4:
                    24:3e:df:80:6e:ee:9d:11:9d:e9:90:2a:c9:98:a9:
                    e5:82:5e:85:8c:2d:8d:41:8c:5d:76:34:8d:ba:51:
                    d3:45:a9:a1:cb:75:05:e8:50:06:7c:1f:1b:90:3d:
                    5d:2d:a8:32:5f:b7:be:70:1b:7e:49:e5:e1:cb:2d:
                    95:e3:05:05:42:ae:2a:61:88:e8:8d:83:3c:38:75:
                    fb:e2:80:ba:42:6e:2d:85:f5:42:51:fb:8b:21:04:
                    03:aa:44:2c:3d:fb:69:ea:65:22:73:70:db:ac:81:
                    b1:20:2d:38:1b:65:4d:17:82:80:01:36:e5:87:31:
                    a0:44:8a:96:85:69:5d:f4:bf:60:2e:c2:52:1b:36:
                    ab:59:7e:3d:23:73:75:8b:25:80:73:a5:8d:a4:14:
                    4d:fa:cf:11:3f:f7:76:ad:66:19:d9:d0:29:c3:de:
                    cb:87:5a:b8:9a:3e:2b:da:2d:d2:49:94:c1:3b:9c:
                    97:7d:ec:f0:55:d9:13:dd:38:64:28:56:0c:66:5b:
                    32:b9:0f:e5:d1:cd:ca:f6:ee:5f:d3:62:e7:7e:f2:
                    5f:91:c4:05:5a:7c:11:aa:dd:84:9e:c8:2c:c1:e2:
                    c5:9d:09:e0:0b:ba:14:c5:43:3f:7c:9c:61:20:bd:
                    13:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6E:94:58:7B:0F:DD:24:93:9B:29:17:66:F0:1F:DA:7B:08:30:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/0af87d50-ff39-3506-a496-981dbf2cf6e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl

            X509v3 Authority Key Identifier:
                keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:c3:15:a8:28:2d:4e:1e:df:ac:45:ee:28:6a:b5:14:e6:2a:
         f4:cb:89:93:1a:37:c1:64:a4:b7:6f:11:ac:61:84:a5:a1:79:
         bb:2a:34:ad:67:34:00:5c:8a:28:70:a6:4e:09:8b:f0:29:0b:
         be:5a:ad:1a:49:64:e8:4f:d3:9b:f3:8e:31:ac:44:d3:8b:49:
         84:22:2c:b1:9a:c5:ee:ab:07:ab:55:c1:bb:30:92:bc:f5:13:
         c1:6b:76:92:d2:8c:26:27:6c:47:53:73:d5:44:81:3d:5c:e0:
         87:c2:27:c7:27:30:5c:7d:74:cf:8c:ce:f2:18:a3:8e:06:09:
         ed:56:56:10:aa:91:77:50:ae:5c:d3:50:5a:32:cd:1b:2c:98:
         83:e2:d8:fd:4a:fa:55:0e:44:bd:8b:81:31:a9:f5:3a:ec:7d:
         7d:ec:54:af:be:46:58:01:a1:c6:bb:07:50:fb:c1:2a:d6:46:
         c6:a4:79:83:f5:7b:27:22:5b:9a:7b:e4:cc:02:2a:d4:d9:da:
         56:1c:8c:32:22:6a:d5:28:f1:15:0c:e3:9e:d3:3e:6c:c5:ff:
         73:fa:a1:72:08:9a:5f:93:17:ce:8a:f5:ec:67:06:37:4b:b1:
         6e:7d:1b:5a:00:7b:c5:3a:07:3d:1a:55:77:5b:4e:6d:6d:53:
         0f:f6:ab:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:52:57 2025 by rpki-client