Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/34c057a0-4757-3410-838d-ec78dfc8c319.roa
File:                     34c057a0-4757-3410-838d-ec78dfc8c319.roa (raw, json)
Hash identifier:          3jfkgAEz203Fs3KRrgTQUdv3N2+aI0+GC1WuiUyEkPU=
Subject key identifier:   7A:D0:A7:EE:E5:BA:9C:A0:B3:59:D3:19:EE:39:F4:B9:CB:4C:31:87
Certificate issuer:       /CN=c3a36226-716b-451a-a34c-4a9038599291
Certificate serial:       010D0C9F4328584B6BC74BA3A847AFFD3CB2BE80
Authority key identifier: F7:92:28:39:E5:D4:95:39:97:0C:B8:B2:14:90:97:65:29:F1:92:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/34c057a0-4757-3410-838d-ec78dfc8c319.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     400516
IP address blocks:        74.80.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/c3a36226-716b-451a-a34c-4a9038599291.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/c3a36226-716b-451a-a34c-4a9038599291.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:4b:a3:a8:47:af:fd:3c:b2:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a36226-716b-451a-a34c-4a9038599291
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=0eac537d-7d22-4e27-a6e8-92e850f7bcad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d7:e7:24:dc:80:15:5e:00:ca:eb:19:f0:af:
                    ee:6a:f8:5f:23:88:e7:60:3d:4a:9f:e2:c0:a7:03:
                    70:f7:f3:3a:12:78:bb:5a:40:62:28:76:97:fe:e7:
                    e3:ec:b8:02:b4:bd:cd:7c:3c:bc:bd:83:3c:94:fc:
                    dc:f8:8a:99:d2:b0:1f:71:86:7e:de:78:7c:8e:66:
                    aa:1a:26:37:4d:10:43:3e:b4:0f:de:dd:c3:23:5e:
                    a2:92:2c:56:71:e6:49:cb:72:2c:2d:a2:bf:76:c5:
                    af:58:38:ad:de:95:f8:3a:e1:2e:16:32:fd:f0:fa:
                    23:b0:5b:13:58:7b:6e:68:0b:43:87:8e:b4:d9:b6:
                    0a:d7:dc:d9:31:27:60:c9:30:fe:2e:3f:a3:85:ac:
                    14:52:20:a1:b3:e0:ab:8c:3f:09:ca:cb:c2:ec:5a:
                    34:2f:dd:e7:8a:5f:7c:c1:8f:75:f0:a8:0b:51:e1:
                    7f:95:1e:77:96:82:a8:fe:5b:79:d4:5e:a2:d2:ac:
                    7f:89:53:b7:4e:eb:e8:a7:ac:08:a3:af:22:71:e7:
                    97:84:1b:7c:b5:e6:49:1b:84:bb:10:4b:42:1a:03:
                    ce:f7:74:9e:12:4f:20:c0:6c:a3:4a:d7:fd:67:ef:
                    1a:34:e1:1b:48:9c:a4:f9:e0:bc:cc:bc:51:21:b6:
                    66:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D0:A7:EE:E5:BA:9C:A0:B3:59:D3:19:EE:39:F4:B9:CB:4C:31:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/34c057a0-4757-3410-838d-ec78dfc8c319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/c3a36226-716b-451a-a34c-4a9038599291.crl

            X509v3 Authority Key Identifier:
                keyid:F7:92:28:39:E5:D4:95:39:97:0C:B8:B2:14:90:97:65:29:F1:92:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:be:e4:34:d5:b4:d7:bc:c0:fa:a5:93:aa:bb:da:a0:b8:43:
         e2:0e:f2:5d:81:8e:41:b4:0f:3f:e5:cc:ee:9c:e3:44:8b:3d:
         14:47:ee:e9:49:a1:5d:e2:d2:af:f7:5e:c1:c1:9c:a5:70:3d:
         07:7f:1b:bb:56:fa:37:36:1b:46:7e:40:1c:06:63:98:7f:fc:
         2a:e7:c6:e6:73:a5:7a:57:d0:2e:c4:12:5a:c3:b6:e5:5b:73:
         93:9a:6a:cf:dd:ca:a7:da:53:c9:13:87:23:37:77:40:8a:a7:
         8d:99:31:30:72:b8:bc:36:a0:21:61:cd:b2:bd:0c:e6:93:44:
         39:04:4c:c9:56:da:d2:67:b1:67:d0:e0:17:61:9e:52:ff:ad:
         30:fa:e7:7e:a3:da:ec:e1:d7:0a:99:39:b7:b9:51:50:7e:b2:
         a8:f6:09:b0:f0:32:60:3a:ca:fb:69:75:26:72:f1:af:66:ce:
         7c:c8:05:c9:ab:24:8a:67:97:7f:20:61:0d:6e:78:75:56:58:
         97:55:f7:00:9a:d7:29:0b:85:cc:03:bf:35:91:dd:56:fe:f8:
         ac:76:ab:76:e2:41:7e:ed:d9:c9:8a:6a:df:7c:a8:c5:bb:e4:
         bf:31:6f:fe:f9:36:27:9b:aa:0e:e8:60:4f:50:f6:91:1a:e4:
         51:19:42:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 04:58:23 2025 by rpki-client