Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/6d8da565-c27c-3497-9b40-6b91741ca4b1.roa
File:                     6d8da565-c27c-3497-9b40-6b91741ca4b1.roa (raw, json)
Hash identifier:          bHAg5wWCzghEPW7Ymw09L6m8q0H1N+FRO8E2nf15TGE=
Subject key identifier:   6B:01:69:70:7D:9C:68:9D:5B:74:DA:BB:0A:E9:D7:7D:79:3D:09:2E
Certificate issuer:       /CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d
Certificate serial:       010D0C9F4328584B74274E24016CDAEC173BA220
Authority key identifier: AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/6d8da565-c27c-3497-9b40-6b91741ca4b1.roa
Signing time:             Wed 08 Oct 2025 13:00:37 +0000
ROA not before:           Wed 08 Oct 2025 13:00:37 +0000
ROA not after:            Tue 06 Jan 2026 14:00:37 +0000
asID:                     21898
IP address blocks:        74.209.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:27:4e:24:01:6c:da:ec:17:3b:a2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d
        Validity
            Not Before: Oct  8 13:00:37 2025 GMT
            Not After : Jan  6 14:00:37 2026 GMT
        Subject: CN=ac0e4643-85b0-4e3b-a746-acd57a2372b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7c:00:13:e8:9e:55:17:c0:e0:d0:81:9e:29:
                    6d:a0:36:c1:44:73:99:e0:25:84:19:f7:ba:54:de:
                    2d:b7:34:7a:52:c3:eb:e4:9f:75:82:e0:57:20:54:
                    0a:f3:db:a5:c1:50:9f:0d:58:f1:be:9f:f0:85:2f:
                    b4:5e:3d:61:ce:9b:d5:30:21:42:58:36:97:66:ff:
                    3b:3f:5e:f1:ce:c2:fb:e2:24:b9:33:13:93:2d:b8:
                    4b:49:7a:d1:cf:bd:ee:fc:12:64:69:0b:23:09:5e:
                    b7:67:ec:00:21:fc:de:27:a6:a3:9f:11:ea:e6:e1:
                    9c:90:84:12:3e:01:21:4a:c6:6b:38:9a:df:a8:97:
                    61:5c:ab:4d:55:a2:fe:36:84:8f:0f:c5:25:87:55:
                    d4:97:1e:9d:1c:7b:16:d8:35:2f:e5:0e:d8:3a:64:
                    6f:2b:b2:4a:d1:5e:03:1d:6b:9f:4f:34:ec:37:ed:
                    74:6b:05:cc:a6:df:b2:2a:ba:d7:84:45:4e:e6:90:
                    e6:f9:3c:38:14:c2:1a:5f:42:5b:df:64:b9:28:fa:
                    dd:ff:c3:a7:9c:33:48:3f:dc:09:7b:57:b9:71:79:
                    51:eb:4a:ac:00:e3:81:86:7f:78:55:6c:ff:ea:6f:
                    c1:15:0b:0a:31:9f:be:a0:2f:63:53:c1:b2:ac:b2:
                    cd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:01:69:70:7D:9C:68:9D:5B:74:DA:BB:0A:E9:D7:7D:79:3D:09:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/6d8da565-c27c-3497-9b40-6b91741ca4b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl

            X509v3 Authority Key Identifier:
                keyid:AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.209.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f5:6a:71:d6:08:cd:a4:02:85:6c:9d:11:82:27:1e:12:1d:
         e4:3b:0b:b8:fe:ff:53:9b:76:3d:c3:3a:60:a1:40:c4:84:89:
         9e:16:a2:f0:26:9b:d9:e0:56:95:24:80:77:92:6a:56:a7:d0:
         33:d8:75:a3:4d:38:73:26:f4:c3:44:8e:75:af:71:2c:07:c7:
         36:6d:4d:d1:a1:ae:5d:33:c2:2a:1a:72:fe:2b:f6:92:74:4e:
         c6:45:62:30:a9:ad:6a:ee:1b:fc:9a:0b:02:67:74:a9:22:7d:
         8e:f8:4c:f7:e5:69:f1:08:11:65:8b:7c:23:93:f7:3b:d4:a5:
         81:68:a5:d4:9d:6a:9d:94:30:f4:f2:98:23:bb:d7:ed:84:4c:
         5c:b4:91:10:3e:16:2c:f4:2b:0e:25:2f:06:e8:76:ff:8c:62:
         33:2f:40:87:5b:4d:8f:36:1d:90:0d:1f:e1:97:dd:81:70:a0:
         23:fd:65:c9:a0:2e:63:4c:17:a1:04:6a:30:70:ad:7f:b4:85:
         29:7a:7a:78:77:1f:f2:4d:e5:ba:28:6e:5a:d0:5b:e3:66:87:
         c8:c3:58:ef:9b:cb:02:d0:19:73:6d:f5:c2:ea:0d:c6:17:e2:
         00:44:45:f4:3b:0e:98:d3:b4:b8:03:75:d5:2e:e4:4f:3d:8f:
         69:2b:87:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:04:57 2025 by rpki-client