Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/7aab2682-27f4-31f0-92cb-e0ec6137eab1.roa
File:                     7aab2682-27f4-31f0-92cb-e0ec6137eab1.roa (raw, json)
Hash identifier:          t2TLK6gvZC4NsDoU4ZxZLLiJgOyU/RqXtpovcMhrlZA=
Subject key identifier:   51:07:96:D6:9E:52:90:DF:23:59:A0:0B:27:46:8D:EE:E4:D9:27:3C
Certificate issuer:       /CN=1bc71531-d2c0-473c-ad3a-63f1af5e6981
Certificate serial:       010D0C9F4328584B21CC2CCE035C38CB068E6E00
Authority key identifier: FD:63:C0:80:49:96:F9:75:B7:9D:2B:BC:5A:76:94:F7:00:04:E8:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/7aab2682-27f4-31f0-92cb-e0ec6137eab1.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     40864
IP address blocks:        74.116.156.0/22 maxlen: 22
                          209.142.84.0/22 maxlen: 22
                          209.209.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:2c:ce:03:5c:38:cb:06:8e:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bc71531-d2c0-473c-ad3a-63f1af5e6981
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=769ce03c-d952-4984-82c3-c872d9e50324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:46:d4:d6:d0:b6:a8:ba:ca:71:9b:90:13:66:
                    f8:d8:83:b8:85:cb:da:61:d6:aa:f4:db:eb:3d:ab:
                    90:d2:25:fc:18:78:b6:49:94:1f:7c:a5:87:62:f2:
                    46:ad:8f:2f:92:9a:dd:49:41:2d:23:2a:bf:c8:71:
                    b6:e2:7d:52:0a:dc:e3:99:e2:84:e2:40:e8:dd:01:
                    78:6c:47:03:5a:59:da:d7:00:0b:71:41:23:f8:23:
                    ca:fb:d9:55:c5:2f:69:42:55:42:25:22:33:19:c3:
                    2a:66:bf:b3:6c:95:36:d4:86:a9:c0:24:9b:41:99:
                    7b:ac:06:09:b4:6f:0a:bd:10:3d:0f:37:22:69:91:
                    50:d9:44:07:9c:39:e6:a3:4e:f0:6f:59:37:04:d6:
                    9f:58:82:48:71:a7:8e:59:05:ee:a8:6a:5e:a2:4c:
                    fe:78:20:54:9d:e6:a4:97:2a:df:78:65:6c:8e:cb:
                    14:ef:ea:71:7f:3a:23:51:37:10:3f:cb:36:86:34:
                    1a:e5:fc:b8:2d:c2:32:09:98:a3:56:bd:87:e1:3b:
                    91:af:20:0f:a8:b4:57:d4:e3:7d:eb:f1:46:90:b2:
                    f9:88:da:74:e7:eb:aa:2d:38:76:1e:00:1e:32:21:
                    f0:e7:73:4b:82:aa:23:55:66:28:6a:23:7c:4a:49:
                    df:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:07:96:D6:9E:52:90:DF:23:59:A0:0B:27:46:8D:EE:E4:D9:27:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/7aab2682-27f4-31f0-92cb-e0ec6137eab1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.crl

            X509v3 Authority Key Identifier:
                keyid:FD:63:C0:80:49:96:F9:75:B7:9D:2B:BC:5A:76:94:F7:00:04:E8:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.156.0/22
                  209.142.84.0/22
                  209.209.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ae:eb:dc:d1:c0:b0:b3:fd:0e:aa:cb:7a:5b:48:d4:60:8e:
         bd:51:e4:88:3a:09:c8:44:a3:af:67:93:9d:e8:dd:b7:61:3f:
         fc:dd:38:af:ce:f8:16:e0:62:23:d3:1a:c3:61:ca:c8:80:1d:
         63:71:69:09:f1:89:4e:ce:9e:75:d2:31:22:07:40:bc:3f:8c:
         d6:9c:d1:62:be:c2:c1:0c:43:4b:80:71:c2:49:ce:15:be:e1:
         d5:9d:68:f4:11:1b:b5:f8:a2:50:05:2f:19:94:dc:25:67:ad:
         ee:44:7b:40:7f:f7:37:56:c7:17:fd:4b:cd:8a:20:22:49:84:
         de:14:44:4a:06:ff:54:07:9a:8a:9e:61:ff:55:59:28:80:e6:
         62:5c:98:2f:df:be:bb:24:13:e2:d9:0c:34:63:5f:65:52:02:
         37:d9:e7:94:4b:41:29:e1:59:98:4f:8c:73:58:8e:d4:ce:5a:
         74:9f:16:62:99:23:ee:84:80:7d:8e:a1:0f:98:6e:9a:d4:f9:
         bb:80:83:d0:71:45:f2:c2:a4:f2:ff:99:e3:4c:ad:4a:a5:fc:
         f8:78:71:a3:83:ea:43:89:d6:dd:08:81:7c:1a:c4:29:b6:0f:
         bc:a0:24:81:cf:cc:5e:54:cc:56:7a:84:97:99:53:fe:cb:eb:
         16:af:de:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:07:08 2025 by rpki-client