Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/7953d054-87ee-3a3e-ba54-e39e1dc8bcb3.roa
File:                     7953d054-87ee-3a3e-ba54-e39e1dc8bcb3.roa (raw, json)
Hash identifier:          qIUUohm+J9o0JjXwv12QyIJsgeOwxIl7skXspVIHqZc=
Subject key identifier:   8F:1B:41:27:A9:0E:9F:85:71:07:55:90:8A:2D:8C:1B:F3:63:22:EF
Certificate issuer:       /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial:       010D0C9F4328584A3B7AFBF8A2994C01ACE22E80
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/7953d054-87ee-3a3e-ba54-e39e1dc8bcb3.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     22742
IP address blocks:        74.123.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:fb:f8:a2:99:4c:01:ac:e2:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=fe712250-733e-4ca6-a6b2-9c08ed0205b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d8:3f:4c:20:69:2f:e9:9a:8c:d2:4a:e9:95:
                    d1:7d:d8:4c:32:cf:75:f3:8e:e3:24:3f:9b:96:61:
                    07:c8:35:d5:e1:dc:0a:3b:00:94:c6:42:b8:3f:a9:
                    7e:a7:fb:eb:11:04:5a:c7:3d:53:cf:c0:20:a4:13:
                    ac:53:ae:c0:82:58:c2:aa:c6:74:a1:88:6b:9b:a3:
                    18:6c:dc:83:83:8d:0e:d7:62:c2:91:98:5b:7d:e0:
                    3e:9e:ce:19:dc:19:f3:1a:c4:42:04:94:e1:0f:64:
                    23:9a:06:7a:ad:51:06:5f:5f:f6:65:13:b0:de:b1:
                    26:89:e7:69:8f:f0:d7:fa:0e:57:8b:6c:48:a4:7f:
                    34:72:06:e0:3a:3d:33:d9:0f:8d:ff:8c:4d:61:5a:
                    99:a5:63:e4:d2:f5:bb:1e:0a:87:f5:16:26:2c:97:
                    aa:4d:23:2c:19:f3:5f:e4:38:e3:79:cf:00:35:ad:
                    38:a7:35:53:35:82:8c:c9:a6:5c:56:fd:2d:69:74:
                    61:40:71:05:dc:16:90:ca:54:af:e7:80:b9:21:19:
                    68:d4:d5:75:d4:8a:09:68:67:3b:6d:aa:5d:b0:09:
                    14:f1:2b:20:fe:b9:ff:63:a9:90:d7:bd:fb:d5:e2:
                    fd:e5:03:07:71:db:e9:87:ef:6f:91:c6:03:5e:fc:
                    38:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1B:41:27:A9:0E:9F:85:71:07:55:90:8A:2D:8C:1B:F3:63:22:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/7953d054-87ee-3a3e-ba54-e39e1dc8bcb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:fa:6e:e0:17:41:5e:34:7f:d8:2f:70:a6:56:11:5d:17:90:
         6b:cb:92:c2:c1:ea:00:2e:78:b9:77:74:b2:0b:59:e0:45:ed:
         19:bf:4a:a2:c3:a4:91:a0:f1:df:fe:25:e0:5b:94:11:7d:40:
         a6:ee:b5:77:c6:7c:8c:3a:4a:4d:ac:1c:85:0c:5f:56:72:8f:
         1c:91:eb:0a:54:9a:ce:25:8a:1c:c2:b8:69:48:f4:3e:90:e0:
         44:be:1d:35:73:54:aa:c1:de:49:c9:f8:e0:b7:9e:4f:d8:00:
         b8:16:b4:5e:e2:25:47:ad:cd:d0:2f:92:c6:b1:c7:7a:55:2b:
         6b:b6:2f:d3:78:7d:6a:db:b7:bb:50:5c:01:d3:32:52:e9:14:
         cc:9a:c4:56:a3:9b:b4:c8:4c:e3:6a:57:b6:f1:3f:ac:c0:ff:
         7d:68:a5:f4:18:ad:50:82:02:f6:d9:e3:e7:71:c1:cf:ed:88:
         f5:9f:8a:8b:81:93:5a:59:40:90:0c:15:14:a0:d7:d1:6b:8d:
         8d:6c:fb:72:5e:49:dd:c4:fc:67:9a:a7:b3:43:f9:6e:27:2d:
         81:0d:4d:63:2d:3d:61:2a:6a:da:f7:80:da:35:79:cc:65:48:
         75:b8:51:fe:b9:84:57:87:8f:ac:a5:32:6c:e3:99:a7:11:1c:
         4d:ef:2e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:21:30 2025 by rpki-client