Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87e947e3-f9b3-3b5e-b615-396f3f4a58a7.roa
File:                     87e947e3-f9b3-3b5e-b615-396f3f4a58a7.roa (raw, json)
Hash identifier:          xcvQWkhQ0wX4JRiaoJ70XUUp2o4oBycKS5SRAs/Fm94=
Subject key identifier:   45:35:DD:6A:58:E1:5F:92:F6:D5:E0:FD:7D:96:5C:5B:0E:BF:3A:61
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AD3A114B396371B97C1A76180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87e947e3-f9b3-3b5e-b615-396f3f4a58a7.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     20115
IP address blocks:        16.14.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:14:b3:96:37:1b:97:c1:a7:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=772dc536-d0f8-4df7-8967-64316f1bf389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3c:e5:f6:91:c0:e4:b2:d2:59:03:0a:c9:25:
                    75:76:b0:f2:b8:58:2e:0f:eb:8f:f8:f6:df:72:3c:
                    15:2b:ad:a9:38:28:94:d4:6a:7c:9a:ee:ba:aa:fa:
                    ba:37:c5:ee:12:ae:84:89:6e:87:33:b8:07:d6:55:
                    a7:3b:26:5e:78:79:fb:67:c2:0d:3b:e8:2b:64:e2:
                    54:94:10:d7:d0:d8:5e:76:0a:bb:6d:2c:88:b3:84:
                    67:d8:ee:fe:c9:80:0f:9b:8f:3b:33:1e:87:4c:18:
                    b7:39:32:03:71:91:18:e4:4e:60:f0:2c:ab:c7:c6:
                    e3:41:cf:2a:9b:19:01:e8:d9:75:dd:22:75:17:4f:
                    30:22:95:ff:82:b1:76:21:1f:65:49:23:94:ca:f8:
                    c3:03:d1:f3:f8:69:55:15:18:8f:f6:4b:a9:15:72:
                    e7:be:ef:7a:26:0a:22:9b:99:07:f9:ca:3a:4c:7d:
                    82:19:1d:c3:62:b7:4d:4f:99:5e:e4:da:7e:60:82:
                    1b:39:7c:c9:51:63:32:bf:16:59:f8:ed:21:a0:7f:
                    03:8e:de:fd:a3:ed:1a:23:d4:13:cd:58:d1:bc:60:
                    ac:d9:7c:f3:97:4f:6e:1a:62:9c:18:fe:9e:53:ac:
                    86:0c:22:da:83:09:04:bc:c7:29:89:ab:17:37:51:
                    69:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:35:DD:6A:58:E1:5F:92:F6:D5:E0:FD:7D:96:5C:5B:0E:BF:3A:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87e947e3-f9b3-3b5e-b615-396f3f4a58a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.14.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:a3:73:21:f3:80:67:36:6d:99:8d:65:83:93:dd:5c:c4:ad:
         5c:0d:d7:df:bc:c5:58:f9:27:f0:de:1f:2f:bb:5c:fd:b7:98:
         17:0a:54:0b:5e:07:de:bb:1a:a2:a0:d3:43:ef:93:60:b4:ea:
         1c:87:01:36:9c:01:ad:16:33:eb:cd:2f:a0:31:9d:ad:2f:30:
         02:16:d5:77:a0:75:7c:cd:23:97:7f:58:c3:34:0b:f7:34:49:
         35:1d:4c:ae:bf:bf:2e:f8:00:76:80:bc:d4:7d:e8:fb:68:2d:
         7d:bc:7a:54:6f:52:db:18:a8:b7:ba:16:84:d2:72:1a:8b:d0:
         e4:98:1d:fc:09:f0:99:85:e7:3c:03:74:b2:03:4d:f9:c0:60:
         e8:7f:3c:70:f0:3e:60:74:12:18:73:a5:5e:d3:d4:1a:c5:d6:
         d7:ed:dc:ad:ce:57:51:a6:cd:91:21:7a:19:66:a7:42:0a:f5:
         ed:16:7b:7f:78:3c:af:94:b5:a7:ee:b3:bd:5a:14:eb:77:fc:
         02:fa:ad:4c:54:f6:3a:c3:30:c6:73:cc:72:41:e9:19:57:7e:
         28:fc:d0:1b:6f:b5:f1:f6:36:81:f5:09:5f:f0:a5:3e:ec:96:
         84:ef:12:a9:80:ad:19:7a:43:65:e2:23:71:ac:70:88:b7:94:
         74:43:49:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:34:22 2025 by rpki-client