Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/5d003fa2-3876-3e07-a7c0-cc4602b2899e.roa
File:                     5d003fa2-3876-3e07-a7c0-cc4602b2899e.roa (raw, json)
Hash identifier:          g4u3+6DrZQg0mA+kAXTHnM9NbdBgNeY2nRO2ohh+yT4=
Subject key identifier:   ED:2D:08:FF:F5:9A:D4:C7:4E:63:53:5D:91:BF:F0:FA:4B:55:10:03
Certificate issuer:       /CN=e06c5587-5b99-4fbf-8de6-e9c983f1495a
Certificate serial:       010D0C9F4328584B8EACE7E34BB2DB9F0DDA6E40
Authority key identifier: 4C:4A:60:E2:E3:1C:C2:4C:C5:C0:E5:83:03:1D:66:D9:8D:55:0C:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/5d003fa2-3876-3e07-a7c0-cc4602b2899e.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        74.112.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/e06c5587-5b99-4fbf-8de6-e9c983f1495a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/e06c5587-5b99-4fbf-8de6-e9c983f1495a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:e7:e3:4b:b2:db:9f:0d:da:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e06c5587-5b99-4fbf-8de6-e9c983f1495a
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=df2d9575-142d-4c20-bd88-c65d7fa4f11f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c9:9a:c2:9a:75:65:60:16:72:ab:5a:27:82:
                    47:ec:d7:fe:4a:c5:75:17:76:b1:2d:30:04:5b:04:
                    6b:07:8e:2c:65:d2:bf:05:69:97:c4:da:96:ce:64:
                    40:37:6b:1b:28:d5:e2:d3:67:6b:62:cb:fb:43:d6:
                    2b:94:16:18:e6:86:d5:f3:9c:82:27:6a:b8:54:e8:
                    da:6a:8c:df:e8:69:da:b9:14:bc:49:7c:4c:3f:b4:
                    0b:f5:46:01:13:af:6e:4d:98:7c:7c:13:f5:37:36:
                    0e:e9:ae:8a:a6:ea:1c:0f:01:63:e8:89:8a:40:06:
                    47:87:a7:21:79:fe:06:bb:dc:62:bd:80:40:e5:e6:
                    b6:95:a2:2a:d4:6d:93:56:6f:19:11:76:c9:f1:bd:
                    fa:2a:3c:9e:30:76:f5:d2:58:11:21:2b:0e:e6:2f:
                    ed:14:96:2c:95:bb:a9:3f:38:5e:02:fe:58:b1:56:
                    b6:ec:77:10:03:f6:b1:7f:e0:39:86:ea:3f:27:83:
                    b4:f1:3a:79:d2:41:8f:0d:1c:36:5d:3e:33:4a:6e:
                    58:63:1c:86:0b:63:51:76:8d:58:e8:40:6c:af:8e:
                    bc:03:44:72:22:d5:1a:1d:62:e7:cd:e4:55:f4:4e:
                    06:02:7f:fd:d7:18:f2:38:d2:de:21:8e:5c:70:79:
                    23:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2D:08:FF:F5:9A:D4:C7:4E:63:53:5D:91:BF:F0:FA:4B:55:10:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/5d003fa2-3876-3e07-a7c0-cc4602b2899e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/e06c5587-5b99-4fbf-8de6-e9c983f1495a.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:60:E2:E3:1C:C2:4C:C5:C0:E5:83:03:1D:66:D9:8D:55:0C:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:f7:54:13:2b:93:0c:42:9a:96:6e:fe:a4:ca:65:19:98:33:
         f8:7a:77:1e:86:49:ef:ce:25:8f:2a:ad:0e:00:3a:7b:f6:22:
         6b:af:35:bd:e8:07:84:2f:42:cd:09:92:59:91:88:7c:00:79:
         ce:88:f6:c0:02:fc:78:66:ec:57:56:76:55:d9:db:a5:47:54:
         f7:78:2c:92:61:79:d2:90:c6:55:b6:06:c3:29:c9:6f:c1:9e:
         99:81:3b:32:fc:2a:a2:ee:95:19:c7:06:d9:d9:8a:95:11:e8:
         f7:f5:92:48:50:29:b7:9f:f6:47:e7:01:d6:d5:78:9a:29:fa:
         af:93:27:45:c3:62:1d:c8:bb:88:c0:a0:6d:00:6a:f2:a2:43:
         63:de:22:0c:d6:0c:d4:9e:a6:89:59:48:6d:e8:3a:67:2b:5e:
         e2:41:e5:00:09:c0:34:32:5f:37:5a:2a:df:2e:7f:e7:60:6c:
         ad:2d:b5:e5:21:36:ec:fc:70:83:74:ed:93:b9:6d:23:16:df:
         3b:6c:4f:b6:8e:7c:8c:3d:f9:f4:21:aa:69:3b:01:c0:02:37:
         12:25:e7:ac:d1:09:03:32:2d:9f:6d:2d:48:4d:58:dd:70:3b:
         29:cd:30:11:4a:a9:ef:3b:ac:19:94:35:ae:b6:5b:77:bd:c2:
         b9:39:24:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:03:42 2025 by rpki-client