Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/7a777efd-a54e-32e4-9340-ddd327c3b569.roa
File:                     7a777efd-a54e-32e4-9340-ddd327c3b569.roa (raw, json)
Hash identifier:          RLTii6W9UAevQy9Yog0iKpdX7hu2qTqvXomuawemsrk=
Subject key identifier:   86:F0:9C:C6:AC:39:70:B5:9E:CF:7D:4D:E0:96:97:B4:3E:9B:02:A6
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584A374ACE6C7D424CA164BE1780
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/7a777efd-a54e-32e4-9340-ddd327c3b569.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     19795
IP address blocks:        74.112.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:ce:6c:7d:42:4c:a1:64:be:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=dfcb9e85-271c-49a7-9eaf-a239b0647b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6f:26:fc:fc:dd:8a:14:ed:7b:b2:c4:64:41:
                    52:f9:17:e4:81:ef:1c:de:55:3f:06:b2:b7:60:4b:
                    88:61:60:f6:5f:ef:ad:7d:22:1a:38:46:46:cf:97:
                    c9:60:8b:e2:47:76:a5:ab:32:59:b7:f1:b7:73:93:
                    c4:a4:e2:52:a6:75:ff:73:da:12:52:e3:4a:f1:ce:
                    c8:4a:d1:fc:91:66:0d:60:c4:dd:84:30:4a:3d:23:
                    2c:43:fc:f2:e5:d0:89:dc:ea:d5:31:ed:1f:61:fc:
                    2f:66:07:eb:04:18:aa:5a:e3:1e:29:66:30:bb:f9:
                    fa:8b:6a:fc:d0:a0:cd:75:c9:54:c8:d2:cb:80:13:
                    25:6d:bb:e1:f4:6d:be:de:ee:6f:db:20:9f:f5:62:
                    07:5a:f7:c0:d3:eb:b5:bc:b7:48:9d:ed:50:ed:7b:
                    1d:47:2c:48:db:72:82:2d:f4:0c:63:2a:e0:a4:57:
                    1b:2d:4d:60:f6:4d:17:8e:67:a7:e3:ee:c4:23:14:
                    44:fb:2b:4d:75:ee:1a:72:e2:b6:2c:27:76:2a:10:
                    e1:f9:55:ad:1a:e5:36:79:8d:e8:65:dc:d0:d9:62:
                    b5:7e:da:7a:54:e5:20:fb:0d:a3:f6:e5:7c:25:a4:
                    50:21:3e:9a:f0:1c:f4:8e:b4:a4:ba:b9:8e:2a:e9:
                    3c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F0:9C:C6:AC:39:70:B5:9E:CF:7D:4D:E0:96:97:B4:3E:9B:02:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/7a777efd-a54e-32e4-9340-ddd327c3b569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:45:cd:36:33:c5:f0:21:0b:69:98:a0:0d:c1:cb:3a:ef:4f:
         6c:a8:9a:97:3d:c8:3d:af:83:67:8b:00:e3:67:a5:a5:74:3a:
         47:9d:a1:ad:e5:07:ac:ab:21:41:a1:48:12:37:50:62:cb:59:
         50:68:4c:11:8d:4a:30:fd:e3:1c:ec:83:b5:a9:da:fc:5c:1b:
         b6:33:a8:2c:2e:50:06:10:0c:9a:d6:83:72:80:47:67:ab:f6:
         0b:2b:c3:b4:e0:44:60:b3:5a:d0:20:34:94:45:bf:22:90:f0:
         ea:78:6c:b3:19:4c:cc:31:a4:a2:3d:6c:e0:c8:4c:e3:88:d1:
         ae:57:81:05:15:4f:92:25:e1:7e:6e:48:ca:ab:62:87:15:a2:
         aa:c7:80:f7:59:e2:55:f1:3a:a2:48:07:7a:11:36:71:83:96:
         df:1c:ee:4a:18:1c:66:1f:ae:7d:b8:3f:42:e0:a4:10:77:3f:
         c9:74:3c:30:1f:aa:ca:32:f8:fe:9d:c7:54:31:03:74:4b:b9:
         1a:db:92:66:4c:5c:4a:e8:ae:d7:3e:f1:ac:c0:2b:6e:69:8e:
         61:ac:b9:e9:3e:87:a2:26:cf:5b:5d:ee:a4:07:0b:77:bc:03:
         6e:6c:24:84:d0:00:96:06:84:17:b0:f0:b3:ca:68:85:86:ab:
         58:93:aa:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:15:30 2025 by rpki-client