Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/70ac99d2-7062-3ad5-a510-3591893e0831.roa
File:                     70ac99d2-7062-3ad5-a510-3591893e0831.roa (raw, json)
Hash identifier:          xPcYwnazSHUkRSXZO7tQaKoMViL5XqT9Il2GAUEfm/Y=
Subject key identifier:   B2:4F:FB:6F:EF:B9:91:A6:20:BA:55:69:BA:B1:2A:BD:74:5E:F9:08
Certificate issuer:       /CN=e04b8478-e14b-4dff-ae0c-707f31960618
Certificate serial:       010D0C9F4328584B80B7812A265C7D745DB134F0
Authority key identifier: 96:1D:C8:E3:E5:9C:A9:6B:6B:D2:3D:D8:04:C0:4C:2B:72:53:7E:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/70ac99d2-7062-3ad5-a510-3591893e0831.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     14618
IP address blocks:        74.118.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/e04b8478-e14b-4dff-ae0c-707f31960618.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/e04b8478-e14b-4dff-ae0c-707f31960618.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:81:2a:26:5c:7d:74:5d:b1:34:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04b8478-e14b-4dff-ae0c-707f31960618
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=26b28f6a-fbdb-4220-8dc2-7b7e4e329336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e9:8b:a5:ee:cf:82:d3:f8:48:20:d3:ce:ff:
                    34:56:08:c2:26:6b:c5:68:55:83:76:1b:61:61:2d:
                    5d:e1:1e:69:f5:c5:ad:1a:b5:8c:1e:15:8b:80:c0:
                    ae:73:68:9f:b4:47:1f:e6:72:80:cb:58:3c:75:ef:
                    25:7e:1b:a5:28:f5:db:93:6c:46:96:02:2d:ea:5c:
                    e5:aa:cc:8b:1b:d3:c9:07:ba:02:e1:f5:c5:7b:83:
                    37:31:47:94:8b:74:0e:00:87:45:16:ac:93:2b:c5:
                    24:aa:21:3f:ea:dc:24:61:5d:43:b7:13:a3:29:39:
                    5a:af:ec:f1:08:82:77:eb:d9:db:a7:06:f9:ac:cc:
                    d2:65:29:0e:76:70:43:2b:4b:4d:39:6d:d0:77:c3:
                    b2:7a:41:62:2b:6f:d6:65:fe:8e:17:f0:dd:cb:b6:
                    1e:7a:9a:d0:06:e6:dd:bd:a2:7b:f5:92:04:27:65:
                    16:4a:f8:14:18:27:35:14:84:c6:b7:94:e3:39:3a:
                    04:36:76:7b:58:1a:a3:da:09:b9:b1:32:30:08:aa:
                    01:d9:51:b0:e4:eb:8a:4d:6b:f6:5b:84:bc:4c:25:
                    f2:80:ad:aa:c7:95:e2:d7:20:88:1e:79:cf:d7:8c:
                    37:f1:e9:b0:6f:d9:b3:b6:bd:54:11:d6:59:e8:56:
                    08:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4F:FB:6F:EF:B9:91:A6:20:BA:55:69:BA:B1:2A:BD:74:5E:F9:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/70ac99d2-7062-3ad5-a510-3591893e0831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618/e04b8478-e14b-4dff-ae0c-707f31960618.crl

            X509v3 Authority Key Identifier:
                keyid:96:1D:C8:E3:E5:9C:A9:6B:6B:D2:3D:D8:04:C0:4C:2B:72:53:7E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e04b8478-e14b-4dff-ae0c-707f31960618.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:39:b8:64:2d:c3:84:38:2b:f5:fe:02:81:f7:9e:c5:8e:a9:
         83:39:5e:e6:a2:12:00:9f:d8:5e:09:23:c1:f8:e4:b1:51:45:
         c5:88:18:7b:44:63:a9:c1:eb:dd:5d:be:18:90:dc:19:14:fc:
         35:84:0a:07:27:81:72:6d:06:2d:3f:29:65:18:56:f0:f8:a4:
         22:e5:03:c5:bf:c4:b4:5d:9b:6d:9a:4a:e5:d7:27:d8:aa:56:
         38:3a:19:79:62:e2:4b:60:b0:17:d6:19:36:b6:a0:20:d5:e0:
         73:23:d4:69:a6:5e:62:7d:b0:d2:26:d8:27:d6:da:8e:b3:93:
         5f:ed:fd:3b:65:ab:bf:36:54:ba:72:cd:73:de:21:b0:33:6b:
         6f:d3:5c:09:5c:3c:fc:e7:1c:3a:7a:d9:ed:8b:36:b0:ae:b0:
         af:16:07:43:0b:e2:43:c0:06:64:42:95:06:3c:9e:59:4d:ac:
         eb:44:dd:af:ae:37:51:02:ca:ce:33:ee:c2:64:de:0e:f5:10:
         d1:e4:0b:ba:8b:17:73:b7:aa:2d:47:5e:eb:15:c3:17:78:61:
         08:0f:42:8c:27:e8:7f:80:26:79:15:cc:5f:58:2d:77:5b:7a:
         2c:0d:55:12:6c:6a:d7:17:1a:ac:e3:e4:4d:23:42:66:ea:e5:
         68:ae:93:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:43 2025 by rpki-client