Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/6737e22e-c37c-3ebf-96f9-054602e781ab.roa
File:                     6737e22e-c37c-3ebf-96f9-054602e781ab.roa (raw, json)
Hash identifier:          FtwOnWwQ8fzg9eiGAOR4tZR1Khv2lDC3D3/jbLlWvk4=
Subject key identifier:   EC:C5:B0:A9:2F:CA:AF:F4:28:B0:70:2A:AE:93:56:3C:FF:E3:C5:7E
Certificate issuer:       /CN=08c424ab-20c3-4a52-bba2-1ccddeee2e34
Certificate serial:       010D0C9F4328584B1C36C03D5B46DCAD36A92280
Authority key identifier: 0C:CA:C2:AC:1B:F8:B7:04:E6:D2:85:37:B7:55:32:4B:E7:DC:E8:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/6737e22e-c37c-3ebf-96f9-054602e781ab.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     394428
IP address blocks:        74.80.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:c0:3d:5b:46:dc:ad:36:a9:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08c424ab-20c3-4a52-bba2-1ccddeee2e34
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=3834531a-ea68-4977-8b9e-0fbbd1319a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:be:f7:43:a8:54:53:7b:66:41:8e:e0:f1:93:
                    86:44:98:ac:b6:d7:7b:5e:a6:2b:a5:f2:82:a0:91:
                    9d:5a:2b:ce:60:3a:ef:89:35:8a:de:83:c4:c2:a8:
                    e2:df:9f:85:5c:3f:ec:23:5e:77:f7:06:e2:a1:6b:
                    08:1e:ce:d9:1b:3d:87:93:3d:b1:1a:43:a1:21:9a:
                    51:75:b8:a1:8a:da:55:3e:3e:c4:ee:cd:e8:a6:28:
                    04:6c:0b:1d:4f:d7:fc:8b:21:ff:0b:68:f6:d6:80:
                    a4:a9:22:9d:f2:59:1e:fe:3f:9c:7b:7a:8b:40:19:
                    24:ec:d0:cb:5c:22:5e:84:41:e3:d4:5f:a3:ab:5d:
                    60:c6:d9:c7:22:a0:d2:f2:84:23:4b:55:c5:7f:eb:
                    12:35:77:2c:6c:e7:36:f5:58:e1:54:74:ac:ec:6f:
                    11:90:9c:5d:26:9c:08:2d:00:35:2c:e3:79:be:86:
                    fc:42:cc:d7:bb:f6:bb:e8:82:9b:bb:f0:bc:67:ca:
                    90:f8:2b:aa:af:51:71:62:48:a1:37:9a:a3:64:be:
                    19:27:44:42:25:42:e1:52:45:ad:af:d9:80:ff:30:
                    9f:95:c1:06:11:b7:4f:23:0d:f7:ff:cb:37:e9:14:
                    da:a0:d7:1f:3f:89:18:20:50:4e:c1:05:11:5c:76:
                    ae:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C5:B0:A9:2F:CA:AF:F4:28:B0:70:2A:AE:93:56:3C:FF:E3:C5:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/6737e22e-c37c-3ebf-96f9-054602e781ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.crl

            X509v3 Authority Key Identifier:
                keyid:0C:CA:C2:AC:1B:F8:B7:04:E6:D2:85:37:B7:55:32:4B:E7:DC:E8:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:f7:fa:55:38:05:17:f0:4b:3b:23:0b:4d:01:9e:b8:9d:db:
         77:da:73:aa:3f:80:3e:80:a3:ea:de:5c:df:84:f5:c0:1e:19:
         4f:23:91:24:40:9c:67:7a:01:6b:7a:d9:7a:d7:a6:df:02:58:
         24:fe:a1:09:7d:72:a7:72:7e:0c:9d:8b:de:3a:e5:60:ed:50:
         e0:01:bf:8f:aa:90:e4:e2:c1:fa:4f:8f:92:5f:20:80:aa:76:
         99:f3:dc:b3:c5:da:27:2d:e7:18:33:5d:3d:5f:77:5b:55:fe:
         19:82:06:e6:91:d6:69:11:1d:92:ce:03:df:25:66:6e:e6:94:
         1c:2b:a9:c8:5b:62:2c:da:71:33:a7:1c:7c:4e:a1:d1:c9:66:
         af:bf:f9:72:19:bc:00:37:07:fc:02:c1:83:3a:1d:08:37:a9:
         f7:f7:3d:25:5c:0d:1f:5c:59:68:a4:5f:19:ed:be:ee:b8:a5:
         a8:1e:e7:f3:7c:42:14:fe:2b:ea:1e:01:ca:1a:9b:1f:7e:77:
         cb:69:20:40:b8:2f:3f:de:8c:ea:77:54:35:7a:7c:55:ed:dd:
         25:72:b8:d4:58:df:dd:7f:6b:9d:0c:6e:d1:87:2f:c0:ab:d1:
         6f:91:79:ee:2c:ca:49:c7:6d:8a:47:3f:99:3f:a0:ae:9d:5e:
         9c:2e:54:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:16:35 2025 by rpki-client