Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/56b7941f-57db-31d9-b23b-53713bd2c82d.roa
File:                     56b7941f-57db-31d9-b23b-53713bd2c82d.roa (raw, json)
Hash identifier:          gS7J7LI7qBZ9g9egu6rQpUHCNJReuYCJA3QzK6u+lJ8=
Subject key identifier:   9A:47:7F:4E:BA:C5:41:FF:97:52:1B:B7:03:17:84:44:73:26:4F:E9
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584B2CF6D86E14F3B3CD07D0AF00
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/56b7941f-57db-31d9-b23b-53713bd2c82d.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     36103
IP address blocks:        74.50.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:d8:6e:14:f3:b3:cd:07:d0:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=040f815a-206a-42ad-8c03-de5f27c552ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:25:21:c2:77:5b:f6:d3:e2:23:1b:77:2d:7e:
                    89:ee:dc:ee:ae:14:a2:4c:74:71:7c:cd:17:ff:94:
                    bd:cc:91:00:c6:46:b0:f7:83:28:ee:03:eb:24:3d:
                    f9:74:96:20:e3:b2:84:b4:a3:2d:29:57:b9:8d:d1:
                    3b:07:94:5c:8a:3b:8c:c7:72:5c:ef:17:f8:d0:2b:
                    6f:6a:90:00:07:c0:7a:ef:cd:e6:0a:4a:5a:be:45:
                    0a:8e:43:9e:4d:bb:0a:fe:ed:d8:b5:88:c8:9f:78:
                    2a:59:c8:00:5b:c5:9f:99:3f:d3:ed:2b:d5:06:36:
                    82:24:eb:ea:27:75:40:99:4c:88:88:17:d1:9c:94:
                    58:1b:94:29:64:50:57:7e:3a:dc:58:7a:63:23:3c:
                    b8:5c:13:54:f0:9b:21:7e:61:4c:30:2e:0c:47:b4:
                    3c:3d:42:dd:e7:08:75:32:82:f2:92:35:32:64:d7:
                    9b:12:a7:88:74:f8:31:47:84:82:e2:75:61:31:02:
                    b9:f6:12:fc:b1:80:6b:ab:fe:74:b9:0d:0c:32:b9:
                    fb:43:38:ac:01:f9:30:36:0f:08:97:bd:50:fa:e9:
                    37:be:14:7b:4a:27:36:a1:d8:41:2c:0e:9f:92:38:
                    db:18:60:22:34:d2:ec:df:b5:e5:83:00:49:41:a5:
                    bf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:47:7F:4E:BA:C5:41:FF:97:52:1B:B7:03:17:84:44:73:26:4F:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/56b7941f-57db-31d9-b23b-53713bd2c82d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:08:be:d7:64:14:a2:b9:d2:8a:10:77:26:ef:db:1b:a1:82:
         55:1d:47:85:46:9a:1a:98:4b:6e:b5:b4:c8:02:33:fb:d7:99:
         c2:40:7b:3e:b8:b0:33:4c:ba:70:f2:4d:6a:d6:92:c4:e4:2b:
         54:e2:cc:42:5b:2e:d0:f5:dd:55:f3:2a:dc:5c:0a:38:43:3b:
         21:11:42:eb:3e:17:67:0e:36:5c:11:d7:83:ec:b3:36:42:d7:
         a8:90:ef:34:7f:d6:a8:8b:85:fa:58:90:7d:14:ee:c8:5d:50:
         4f:e0:4a:96:4a:ef:e5:68:fd:3f:20:7d:1f:29:52:c0:3c:27:
         49:88:d1:79:88:92:8b:e7:e7:1d:be:0f:d5:15:eb:3e:cc:83:
         1d:d3:ec:c0:77:11:d8:c8:00:72:c0:db:a1:d3:4c:df:d8:1d:
         52:46:ae:3c:c7:12:6f:d7:6a:24:24:9c:76:cb:e0:75:3a:94:
         8c:ce:04:62:46:fa:be:27:0a:42:d8:1e:f8:77:49:73:a6:42:
         28:b7:cf:94:31:4a:95:ee:b9:9f:7e:b2:9b:ff:fd:c8:da:09:
         ec:fc:12:22:7c:a1:79:7a:ff:cf:50:22:98:08:96:28:89:89:
         68:3f:e6:0f:cf:8c:6d:25:90:fa:9f:92:af:39:dc:e1:b7:f2:
         02:64:b8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:36:09 2025 by rpki-client