Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/74c7c799-6683-3ba4-b773-de1f7f40675c.roa
File:                     74c7c799-6683-3ba4-b773-de1f7f40675c.roa (raw, json)
Hash identifier:          0QSMX7O9/qFPZ6JTPROMqOTFys1c1DI1CrzDbGIlhoQ=
Subject key identifier:   B4:C2:01:8F:3A:8F:4A:9B:20:BE:34:FD:5B:BD:42:4C:76:94:B8:66
Certificate issuer:       /CN=6fceed53-754a-4a1a-9f77-5921f5f4dad2
Certificate serial:       010D0C9F4328584B0B76A2CE608A449B8A4A9FC0
Authority key identifier: 1C:E3:EB:27:BF:AE:95:55:E8:B5:7B:3C:20:DF:AE:93:9E:17:4D:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/74c7c799-6683-3ba4-b773-de1f7f40675c.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     30286
IP address blocks:        69.84.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/6fceed53-754a-4a1a-9f77-5921f5f4dad2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/6fceed53-754a-4a1a-9f77-5921f5f4dad2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:a2:ce:60:8a:44:9b:8a:4a:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fceed53-754a-4a1a-9f77-5921f5f4dad2
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=6b4cdf81-8d8e-4cd7-8c35-db43138c877f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b9:ab:03:d8:50:9b:bc:00:e4:62:f1:14:65:
                    fd:d5:63:f5:3f:13:46:a9:56:86:50:84:4e:f1:cb:
                    21:ca:89:31:6a:a3:42:c4:85:ff:dc:b7:1b:b0:19:
                    69:e0:14:86:7c:3b:d2:e8:64:aa:58:c8:be:a5:7d:
                    c7:6e:a5:a0:8c:02:70:61:d1:b2:db:fe:5d:8f:c2:
                    ac:9c:24:61:d2:c0:42:62:61:35:a9:4c:b2:f9:17:
                    e0:16:98:72:bf:8a:dc:98:47:b8:c4:c3:70:e5:25:
                    fd:7c:fa:8f:e9:75:59:bd:42:0e:7a:58:cd:34:57:
                    6a:c2:a7:4c:27:07:43:b3:dd:aa:a7:27:00:0a:05:
                    1f:ae:70:5f:12:bb:36:f8:79:18:87:d1:e8:ac:c8:
                    08:33:a3:93:23:92:b2:84:e3:ab:f2:c7:fa:c9:fa:
                    9d:5b:6b:8c:5c:ba:fa:54:83:70:b3:ea:96:09:7b:
                    ef:c3:2a:bd:38:8e:64:e9:ac:1c:97:e4:fb:9f:d3:
                    81:88:30:67:cc:17:48:6e:5f:14:8c:43:24:7a:53:
                    13:53:05:13:03:43:ac:0d:cf:0e:e6:ec:b5:f4:fd:
                    12:a6:7e:70:4e:ca:49:02:24:ef:3c:c8:77:0b:07:
                    a9:ef:f0:28:be:6d:52:22:f1:6d:2f:e9:1f:26:16:
                    ad:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C2:01:8F:3A:8F:4A:9B:20:BE:34:FD:5B:BD:42:4C:76:94:B8:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/74c7c799-6683-3ba4-b773-de1f7f40675c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/6fceed53-754a-4a1a-9f77-5921f5f4dad2.crl

            X509v3 Authority Key Identifier:
                keyid:1C:E3:EB:27:BF:AE:95:55:E8:B5:7B:3C:20:DF:AE:93:9E:17:4D:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.84.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:74:83:38:b3:2d:d2:ae:1a:3b:17:bb:33:99:ae:0c:4c:44:
         b1:95:0a:2d:39:12:f1:94:68:05:ca:72:a0:2e:5f:d0:0e:1a:
         00:e9:f5:fa:2a:b4:bb:63:d6:33:4f:3e:bd:15:4f:81:d8:e4:
         80:ec:17:b8:ae:be:62:30:27:3b:3c:a9:f0:51:02:5f:cf:1e:
         ac:69:31:d9:99:7e:01:c8:02:71:09:7e:98:71:3b:bd:c1:83:
         d0:c3:bc:b4:77:76:19:c7:72:eb:af:fb:74:01:60:8f:6d:40:
         cd:2f:0c:d2:15:87:79:c1:02:44:87:16:d2:02:19:50:67:97:
         d3:2c:ad:48:ac:3e:ce:e1:f6:10:97:31:a3:e2:fb:66:52:5e:
         79:a2:97:6f:db:23:fe:e8:b9:0a:84:ce:97:5f:82:96:4e:c4:
         d1:d3:d9:e5:de:99:1e:d2:68:cb:01:6e:bc:04:7e:31:0a:22:
         c8:76:67:f0:66:de:59:07:61:3e:13:7e:70:58:e2:4b:f9:e9:
         20:07:e0:66:92:08:f6:93:65:97:aa:88:0f:83:91:49:d3:b0:
         4e:5f:39:38:dc:8a:1b:db:13:51:6f:24:04:2b:61:0e:da:a9:
         0c:0b:7c:79:11:f6:70:f1:de:98:b9:6b:0f:ae:e5:71:9c:09:
         b0:ca:d2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 09:30:03 2025 by rpki-client