Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b15aa25a-48b8-311f-95a1-9ac337f96cce.roa
File:                     b15aa25a-48b8-311f-95a1-9ac337f96cce.roa (raw, json)
Hash identifier:          MDnPWGkvwVuRyIiEEmqT8SMwdNuN3QAqCvTeF+pZ2UM=
Subject key identifier:   88:4E:60:CB:75:60:20:BD:FB:34:38:8D:2D:C9:03:75:77:19:19:6D
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584AA590F5C07E4115521FA35BA0
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b15aa25a-48b8-311f-95a1-9ac337f96cce.roa
Signing time:             Sat 26 Jul 2025 13:01:04 +0000
ROA not before:           Sat 26 Jul 2025 13:01:04 +0000
ROA not after:            Fri 24 Oct 2025 13:01:04 +0000
asID:                     1288
IP address blocks:        74.80.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 31 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a5:90:f5:c0:7e:41:15:52:1f:a3:5b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Jul 26 13:01:04 2025 GMT
            Not After : Oct 24 13:01:04 2025 GMT
        Subject: CN=aa257ad1-5cee-40b6-861e-063274cf0d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d6:2e:9b:46:dc:fc:76:de:61:5f:67:08:43:
                    cb:16:7c:a3:0f:da:c6:f9:dd:34:e5:c5:2a:20:65:
                    65:45:b1:a4:25:de:0d:de:d8:a2:f1:1e:12:b5:b4:
                    4c:82:90:6a:e9:d8:cf:fb:33:28:85:eb:8f:eb:dd:
                    d2:3e:19:42:cf:1b:a6:62:ea:92:f6:d8:13:eb:7d:
                    80:01:7c:b1:2c:b4:18:25:d2:c5:e7:94:0d:1e:06:
                    bb:85:81:96:5a:83:6f:fb:70:a6:d4:60:8c:5c:0e:
                    b1:0d:09:ff:fe:22:39:f9:c3:a1:05:eb:61:c6:8b:
                    c0:99:a8:9c:67:63:71:3d:01:3b:67:87:7d:6f:d1:
                    73:7f:70:c5:90:86:0c:5b:8b:c9:18:0c:12:96:64:
                    92:aa:48:c9:96:83:5b:8c:10:43:93:ed:ab:08:62:
                    99:ac:f4:d3:b5:bc:14:ba:ec:fe:74:95:c5:7b:25:
                    08:66:6e:19:35:ac:17:f2:ec:80:6a:e7:12:e7:3d:
                    07:b6:57:fc:68:37:ab:8f:20:05:70:64:d4:98:a4:
                    6f:32:2f:03:3d:31:3b:33:ae:f3:f8:04:73:1c:cf:
                    38:a4:59:a6:27:08:17:30:9a:3b:0f:91:0a:81:06:
                    60:8a:25:14:bd:d9:d2:7b:4f:38:10:4d:51:e2:57:
                    d1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4E:60:CB:75:60:20:BD:FB:34:38:8D:2D:C9:03:75:77:19:19:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b15aa25a-48b8-311f-95a1-9ac337f96cce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:71:ef:87:42:c9:8d:1c:ab:92:bd:e0:0d:61:bc:2b:4f:b0:
         36:9f:7b:9c:19:85:ad:50:00:7d:bf:46:18:28:61:3a:a3:4d:
         85:a0:fe:a1:0b:12:95:1a:ca:67:35:76:00:fd:4b:e2:d4:6e:
         8c:31:62:2b:6d:48:11:c7:cb:68:26:eb:15:29:75:3d:66:a1:
         6e:c7:81:27:c7:48:92:29:ea:28:6c:93:f7:76:f4:6c:f7:59:
         21:5d:15:b2:ff:89:c9:17:ff:f4:1e:f4:2c:9e:61:e8:16:9a:
         d6:43:fe:ea:00:f6:ad:c3:b6:44:2a:74:e0:ca:c5:da:96:54:
         2e:cc:29:be:df:bf:b0:8c:84:6b:4e:f3:a6:31:16:5a:c6:52:
         b2:30:9a:2d:df:e9:f6:ee:1b:67:cc:22:73:15:86:70:b1:e0:
         20:22:3d:c3:93:a3:37:cc:4c:0a:9a:88:ed:54:46:5d:bf:20:
         3b:21:69:28:a3:90:4c:46:75:fa:a2:b2:49:dd:13:99:56:bf:
         76:9e:cc:96:4e:d6:1a:6d:44:d6:ac:34:75:50:47:c0:29:5a:
         c9:d1:5c:42:fe:52:18:83:d3:c3:12:a1:13:85:3b:fa:16:c3:
         54:78:10:a5:a8:78:4d:d2:5b:37:7e:66:d5:3b:1f:f4:ec:67:
         65:23:2c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:07:17 2025 by rpki-client