Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa
File:                     74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa (raw, json)
Hash identifier:          1+6LksLdz25PzCu29UKtE0gA8Qw28wXxksfNKrDjBrg=
Subject key identifier:   BD:BD:82:FA:0A:3F:F5:98:89:76:4F:58:F1:6B:CB:4B:21:11:59:CE
Certificate issuer:       /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
Certificate serial:       010D0C9F4328584AFC1BFC009ED6FD9D0C211900
Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     53904
IP address blocks:        162.244.229.0/24 maxlen: 24
                          205.189.33.0/24 maxlen: 24
                          2001:410:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1b:fc:00:9e:d6:fd:9d:0c:21:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=65224ed2-c418-4061-a9d5-9540b3975b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:04:16:ed:3e:b6:fb:29:ed:75:a2:96:b9:90:
                    10:f6:45:27:d5:c3:d9:17:e6:c5:f2:a2:de:0d:4f:
                    52:58:50:10:9c:66:14:e7:fe:8c:ac:93:62:b5:0b:
                    16:be:ed:ef:61:57:be:e0:49:dd:6b:30:fc:d2:cd:
                    42:ac:be:94:11:f2:b3:e9:83:7f:b7:a0:18:ea:64:
                    87:f0:c6:78:e6:58:53:f6:26:10:86:d5:d4:9e:7d:
                    dc:fc:4c:cf:fe:0c:40:d4:af:1d:f1:26:20:7e:c9:
                    79:bc:97:31:a9:44:67:87:f3:81:d0:aa:4e:23:27:
                    88:d1:2a:46:93:dc:2b:42:6b:49:f3:b8:cc:58:8c:
                    67:2c:0a:e2:34:63:ab:59:b2:a6:a7:7c:75:ca:6f:
                    e0:84:8e:15:b4:cd:85:43:fe:89:d4:95:5b:9b:49:
                    c3:c3:9d:00:62:5d:78:e9:77:08:f6:78:e9:ab:1a:
                    4a:a1:25:6c:98:e1:25:84:ea:e9:66:1c:88:04:5c:
                    39:37:ed:f6:28:15:15:8c:44:c3:a6:50:e9:f7:c8:
                    46:bf:f2:48:b3:09:63:21:a9:d7:7c:f1:89:29:f5:
                    38:c5:b1:87:ec:c9:bb:55:b7:38:fb:25:07:1d:52:
                    db:4c:3f:6c:2c:33:7b:21:19:5a:3d:af:ce:a0:e7:
                    34:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BD:82:FA:0A:3F:F5:98:89:76:4F:58:F1:6B:CB:4B:21:11:59:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl

            X509v3 Authority Key Identifier:
                keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.229.0/24
                  205.189.33.0/24
                IPv6:
                  2001:410:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:b3:40:1d:f2:10:25:90:17:ac:a6:ef:b7:41:4e:26:c5:5d:
         75:e1:b9:e3:67:9c:b4:63:28:26:a0:53:e5:fd:f3:41:4c:5b:
         13:f0:b4:7d:02:9d:64:80:f0:95:75:75:fb:68:c2:74:72:3f:
         96:76:98:1d:92:e6:a7:fe:06:fb:01:67:b4:24:3d:97:05:af:
         af:6d:5b:68:6c:bd:ca:e3:3e:d1:f6:e4:fb:3c:88:9f:57:06:
         3b:fb:e9:ff:49:be:75:55:b9:8f:9d:ac:34:4e:e4:4e:f5:ed:
         1f:9c:fb:a4:90:0d:b3:6b:85:2b:fc:0b:34:7e:fe:29:f4:65:
         0e:b5:f9:0d:70:c0:a0:02:57:52:f7:27:32:28:8e:a3:9c:71:
         7b:f2:49:d0:6c:12:9c:47:50:29:a9:1a:4e:ae:0d:71:f4:4a:
         a9:b3:76:ff:0f:1d:8a:cc:3f:96:d8:f0:d0:03:aa:6e:8f:92:
         a6:b4:ae:73:62:ce:79:b6:24:1c:3d:d8:84:ad:b9:c7:5c:df:
         6e:87:e3:85:93:c6:7e:1d:ff:df:bc:ef:f3:c7:c9:84:17:20:
         a5:bf:74:b9:1e:ea:37:3c:2a:18:b6:78:fd:03:32:ab:1e:4c:
         f0:eb:f6:af:26:11:39:57:8c:47:55:ce:2c:c8:ed:b4:af:bf:
         71:14:ad:c2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Oct 9 19:57:06 2025 by rpki-client