Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99ba8f0c-ae4b-39ce-ad7b-1811926fb054.roa
File:                     99ba8f0c-ae4b-39ce-ad7b-1811926fb054.roa (raw, json)
Hash identifier:          DD+YVFFyGzYsOqq4DV7ggrkuBKL9KkznbQfv0ySIwFU=
Subject key identifier:   64:D6:31:BC:E6:24:D3:4C:5F:FF:8C:BD:74:45:35:E6:CA:52:FF:83
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584B28C6EA98B257B622CD911980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99ba8f0c-ae4b-39ce-ad7b-1811926fb054.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     27338
IP address blocks:        74.8.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:ea:98:b2:57:b6:22:cd:91:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=72f0ebef-e451-4cca-a112-29f31215109a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d9:9e:ff:13:52:32:cf:3b:96:db:5b:5f:8b:
                    f1:43:b2:4f:f6:5e:b9:9e:08:9e:f4:a2:bf:dc:d9:
                    4c:d8:00:42:39:bb:f6:48:e2:6e:75:6a:a2:7e:16:
                    2e:4e:10:f1:e6:00:b1:5c:3a:f5:87:a6:98:a5:ec:
                    74:08:e5:41:df:3b:fa:ec:5e:07:b8:e4:f9:b8:a8:
                    c1:9f:a4:a8:b4:47:fe:d4:cc:03:35:ad:10:de:ec:
                    ac:eb:ec:9f:d7:6b:3d:1a:8e:90:74:c1:06:9e:f7:
                    36:63:e4:0d:11:96:8e:a1:a3:ee:26:65:33:35:ed:
                    61:0f:8a:02:af:15:b2:fe:0f:1a:9e:b8:6a:54:f8:
                    83:ec:ba:da:65:e8:66:fc:8a:f6:a9:fa:49:58:42:
                    14:00:70:a0:be:28:bc:dc:5a:e0:4b:0d:92:5f:5f:
                    26:ac:31:06:ee:a0:ea:a9:54:8e:37:63:b2:7b:6a:
                    f5:88:d8:06:1e:60:88:6a:7d:88:52:d5:fd:1e:d6:
                    3a:35:cf:e1:88:32:fd:d2:2e:c2:3f:0d:2d:9e:63:
                    e2:a5:23:4c:5c:9b:a8:d2:57:86:32:f1:df:f4:fa:
                    c3:7b:6c:0a:11:82:72:b1:d5:7d:86:54:74:c8:c1:
                    d7:2c:d1:cf:82:89:b1:6f:e4:2a:06:0c:2d:9a:e6:
                    89:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D6:31:BC:E6:24:D3:4C:5F:FF:8C:BD:74:45:35:E6:CA:52:FF:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99ba8f0c-ae4b-39ce-ad7b-1811926fb054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.8.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:f6:83:06:a9:8a:5b:cb:6b:1f:c1:50:ec:d1:89:0f:d3:37:
         57:ba:a0:d4:6a:05:f6:3b:71:b9:77:be:b6:1e:82:6a:f6:16:
         cd:5a:9a:2c:f7:12:d1:6a:e0:28:a7:b6:43:24:3f:ef:40:08:
         c7:3d:22:18:9c:db:ae:e2:3a:ea:c5:81:ed:d6:af:c4:0f:a0:
         2d:8d:e7:1e:39:d0:3e:ff:c0:0a:b9:32:21:35:94:17:c7:14:
         b6:62:10:fc:9a:52:12:94:ab:34:28:b3:31:36:9d:14:23:79:
         b8:25:a2:ea:44:94:61:c2:eb:00:2f:35:9d:4f:39:7e:4d:85:
         a0:54:25:1b:bb:bf:92:89:e6:dc:d3:14:ff:88:d1:56:16:85:
         6c:20:72:72:f4:bd:78:8b:f2:6a:81:70:96:bc:a2:c4:e7:39:
         3d:34:7c:f0:19:bf:fc:a1:15:07:89:50:a0:ba:77:9c:9b:0f:
         06:76:d6:04:80:36:db:ef:b1:57:5b:fb:d3:08:1f:d7:ff:b8:
         b8:b4:4e:de:78:a6:fc:17:2e:c5:0d:d3:28:f5:28:79:19:dd:
         04:5d:1a:a1:b4:b7:18:76:38:6e:83:0c:fb:3d:99:0f:39:07:
         68:8d:e8:27:cf:84:8f:d3:d8:f1:e1:f3:1e:5f:5c:2e:76:53:
         17:95:fb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:06:36 2025 by rpki-client