Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/74643a59-339d-31eb-989b-007a513d5754.roa
File:                     74643a59-339d-31eb-989b-007a513d5754.roa (raw, json)
Hash identifier:          Dmdt0RA4++NI1c2SghTeB/7uPgWWYH1z8fQegCDLboQ=
Subject key identifier:   E6:A7:71:35:32:F6:A7:24:3A:3C:8E:BB:19:51:17:00:EA:00:FC:D4
Certificate issuer:       /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
Certificate serial:       010D0C9F4328584B1C36D2D61A9A6537AC72B980
Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/74643a59-339d-31eb-989b-007a513d5754.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        204.79.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:d2:d6:1a:9a:65:37:ac:72:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=efdebb42-6bdc-4260-a7f0-a8dcd146bfe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:37:90:68:d6:24:f8:1a:2f:a9:89:21:01:4d:
                    10:b2:83:77:08:58:fd:d8:76:47:d8:0e:0c:28:6e:
                    e8:f3:68:0b:f9:a0:a6:74:e7:ae:d7:ca:01:9c:5f:
                    59:d2:6a:3e:28:4f:31:c9:63:13:d0:21:81:f0:83:
                    8d:ea:c0:40:81:a2:4d:9b:48:7f:cc:38:de:19:0b:
                    e5:d6:3f:59:f7:11:9f:05:70:13:ad:e5:57:21:f1:
                    7d:85:70:7c:4d:9a:2d:eb:b5:95:31:c8:a1:c3:b7:
                    0a:12:cd:d7:ec:2f:05:28:45:25:47:27:ac:35:a4:
                    eb:b8:83:88:19:86:30:88:6e:53:a5:ad:1e:52:6b:
                    b4:93:73:20:69:79:e2:08:41:e8:4c:2b:3e:0d:63:
                    40:2f:da:cc:df:e7:3b:74:af:4e:25:6c:f6:4b:d4:
                    92:e2:71:c6:c5:8f:6e:b0:d2:17:8f:69:e9:7e:2e:
                    3e:9e:40:9c:3b:6b:4b:a5:8a:07:d0:5e:56:f4:d9:
                    0f:2d:d4:ff:92:4b:85:6a:7e:29:ba:39:cf:c8:f3:
                    dd:e8:d7:94:20:b8:17:f9:eb:62:83:fb:33:b0:23:
                    2e:df:20:0e:3b:2c:cf:23:60:46:fa:52:22:44:19:
                    7f:08:5b:12:75:25:0e:5f:2f:10:18:3f:3f:8f:6c:
                    c2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A7:71:35:32:F6:A7:24:3A:3C:8E:BB:19:51:17:00:EA:00:FC:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/74643a59-339d-31eb-989b-007a513d5754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl

            X509v3 Authority Key Identifier:
                keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.79.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:ef:b4:b0:69:f7:03:1b:ff:fb:b7:9a:bf:ac:35:39:4c:81:
         da:a1:fc:5e:33:d3:a7:b1:9c:df:d0:36:43:ae:a3:a0:55:b1:
         79:2d:ad:ac:55:f4:df:55:42:dd:b9:16:ff:17:4a:0d:be:9c:
         0d:fd:65:0c:d5:76:5f:85:98:89:3a:03:ba:65:57:45:6e:70:
         e8:0d:eb:c4:df:aa:fa:8b:d1:c4:5c:4c:8c:e6:26:1f:43:71:
         59:14:c1:58:fc:e3:c3:fd:59:96:ee:e3:94:7b:e4:0e:75:15:
         5b:59:ab:73:30:a4:45:8f:19:d7:00:09:7d:fc:f1:dc:2f:67:
         4f:8e:2d:27:21:94:bf:8d:f4:20:58:15:ef:a9:41:b9:c0:39:
         88:8c:ac:00:01:6b:1a:5e:03:8d:d8:96:8d:42:cd:bd:2e:62:
         5a:c7:ee:31:fa:27:66:38:a9:9c:d6:df:ca:40:79:70:a0:92:
         1a:90:d4:1d:80:83:3a:d8:4a:37:9b:24:4b:c2:34:0b:ea:6d:
         c9:6d:3c:e4:30:88:47:38:c8:1b:fd:a6:3e:5b:37:50:65:27:
         e9:63:0b:ca:23:9a:0c:eb:52:1f:b3:dc:a2:9d:ea:98:1b:48:
         57:ae:97:13:b0:f2:d0:98:5f:6c:7b:09:dd:d9:2a:e0:4c:f7:
         c2:ce:4c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:56 2025 by rpki-client