Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/c7638a2d-de94-31cd-8168-33b5ac54fb2b.roa
File:                     c7638a2d-de94-31cd-8168-33b5ac54fb2b.roa (raw, json)
Hash identifier:          8wjzP+9bL2bHKSuE9wLmPbuJ+jGc6/e/XkuQvmlnREM=
Subject key identifier:   A6:9F:C2:96:28:F7:90:CE:52:6B:47:A5:C9:46:86:9C:EA:03:1B:FC
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584B153C1647746EB247DFFED300
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/c7638a2d-de94-31cd-8168-33b5ac54fb2b.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     4540
IP address blocks:        74.116.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:16:47:74:6e:b2:47:df:fe:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=67f3f099-60bf-493a-8c74-d7ff3aac4a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:34:d5:ba:e1:f0:5a:eb:f7:1b:e6:f5:d5:
                    63:95:58:6e:cb:1f:f2:bf:c7:37:ca:44:f1:98:e3:
                    bf:3b:c7:3e:c5:34:6b:a0:d1:3c:bc:4c:ad:75:9f:
                    82:b9:38:34:70:82:c4:c3:50:39:81:bb:fc:fb:23:
                    83:02:30:ae:59:09:28:29:b4:1e:3b:9e:0e:36:2c:
                    9c:af:fd:4b:9a:f1:6c:51:e3:9c:3b:7a:00:db:42:
                    c2:0b:b4:b8:b9:20:ee:39:93:60:5c:9d:1a:5c:5d:
                    7b:aa:8f:df:29:dd:d6:3f:ac:8c:20:b6:ef:a2:98:
                    fe:3a:18:56:59:73:40:d3:7a:cc:83:20:30:50:f8:
                    b7:1a:36:e1:67:b1:ef:5d:21:08:65:02:14:0c:23:
                    11:9d:1b:74:fb:30:6f:e1:43:db:19:e9:60:e8:00:
                    3c:28:39:a9:1c:6c:5b:95:7f:da:ba:0c:58:74:2f:
                    66:0c:68:4b:16:1a:4a:db:17:2f:11:ad:2d:2b:96:
                    60:ad:78:37:52:c6:8a:45:c8:b8:c4:d5:d6:59:c4:
                    de:7a:54:6d:ea:de:a4:e6:11:58:c1:93:ac:f8:b7:
                    8e:c8:83:e0:2c:dc:26:1b:93:05:a7:98:3a:58:37:
                    b4:aa:be:22:b8:16:66:ec:b4:2f:b1:99:12:de:3e:
                    f1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9F:C2:96:28:F7:90:CE:52:6B:47:A5:C9:46:86:9C:EA:03:1B:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/c7638a2d-de94-31cd-8168-33b5ac54fb2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:6d:64:7a:9a:a5:65:42:73:18:05:de:fc:6a:71:e0:19:08:
         36:ab:07:69:7d:f8:46:74:07:60:a1:ba:c8:c9:d3:6d:4d:59:
         88:43:d2:81:b7:94:67:02:8b:41:e2:3a:a6:62:79:d7:21:f5:
         f4:ab:f2:28:f5:20:30:60:e6:02:0c:4b:c7:06:96:19:4f:9c:
         e1:bb:fd:6c:20:8e:75:a5:3c:e5:e7:cf:6b:89:9f:46:a1:d2:
         54:e2:fa:32:3c:5e:69:28:f3:85:f4:78:9e:2d:34:c4:5d:e8:
         44:39:59:b4:cb:5b:ad:c0:f1:4c:1c:ec:bc:c5:54:ec:b8:fb:
         b0:00:ad:cf:a9:85:11:af:b9:13:fe:8d:f0:7c:34:6c:fc:d0:
         e7:4e:de:e8:7a:a7:d6:e0:b5:52:c1:c7:b7:b8:6b:db:29:c2:
         84:1f:38:76:74:76:13:5c:e0:bb:b9:63:f7:74:46:2c:c7:11:
         25:4d:72:f4:a0:0d:03:36:82:12:4b:c6:59:81:2b:a1:30:53:
         5a:61:99:8c:69:69:d5:49:be:4e:d8:34:35:b9:54:0f:8c:69:
         f0:6b:53:32:3c:8e:3e:4f:59:67:2c:2e:4a:61:2e:c4:dc:c7:
         58:4c:f3:9a:7d:8f:38:9d:a3:0c:4e:ab:85:69:da:ac:9f:b5:
         b6:90:bd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:29:48 2025 by rpki-client