Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/d90ed9cb-7e08-39dd-bd41-d0cc096da7ef.roa
File:                     d90ed9cb-7e08-39dd-bd41-d0cc096da7ef.roa (raw, json)
Hash identifier:          cv8N7Pq2kZX9d5ji392PEOB1m5w4g2VieCMee2Mcp3U=
Subject key identifier:   0B:7B:9A:54:0B:2D:FF:AA:78:F0:09:C2:29:6C:97:DD:12:2C:A5:58
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584A8575F574B758E8EB6B529880
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/d90ed9cb-7e08-39dd-bd41-d0cc096da7ef.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     6453
IP address blocks:        174.35.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:f5:74:b7:58:e8:eb:6b:52:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=48b9cfa3-fe26-4f1e-b156-5c8bb40faee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:20:e0:a7:73:f0:76:2c:12:2c:5e:73:2b:
                    83:a4:47:c3:70:6e:d1:60:05:cb:4b:95:6b:3b:fb:
                    31:7b:0b:b0:fe:cc:04:f6:af:ee:21:b3:87:b5:ae:
                    56:e3:09:28:12:c4:53:a9:fc:83:86:9e:7c:24:7a:
                    29:eb:bf:8c:71:6a:49:27:36:df:30:4f:ba:6b:cc:
                    29:a6:ab:cc:db:96:9a:00:a8:26:1c:af:9d:a6:dc:
                    8c:80:1f:61:4c:38:66:47:b1:f3:e9:05:eb:a9:b8:
                    6c:ca:3d:44:be:c4:f6:fa:12:ef:d9:a8:ca:4e:32:
                    90:4d:fc:59:bc:1d:68:ba:ba:08:c7:2d:46:3b:3b:
                    a9:60:16:96:e3:d7:f9:48:b7:c3:d5:d7:f8:57:f0:
                    c8:80:50:30:ab:70:4c:ca:0d:03:cc:a8:90:b1:0c:
                    bb:2c:2d:5a:c0:20:e0:9f:ae:4a:a4:80:cf:98:39:
                    77:21:b7:c8:f6:05:40:4f:10:a3:d9:01:5e:3a:07:
                    f6:9b:56:c8:c4:85:18:61:99:52:78:16:d8:01:ae:
                    02:0d:9e:39:56:fd:6d:2f:ff:f2:70:01:8b:83:6d:
                    0e:2d:6b:49:57:01:e4:fa:90:fc:64:a1:c5:5d:fb:
                    80:71:63:39:b3:1f:1a:27:17:96:0c:a6:0d:5f:2f:
                    46:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7B:9A:54:0B:2D:FF:AA:78:F0:09:C2:29:6C:97:DD:12:2C:A5:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/d90ed9cb-7e08-39dd-bd41-d0cc096da7ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:98:53:ba:b2:bd:6a:b1:15:f7:7b:87:0b:af:d5:c7:2e:f2:
         79:92:9d:55:11:ea:62:57:bc:f1:d6:d8:22:42:76:e5:24:7d:
         8d:cb:66:a1:19:9d:5b:2e:ec:7d:f4:92:de:21:18:d6:f0:13:
         98:a8:9b:89:51:17:46:93:47:99:51:08:7d:08:30:8a:4c:6f:
         3a:c6:12:bf:16:7c:e9:1d:92:1f:d1:aa:d8:71:32:f2:51:e4:
         68:fc:f3:88:ad:2b:2f:93:9f:4b:3c:b4:cb:15:e0:66:4c:e6:
         c9:1f:d4:8f:be:5d:2d:9d:da:5a:1f:fe:fa:8a:be:77:28:43:
         49:ef:21:d8:00:37:b9:1b:a1:70:3e:d1:06:e7:84:fa:21:12:
         75:b7:e1:b3:5c:39:9d:f7:75:78:f6:1d:b6:b3:28:a9:3c:30:
         aa:e6:43:a9:33:9d:b8:cc:b1:b1:97:c8:ef:c3:bb:12:e7:bc:
         96:1a:81:99:f8:1b:98:ea:32:c6:45:d9:8e:d9:59:7d:99:d5:
         c6:54:72:7b:12:5f:f0:5f:7c:ab:bc:e3:81:cb:81:9d:03:11:
         6b:29:be:f1:2f:87:df:8e:02:79:3d:03:5c:98:ae:7d:07:7a:
         96:8f:4f:7d:9a:f5:6b:6e:56:6a:8e:76:61:2e:3a:1e:99:85:
         a6:48:0a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:48:25 2025 by rpki-client