Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a5992985-bd93-3409-a6aa-eaacc45d8e28.roa
File:                     a5992985-bd93-3409-a6aa-eaacc45d8e28.roa (raw, json)
Hash identifier:          qqSJFaBiYjxpWS8zYWVn8+MqGRXu5piFutJO3KEaQWg=
Subject key identifier:   12:BC:EF:CD:AD:68:4D:CB:17:41:D0:AF:E5:8C:2D:F6:5F:5D:6F:66
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A7E7B5A990BE225A346B7A740
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a5992985-bd93-3409-a6aa-eaacc45d8e28.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     209043
IP address blocks:        74.114.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:5a:99:0b:e2:25:a3:46:b7:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=8bfb1d8b-4c47-4f9a-9154-88202e0105c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c2:b4:c8:ef:66:e2:50:b2:1e:a2:de:a4:e6:
                    37:e4:41:e9:5e:bc:3b:78:9a:eb:78:e9:29:40:e3:
                    b1:cd:dd:30:a1:6b:3f:ca:d6:a2:22:d7:14:12:0b:
                    51:f7:49:aa:2e:3e:47:f7:92:74:fb:05:4c:f3:2c:
                    f4:5f:be:e5:bf:c4:6a:b7:01:b6:b6:71:c7:7d:a2:
                    7a:95:00:4c:76:7a:7d:c6:24:2b:20:b9:60:8a:24:
                    74:f6:03:f5:ef:d6:0e:54:fe:57:7c:d1:09:ab:8d:
                    73:03:41:8f:7b:39:c4:de:2c:f1:57:14:e3:84:19:
                    a3:44:9a:54:33:ec:cf:4a:10:85:74:7d:a1:e6:0a:
                    68:8a:53:74:57:4f:3b:75:1d:36:8c:a5:12:0f:3b:
                    47:40:9d:08:85:26:d7:14:55:05:79:24:4b:53:cf:
                    a5:89:f8:de:b4:1b:f8:f0:ba:52:4d:60:3b:4e:27:
                    44:6d:76:84:37:5a:87:a5:da:0b:fd:ed:58:ce:c0:
                    70:c2:99:15:84:91:1b:8d:d6:94:3b:56:fe:eb:15:
                    29:a7:ae:58:c1:de:b4:04:67:26:00:f8:39:81:4c:
                    d4:9a:39:4a:47:34:df:aa:56:0e:de:23:a5:04:b8:
                    0f:36:f0:99:6e:ef:a2:f6:a7:d0:20:15:b9:e9:1c:
                    f9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BC:EF:CD:AD:68:4D:CB:17:41:D0:AF:E5:8C:2D:F6:5F:5D:6F:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a5992985-bd93-3409-a6aa-eaacc45d8e28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:5e:99:bd:9b:dc:72:44:45:96:99:75:55:3c:29:e2:d4:ca:
         0e:15:83:9c:fe:d2:8e:79:0f:04:0c:28:b8:a7:2a:2c:ad:64:
         3e:a1:b7:47:da:db:af:95:48:4a:d8:65:b9:c0:15:d5:db:bf:
         1a:d4:ca:47:00:18:a4:98:b0:94:62:87:d0:05:63:5f:cd:cb:
         da:67:71:dc:57:97:78:ad:e5:20:de:c2:ee:86:3d:2b:23:f2:
         c1:07:50:49:4f:64:7c:d1:ad:ed:44:75:24:48:d6:93:74:e6:
         7f:5f:22:75:38:30:e7:39:e9:a3:1e:a9:8f:c5:e3:42:84:a6:
         f0:c7:74:a9:15:97:cc:9b:28:8a:b8:e2:92:b6:73:1d:c8:f6:
         2a:84:e0:05:fd:50:cc:cd:03:32:fa:d8:c5:be:f1:e7:94:e3:
         2a:a8:57:41:87:0a:20:2b:61:11:0e:30:a6:93:12:00:73:db:
         13:28:84:50:80:03:0b:45:06:65:48:4f:dd:21:9c:9f:ef:08:
         ae:e2:2f:62:32:b9:d3:bf:69:28:a0:6a:dc:e9:bd:44:c5:a9:
         7a:b5:e5:5f:4a:a7:3d:e6:4e:1b:bf:ff:69:44:b0:1b:71:24:
         74:c0:82:b8:95:38:4c:19:16:f5:ff:b7:43:1d:61:64:b2:d1:
         6d:3d:57:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:09:55 2025 by rpki-client