Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/09f24c0a-499e-358e-8cd6-435cbaafac51.roa
File:                     09f24c0a-499e-358e-8cd6-435cbaafac51.roa (raw, json)
Hash identifier:          WUzslcKtvVF73FDjLiVoptDJEhVNYZTKe+WjgL7H7gk=
Subject key identifier:   CB:46:3E:45:92:6B:31:8A:2F:E7:6D:A4:05:2A:9F:16:92:67:22:60
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584B2496DAD4AAF00D5CB4452E00
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/09f24c0a-499e-358e-8cd6-435cbaafac51.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     26065
IP address blocks:        69.74.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:da:d4:aa:f0:0d:5c:b4:45:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=655b9579-5e37-4e80-aedc-2d1a02e34d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f3:f4:c4:49:cc:66:5e:43:44:6b:b2:b4:02:
                    6e:ac:ff:28:0c:40:0e:24:ba:7f:64:e4:4b:0b:c6:
                    c8:2f:eb:bc:85:8b:d5:24:95:1f:02:e8:24:d7:78:
                    e2:46:b6:7c:2d:1d:19:75:88:b3:df:59:2d:3e:69:
                    13:90:eb:45:ce:ca:03:50:9d:ad:98:18:f8:87:2d:
                    54:c5:84:72:25:4e:42:ae:45:4c:25:19:f4:f9:f7:
                    f3:4d:69:21:54:97:22:18:e0:69:a7:f4:b0:cb:a7:
                    44:d0:69:af:25:e7:54:0e:cc:fd:b4:bc:34:7b:3a:
                    63:42:ff:19:f5:2c:e4:97:5f:1b:89:1d:3a:fb:8e:
                    14:d5:7d:02:c8:77:43:b4:1b:6e:cc:8b:fe:1c:ca:
                    ae:8c:9f:08:58:ea:37:60:f6:ed:4e:cc:af:c6:a4:
                    0d:d1:fc:b9:a1:e3:4d:2d:7e:7c:82:03:c5:98:89:
                    93:cc:de:f7:9f:c3:de:63:14:ed:43:0a:bb:cb:20:
                    0e:a8:97:b8:6b:81:f4:d2:6e:c3:2d:83:ca:3b:de:
                    7f:8f:bb:0d:db:ce:1c:99:be:e2:a8:db:06:a4:ee:
                    96:97:dd:2c:e6:2b:9b:9e:bf:75:66:d5:d2:31:cb:
                    b3:9b:aa:61:f8:c6:a2:1e:65:9c:2f:d1:81:26:6c:
                    e8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:46:3E:45:92:6B:31:8A:2F:E7:6D:A4:05:2A:9F:16:92:67:22:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/09f24c0a-499e-358e-8cd6-435cbaafac51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:e4:a5:53:71:1d:90:ce:90:98:6c:18:76:8e:e3:4d:bc:7c:
         33:28:52:bb:62:3e:43:99:a7:b8:86:6f:57:69:7d:2d:66:fe:
         54:06:ba:b6:d0:dd:fc:74:6e:dd:cc:bf:3b:fc:fd:b7:94:38:
         b0:1d:f7:77:55:41:ed:9d:14:39:72:06:d7:a1:87:a1:51:c9:
         a2:2f:39:03:95:96:52:52:52:ef:49:1e:55:2c:bf:51:08:3d:
         bd:9b:72:17:01:53:08:96:11:9e:df:17:ba:80:86:19:c6:64:
         3f:42:15:ec:4f:e5:a6:67:7f:50:a9:05:1a:a7:df:09:e2:07:
         74:ef:5c:35:7f:75:02:67:d2:4c:8a:b4:49:5e:91:e7:ce:dd:
         80:3e:e8:e9:af:6d:53:ae:a0:aa:65:fb:c3:bb:3b:29:0b:a3:
         6b:50:69:4e:c9:13:4d:32:0e:bd:99:24:5f:38:a8:f6:9f:76:
         e0:07:c1:8f:6a:09:94:76:ba:6d:58:c3:e8:b9:57:46:74:9e:
         69:9f:d1:54:4c:25:16:a7:db:ac:48:88:91:ac:2d:76:1d:b3:
         a2:9c:6c:d3:1c:6a:de:a2:23:40:ec:3a:dc:2d:da:f1:90:52:
         4d:4a:c1:84:85:1b:cd:eb:3e:ec:92:bd:17:0c:99:d9:c9:ef:
         94:cf:ba:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:36:33 2025 by rpki-client