Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/6cece487-eb07-356b-8a6c-e4f1b92a8c36.roa
File:                     6cece487-eb07-356b-8a6c-e4f1b92a8c36.roa (raw, json)
Hash identifier:          efDjdRuWLHDsBxvSA2bgPkltPp35Bycdux6akOYif8Q=
Subject key identifier:   6F:6F:72:93:C8:AF:B8:FF:98:07:70:96:DE:4E:09:41:78:FD:1C:8D
Certificate issuer:       /CN=0412f035-b376-4807-a8ac-e98680ab0e36
Certificate serial:       010D0C9F4328584B6A61EB41461F581E952C4300
Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/6cece487-eb07-356b-8a6c-e4f1b92a8c36.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     6142
IP address blocks:        74.85.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:eb:41:46:1f:58:1e:95:2c:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=35c8d790-0966-487f-b544-cd05e20fdabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ee:74:45:86:0b:83:7b:74:e4:c4:7a:fd:d7:
                    0d:6c:f1:14:4f:48:b9:56:9f:e8:69:a8:f4:c6:91:
                    f7:04:8e:82:f2:36:7a:50:d5:be:d4:6d:3c:66:bb:
                    12:13:d3:92:2f:53:0f:b1:5b:f5:1f:a4:f6:48:e6:
                    3f:9c:a8:87:a0:25:12:92:72:96:19:47:d7:7c:88:
                    ca:da:f5:f5:f0:a1:7f:25:bb:58:47:e5:f3:91:36:
                    44:77:cc:f1:2d:1d:e8:f9:d9:52:99:35:d6:fa:5f:
                    fe:a6:41:fc:4c:b3:0a:df:b6:5c:c9:c7:b5:47:91:
                    6c:3c:7a:ff:45:78:90:ed:5a:f6:c5:b5:05:89:c0:
                    05:2c:23:ab:c0:c2:96:8a:31:c8:05:4f:ff:5b:5d:
                    31:64:06:84:80:21:e9:d3:33:61:13:b2:55:22:8b:
                    1f:5b:84:44:83:db:1f:4d:be:5a:e9:1e:2c:d7:52:
                    d6:01:7d:cd:81:4d:d2:63:19:3e:5e:fc:2e:de:17:
                    49:74:d2:61:67:10:62:78:3a:5e:fa:93:6b:90:fe:
                    3c:2e:39:3c:ee:ec:2e:7e:e6:83:10:85:4c:b3:b3:
                    f2:12:8a:a0:57:39:29:ff:f5:d1:ae:3a:d5:46:f1:
                    49:76:09:26:38:33:1c:52:ac:27:33:a1:76:10:ab:
                    c6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6F:72:93:C8:AF:B8:FF:98:07:70:96:DE:4E:09:41:78:FD:1C:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/6cece487-eb07-356b-8a6c-e4f1b92a8c36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl

            X509v3 Authority Key Identifier:
                keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.85.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:a8:a3:e7:bf:1b:c4:9a:4e:e0:46:b6:1d:5e:22:be:3c:d5:
         e7:06:36:a6:5b:7b:13:39:83:7b:53:49:ac:e4:ec:d1:36:6b:
         6b:21:7c:6c:f8:85:45:30:7d:26:d2:99:cb:20:46:f1:32:38:
         69:7e:9b:18:c3:f3:ef:9d:b7:01:d8:4f:cc:8c:c8:fe:4d:14:
         04:5d:6f:fc:45:d7:69:e8:70:95:17:6b:f8:ae:5f:cb:7f:b1:
         c2:bd:3e:60:af:ae:56:00:13:49:95:fe:4d:92:01:51:54:4d:
         85:0e:42:f4:84:12:70:19:cf:8b:0c:fc:60:a0:a9:d4:81:95:
         7b:61:27:a6:2e:df:29:69:4e:c3:03:c8:72:bc:a8:3e:5e:1e:
         9b:49:27:8f:78:d4:1a:42:6f:85:b6:ed:2f:ae:94:ff:34:f4:
         bc:a0:08:00:61:a8:29:48:af:06:e3:68:b6:4e:5c:5a:1e:81:
         45:1a:9a:5f:32:f9:37:37:0f:a2:f3:49:79:5c:79:63:16:96:
         b9:57:54:cb:a9:a5:1e:27:d6:d8:65:e0:32:36:f0:98:17:01:
         f0:25:55:5f:ee:3e:ce:14:82:2a:99:63:8a:e0:f2:64:84:60:
         f8:b0:56:b2:d0:cd:07:a3:94:ed:4b:87:67:7e:b0:0c:4a:af:
         3f:fe:a0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:30:27 2025 by rpki-client