Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b3b8e0b1-f171-3fd7-99fd-bef67a6202e8.roa
File:                     b3b8e0b1-f171-3fd7-99fd-bef67a6202e8.roa (raw, json)
Hash identifier:          DjlUNr5s8o5J7NOMqkkA01gFZ335KgkTkiQOaLTmFn0=
Subject key identifier:   A8:3D:10:2F:6F:6A:FC:81:7D:D7:39:0F:7E:6B:CB:69:5D:F2:9C:DE
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584B66320B39D1FF5DA75D8C0C00
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b3b8e0b1-f171-3fd7-99fd-bef67a6202e8.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     152868
IP address blocks:        74.81.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:0b:39:d1:ff:5d:a7:5d:8c:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=fdbaef35-23a2-449c-8e62-7b42317a4833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:76:ad:e6:50:99:0b:e2:6e:28:75:eb:33:97:
                    5f:ed:f8:3e:99:74:ff:26:e4:3d:57:32:b7:ea:38:
                    ba:23:d2:fa:37:18:9f:d3:00:14:77:8b:52:f8:68:
                    a8:25:fe:ce:ff:23:e4:f9:96:c1:87:6d:b1:37:e9:
                    21:28:3b:28:e3:02:5a:a0:6a:49:b8:2f:1d:c6:ba:
                    81:ce:21:6f:5d:b4:26:d0:6c:00:5c:4a:2e:de:7d:
                    a2:a8:73:18:cb:5a:dc:33:af:ee:d5:18:41:be:3c:
                    68:68:24:44:7c:e2:f8:dc:e8:9a:7d:60:08:c1:81:
                    67:03:55:b2:99:52:c6:43:f0:51:2c:0c:94:af:97:
                    b6:75:26:75:fa:5d:ef:40:e5:87:f1:37:2b:93:6f:
                    9d:4d:72:5b:cc:c2:53:b8:cc:aa:c5:82:a6:f7:01:
                    4c:6b:d9:9a:e7:f1:9f:8b:b3:8d:9c:15:4c:5c:6e:
                    51:5b:98:8a:88:5e:af:ae:11:cf:0b:fb:6f:97:5c:
                    d8:1f:bb:26:01:0d:07:54:86:a0:73:fb:95:12:dd:
                    99:de:aa:64:a2:c2:0b:f2:fc:3d:9a:6b:74:9e:8b:
                    c4:fb:c3:e5:fd:29:ae:69:48:8f:b3:d1:a8:ef:ad:
                    3f:9a:57:ab:d5:9a:70:b1:75:a5:46:32:95:63:56:
                    6a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3D:10:2F:6F:6A:FC:81:7D:D7:39:0F:7E:6B:CB:69:5D:F2:9C:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b3b8e0b1-f171-3fd7-99fd-bef67a6202e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.81.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:0e:df:91:4f:15:e3:91:f6:67:46:21:db:c4:0d:a4:75:29:
         ba:48:e6:48:53:59:59:f4:8e:36:27:32:5e:f1:37:ac:5b:7c:
         31:a5:46:3f:57:e4:69:8b:65:25:e1:51:23:32:91:ab:7b:69:
         c4:8d:0f:9d:13:45:3e:fe:2a:0a:bc:16:6c:11:89:8e:37:03:
         28:82:19:29:84:4e:05:98:63:34:e5:b1:9c:10:fb:96:03:cb:
         74:19:83:2a:74:c3:7b:7c:ea:93:25:c0:9a:eb:c4:76:c1:ab:
         1f:4f:04:f7:65:20:02:d1:90:c2:d2:96:b8:d1:3c:0b:c4:5f:
         d3:82:84:56:bd:5c:66:3e:71:b2:32:a4:16:76:38:cf:fe:a8:
         da:0d:5e:8e:57:1b:35:b6:1e:bd:1b:5d:d1:8d:02:37:99:88:
         e1:21:81:59:0d:5b:fc:a1:6f:78:7e:c7:75:da:41:55:1c:1e:
         85:02:1f:ea:69:a8:b4:98:6d:46:f3:8e:99:00:b2:94:e0:21:
         9e:3d:05:f9:37:02:e7:7a:45:da:87:2d:fb:71:9b:a4:4c:d2:
         46:2f:35:12:ba:36:19:51:61:64:2c:d6:3f:48:7c:6f:72:a7:
         20:11:2a:ef:e1:6f:98:a6:18:8a:c5:ad:1a:c2:fb:0b:9a:85:
         a9:83:8d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:17:15 2025 by rpki-client