Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/550f0249-c9c0-33e5-862f-f3578ae9ad65.roa
File:                     550f0249-c9c0-33e5-862f-f3578ae9ad65.roa (raw, json)
Hash identifier:          mTEad/sIR1ZyYG0bS0cscVyyIPxE4SYARglqjVkgE5o=
Subject key identifier:   58:00:31:D7:31:93:46:14:67:46:61:11:6A:21:0A:8C:DD:E7:09:81
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584B1806C77A28633A2B4B4C09A0
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/550f0249-c9c0-33e5-862f-f3578ae9ad65.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        74.112.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:c7:7a:28:63:3a:2b:4b:4c:09:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=ce443367-222c-40b5-8122-fdbc181f3e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8b:16:48:0f:fa:32:d8:1f:a9:62:e3:0b:5d:
                    63:5b:6e:a0:3f:6a:3b:40:4c:d2:79:65:17:05:1a:
                    0e:ac:76:d9:56:bf:9c:d7:06:97:a8:c2:1a:10:13:
                    cf:d4:c5:21:e7:95:88:68:04:a8:9a:a6:7e:92:b7:
                    a4:27:de:97:57:6e:bf:7c:ac:84:23:7c:06:90:32:
                    3a:8e:04:c1:fd:59:b5:19:f1:47:e8:7f:00:cc:8c:
                    5c:c4:0f:07:e8:78:07:b1:28:c6:d0:61:9d:23:88:
                    f0:2d:d2:62:70:eb:9a:a2:9f:ac:a3:19:4c:42:24:
                    d7:d6:12:f0:6d:70:44:7c:25:ed:6a:ea:59:11:2f:
                    cb:3c:66:0b:d6:1b:d7:9a:84:e0:69:9b:40:ea:cf:
                    17:1a:cd:03:3b:5d:ad:86:b4:f2:18:fe:af:9a:6c:
                    37:c7:7d:e2:31:ba:54:24:d0:db:ae:20:af:02:82:
                    2d:ab:0f:2f:71:2c:c3:7b:0a:81:61:a2:2b:eb:27:
                    6f:a2:ea:ca:6c:64:11:14:6a:e7:4d:05:aa:8f:cc:
                    b6:55:5d:1d:6e:bf:8b:23:e4:e1:bb:16:19:31:4e:
                    f3:c1:b9:98:21:00:29:48:34:32:7c:9d:92:d1:ed:
                    83:e9:ae:e3:65:a5:38:9e:13:8a:f2:8e:3b:dc:70:
                    17:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:00:31:D7:31:93:46:14:67:46:61:11:6A:21:0A:8C:DD:E7:09:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/550f0249-c9c0-33e5-862f-f3578ae9ad65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:92:dd:d9:68:bf:2b:24:05:ec:cf:a3:a7:00:8f:8a:3e:4d:
         84:e0:8f:a8:73:a6:f1:9f:05:7f:a9:7b:a8:38:50:db:eb:18:
         c9:02:c8:01:dd:88:fe:10:c5:57:a6:6f:33:a5:04:19:30:52:
         f7:36:c2:f1:d7:1d:43:39:bb:61:b9:d8:12:d9:52:bc:c7:74:
         9e:19:50:12:d4:f9:8c:29:f8:b8:1f:b9:f3:cd:6f:15:e0:a8:
         4f:75:16:f2:81:55:c1:82:f4:4e:10:97:21:87:4f:71:cb:3c:
         94:66:20:38:90:37:13:67:24:e3:83:90:e3:fa:24:10:ff:86:
         b9:4a:7a:93:0a:4c:d9:2a:ea:fa:c0:1b:7f:dd:38:7d:64:67:
         d9:46:a5:dc:99:86:a5:05:34:17:ce:9e:76:b8:e6:a4:e0:e2:
         04:69:a3:c3:5a:fb:21:64:f7:8d:68:fa:d3:8c:a0:42:72:96:
         ca:7b:36:d5:10:8a:27:3d:bc:c4:63:f9:61:3a:8a:90:72:28:
         5c:3c:d1:51:93:7c:be:23:64:07:b3:11:2d:49:55:c3:79:2e:
         7f:df:97:b4:4b:47:79:24:68:e9:d0:e9:7c:5a:c6:41:ef:0b:
         70:de:d8:af:fd:80:e8:ed:54:d3:38:d6:9e:5f:bd:e8:cc:da:
         d2:d0:1d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:12:18 2025 by rpki-client