Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5803553b-3c62-3551-b5ce-1bea44149574.roa
File:                     5803553b-3c62-3551-b5ce-1bea44149574.roa (raw, json)
Hash identifier:          RdBER9EhZViQ7+SJg3X1gqTYal7OQWbOYmdG9S43vbE=
Subject key identifier:   80:D4:03:39:62:89:95:21:EC:6E:80:19:49:6E:BD:E8:C3:C2:C2:BB
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B857786196BCAE9D274F76DEC
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5803553b-3c62-3551-b5ce-1bea44149574.roa
Signing time:             Tue 14 Oct 2025 17:51:02 +0000
ROA not before:           Tue 14 Oct 2025 17:51:02 +0000
ROA not after:            Mon 12 Jan 2026 18:51:02 +0000
asID:                     22616
IP address blocks:        198.14.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:85:77:86:19:6b:ca:e9:d2:74:f7:6d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 14 17:51:02 2025 GMT
            Not After : Jan 12 18:51:02 2026 GMT
        Subject: CN=c94d0077-6135-4d08-b60f-0d4cb437621f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:f8:af:ce:c0:78:a3:10:83:f7:55:d5:ed:e7:
                    6f:75:1c:85:d5:01:9c:a4:54:aa:a8:09:5c:19:8f:
                    ac:58:be:d1:3e:bf:bf:83:aa:f6:ef:82:10:35:96:
                    61:22:c7:c8:17:aa:91:c0:b5:50:2f:15:fa:55:da:
                    b8:3e:ff:ab:45:9e:56:f5:50:58:0e:82:84:2c:56:
                    a1:1f:84:12:63:31:69:36:d6:5f:4c:7b:73:61:43:
                    0d:0e:c3:cb:32:9a:95:c4:89:eb:34:5a:22:03:30:
                    34:f6:42:06:09:e2:a4:b7:dd:ca:e9:59:79:b9:42:
                    78:49:d5:01:48:8a:b0:81:a1:fe:be:d9:b6:a4:90:
                    0f:04:51:6f:5f:42:e2:11:4f:79:4c:e9:04:c9:17:
                    dd:c4:1d:b4:6e:4e:77:df:89:55:42:59:b3:f0:f1:
                    00:0a:3f:d9:c2:f6:6f:80:e3:0e:ea:fd:39:0a:e6:
                    c9:84:52:29:db:16:97:98:af:60:02:26:3b:54:35:
                    29:26:3f:73:76:f1:09:77:7d:3b:e6:df:7c:f0:7a:
                    3e:6b:8c:18:5c:df:84:23:43:f1:58:25:6c:d5:62:
                    2b:74:b2:78:7f:1f:8b:e6:d2:16:4f:8f:eb:d3:4e:
                    d5:83:97:f8:68:ef:f8:da:d6:26:39:da:63:59:17:
                    68:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D4:03:39:62:89:95:21:EC:6E:80:19:49:6E:BD:E8:C3:C2:C2:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5803553b-3c62-3551-b5ce-1bea44149574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.14.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:77:d1:e7:ba:f9:93:bd:50:ab:d1:fd:8b:81:36:fc:d2:fb:
         9d:aa:ac:e4:de:9a:92:a5:37:27:25:5d:7d:8d:d3:e6:18:3f:
         5d:56:08:72:ff:8d:a4:79:e4:bc:6e:ef:74:2d:a4:9f:ff:ab:
         de:18:98:0f:92:4e:9b:c7:c0:4a:49:2d:49:1b:13:de:64:aa:
         1e:2c:7a:7a:7e:c2:6a:47:81:63:0f:35:d3:11:9e:41:4a:96:
         8a:1e:da:cc:fb:6d:77:d9:02:4d:8d:a5:d7:a9:ab:b6:82:a7:
         b9:f8:1c:46:08:52:a6:c4:76:f6:4d:1c:b6:e6:e1:5c:c2:71:
         69:45:ea:29:fd:55:c6:f6:2e:05:c8:39:d1:f8:47:6c:a9:d3:
         f8:74:2f:24:9b:01:2a:63:58:7b:9d:27:3e:8a:49:b7:fa:1f:
         c8:54:eb:77:cc:55:fe:32:f6:d7:33:bd:80:a1:58:e9:2a:93:
         fa:9d:90:1f:94:78:3a:02:f2:61:ff:75:32:62:6c:4f:20:5f:
         d9:5d:12:8f:39:9b:44:26:75:7d:ea:e2:1b:ee:f6:f4:06:9a:
         b4:ad:bb:b9:c9:c9:3f:df:89:a7:dd:12:48:61:e2:dd:16:b1:
         a3:1b:5a:ad:b3:07:3d:aa:0c:4c:4b:22:9c:d6:dc:4c:5d:c7:
         17:54:e0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 14:51:17 2025 by rpki-client