Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/658c0a8c-b51a-3721-9ba5-bd0cc80329d5.roa
File:                     658c0a8c-b51a-3721-9ba5-bd0cc80329d5.roa (raw, json)
Hash identifier:          mRkybh4+JhFM9o57qebfu8G9G+bvdbnMG/iAbNYrx4Q=
Subject key identifier:   54:78:9C:EE:95:A1:03:8A:45:5E:3A:65:3C:BB:1A:39:ED:7F:2E:87
Certificate issuer:       /CN=05a4c80a-51b6-487d-a927-afcc950c360c
Certificate serial:       010D0C9F4328584AF52126D7443CAF34E7E7B820
Authority key identifier: A2:E5:5D:83:AB:ED:A3:FB:D1:4D:BD:CC:B8:B5:0D:57:1F:97:14:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/658c0a8c-b51a-3721-9ba5-bd0cc80329d5.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     1239
IP address blocks:        74.117.114.0/23 maxlen: 23
                          74.117.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/05a4c80a-51b6-487d-a927-afcc950c360c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/05a4c80a-51b6-487d-a927-afcc950c360c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:26:d7:44:3c:af:34:e7:e7:b8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a4c80a-51b6-487d-a927-afcc950c360c
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=4a733c80-70e7-41a5-bd35-2558384b7df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:10:46:1a:ba:a1:19:8a:1e:73:54:48:a1:26:
                    f4:04:fb:13:0e:ee:1e:37:19:bf:a0:bb:5c:7d:cc:
                    32:15:54:e9:40:a0:08:23:23:6a:c0:04:ab:74:f3:
                    19:0e:39:4a:a3:2b:78:fd:5d:21:d2:38:77:0f:13:
                    94:32:56:f8:e5:8e:4e:6c:68:35:68:01:e1:cc:f0:
                    73:9c:5e:c8:6f:2c:6b:51:e8:b4:ad:09:3b:75:b1:
                    e4:6b:4a:d2:4d:62:4c:d4:23:49:49:e6:92:d7:c4:
                    2c:12:b5:6b:51:76:66:66:fd:27:ee:df:d3:a2:41:
                    92:88:2f:69:bf:99:52:57:9a:84:68:0e:3b:ad:0f:
                    9c:72:bb:68:66:c8:de:75:c5:75:ef:b4:d7:9c:fc:
                    2d:94:38:6e:08:24:90:bb:ea:6b:a8:fe:a5:f8:7e:
                    ec:45:74:8f:91:a9:e6:da:c9:cd:03:b0:9d:8b:75:
                    bb:ea:d3:80:10:4e:86:9b:49:3d:4f:04:34:d3:de:
                    f6:69:a7:f5:21:ab:de:10:b2:5c:73:a8:22:fe:eb:
                    a8:cc:c3:22:67:2f:aa:b5:96:28:2d:eb:36:a4:73:
                    e9:44:df:44:6e:1e:88:63:8d:e0:0b:3b:29:3b:cc:
                    1e:2d:f6:27:9c:6e:07:93:82:a1:6e:d1:d8:d5:78:
                    27:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:78:9C:EE:95:A1:03:8A:45:5E:3A:65:3C:BB:1A:39:ED:7F:2E:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/658c0a8c-b51a-3721-9ba5-bd0cc80329d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/05a4c80a-51b6-487d-a927-afcc950c360c.crl

            X509v3 Authority Key Identifier:
                keyid:A2:E5:5D:83:AB:ED:A3:FB:D1:4D:BD:CC:B8:B5:0D:57:1F:97:14:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.114.0-74.117.119.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:62:fe:2f:42:5b:22:9e:c1:f7:7f:11:cf:bf:15:d8:42:51:
         ca:5b:be:b1:ee:29:86:a6:95:72:3b:75:54:36:14:61:5c:ed:
         db:81:47:df:cf:78:a8:97:72:de:01:d3:e0:10:3c:99:3e:37:
         57:d3:37:2c:f0:fc:57:06:92:32:bc:91:fc:54:6a:ec:a2:7b:
         0b:24:df:72:d5:1a:11:fa:3e:44:86:a6:f0:21:0e:70:c1:3d:
         5c:72:3a:9b:f7:b1:10:46:b7:55:f8:49:e5:99:e5:94:86:93:
         46:e4:94:9d:b4:7e:fe:3a:fd:09:3f:e5:d3:22:9b:1c:f9:ab:
         85:de:57:d0:7d:0a:61:75:89:ea:f1:21:d6:62:5a:84:ee:12:
         63:0c:45:58:06:fa:39:19:05:6b:6e:ec:7e:2b:b2:c5:93:50:
         a6:c5:ee:cd:a2:4c:9d:5b:e0:66:7a:e5:49:bf:16:e7:b3:52:
         98:bf:fc:67:86:7d:a5:70:6f:09:9f:f5:a8:e2:09:e1:24:2d:
         35:dc:b0:c4:a0:56:d8:48:48:a0:18:18:38:4a:e9:bc:87:9d:
         cf:40:35:cd:e5:e2:5e:fc:67:fd:92:1e:2e:b1:90:ea:d4:4f:
         3a:1e:2f:da:c0:3d:6f:31:64:d2:62:98:2e:09:19:14:0a:79:
         26:fd:bc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:10:52 2025 by rpki-client