Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/94d5354a-2fe8-3a8a-94d5-9d83d6728ddd.roa
File:                     94d5354a-2fe8-3a8a-94d5-9d83d6728ddd.roa (raw, json)
Hash identifier:          rp9GsCSvd63DV0KbaB4zo9dO4qczNwG/XS/KZzBs8fI=
Subject key identifier:   D8:6A:25:B8:8D:07:FC:C1:32:F7:01:6F:62:44:32:3F:18:B3:46:2E
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584B25FC35D1C82E5919727C9C40
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/94d5354a-2fe8-3a8a-94d5-9d83d6728ddd.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     6181
IP address blocks:        74.83.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:35:d1:c8:2e:59:19:72:7c:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=9701875e-16ce-4a89-b9c0-fc2007708ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a5:85:f8:84:b9:73:57:96:f3:55:ed:7a:da:
                    77:27:c5:c2:6c:f4:25:28:72:62:bf:79:a0:17:15:
                    46:32:3d:0a:fd:80:b2:1c:52:5f:51:57:34:28:25:
                    d7:e9:ab:18:5f:26:e0:3b:e2:ff:e6:a7:ba:e1:7a:
                    d3:7c:a9:1a:c3:07:b8:91:82:5d:73:4f:1f:bb:00:
                    c6:77:73:94:e8:f3:89:f2:10:40:61:e8:d1:e7:ec:
                    58:e1:ef:08:d4:a3:cd:70:f3:2f:6e:e4:41:b9:90:
                    b3:c0:94:78:94:dc:10:9f:89:af:ea:17:7d:1a:a3:
                    6b:60:7e:6c:dc:85:7e:cb:80:3f:c8:f0:d9:ff:59:
                    8a:ab:a0:bc:8b:7e:a3:c4:0c:26:6b:77:72:66:60:
                    8d:37:7d:8b:d6:b8:e6:09:43:d0:b1:2f:73:3c:75:
                    6b:5d:68:2d:ab:9f:23:80:11:f6:73:31:85:f7:ae:
                    6d:e2:82:2f:5c:62:ba:44:8c:fa:d4:89:83:d6:e8:
                    c7:2a:ae:7b:01:62:71:26:df:7a:41:87:04:79:94:
                    1a:0a:47:af:bc:99:cf:fb:80:b4:87:03:16:9d:2c:
                    7f:40:cd:e4:39:2d:bc:1f:5a:32:31:5c:98:83:a7:
                    df:9b:dc:cb:e6:1f:0d:43:78:f3:65:36:d0:97:64:
                    2e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6A:25:B8:8D:07:FC:C1:32:F7:01:6F:62:44:32:3F:18:B3:46:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/94d5354a-2fe8-3a8a-94d5-9d83d6728ddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.83.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:be:8d:a8:94:5d:18:f1:bd:05:cd:66:9c:a4:70:80:35:6d:
         f5:43:b8:1f:da:41:c8:61:ca:09:d9:f6:30:c7:4a:6d:d9:65:
         9c:d0:aa:10:b3:d8:f1:e0:b3:a1:21:4b:50:ec:5a:d9:8f:a5:
         81:55:21:7f:ea:69:e0:27:2a:ac:19:20:1a:06:80:c8:3f:3e:
         49:0b:4c:c3:23:99:42:44:d1:dc:9a:7e:c9:11:aa:49:e0:75:
         d9:a8:6a:c1:de:41:7a:fa:37:9f:6e:92:1a:a9:a2:79:20:12:
         82:ce:2f:ea:a1:7d:00:af:cf:b9:4b:0f:90:bc:24:83:f9:68:
         86:9f:2a:71:2e:96:e2:be:ae:2d:3c:31:22:d6:60:52:54:ff:
         1a:ca:13:1f:90:f4:c4:e8:03:42:96:c6:0b:a2:f0:c7:5f:98:
         46:dc:d7:4d:ce:1d:24:82:4e:c7:9d:28:e8:f0:10:1d:f5:2f:
         25:33:af:cd:2e:bf:5d:59:84:08:62:11:6c:98:80:e5:70:60:
         a2:d8:49:00:0b:3f:c1:bf:18:80:8c:6e:ab:69:c7:10:1b:61:
         cf:c5:7d:02:c0:a9:8b:07:8b:8f:a4:61:e1:07:56:94:1e:94:
         2e:bb:36:97:a6:af:c3:a4:e2:b5:bd:a2:cd:03:34:b5:03:2d:
         e5:aa:50:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:35:32 2025 by rpki-client