Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/1c0e1981-3ad0-3c5b-9bb2-07ae7c480c63.roa
File:                     1c0e1981-3ad0-3c5b-9bb2-07ae7c480c63.roa (raw, json)
Hash identifier:          nEZ7COkOYFBZCXj4BQcfm/dwPKd5XlNDIZQfLu12aCE=
Subject key identifier:   A4:41:25:04:D7:E4:D5:C2:D2:01:17:89:9F:DB:B2:1A:C0:4F:82:75
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584A682604D3D9013165EAEC3300
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/1c0e1981-3ad0-3c5b-9bb2-07ae7c480c63.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     14618
IP address blocks:        74.207.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:04:d3:d9:01:31:65:ea:ec:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=07c91f42-0dc1-4414-b90f-047045ac1b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:66:58:ce:b5:df:dc:66:bd:b8:3b:47:7d:
                    e7:ca:2d:65:ac:ff:2b:2a:9a:ce:ee:c2:1e:bd:39:
                    e0:ca:d3:a8:34:51:15:41:0d:ff:df:56:59:76:81:
                    f6:49:da:ad:b7:b1:b7:3e:ed:8e:ed:09:4d:e3:b3:
                    e8:f8:40:e7:68:0d:0e:1b:da:ef:60:5b:6d:df:c0:
                    7a:d9:45:40:04:e3:28:db:c3:f7:b9:c6:79:a6:b1:
                    68:26:2c:b4:cf:dd:53:cf:bb:a0:20:41:f9:9a:fd:
                    5f:dd:1d:59:1d:98:2a:90:3a:e7:c1:53:b1:a0:42:
                    3e:a2:49:98:d5:db:20:80:a5:90:7b:a6:f4:d8:90:
                    0b:4c:3c:40:dc:fa:65:56:58:05:a7:9a:1f:09:20:
                    ea:18:58:68:99:29:0a:24:e6:93:60:92:21:8d:c0:
                    19:5e:f1:33:09:12:0f:dc:a7:a2:12:09:c1:b2:e7:
                    1d:00:87:bc:67:b0:56:fb:ce:c2:f3:05:56:1d:87:
                    4a:81:5b:53:1a:83:ca:e3:3f:b8:c5:86:b2:52:df:
                    a7:fb:d0:50:51:98:ab:e1:95:15:c1:c2:75:96:7f:
                    19:2e:31:93:3f:d0:4c:b4:51:6c:cc:a8:77:55:2a:
                    4a:2c:cb:09:d2:90:f5:29:eb:cf:93:ff:0b:69:7f:
                    d7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:41:25:04:D7:E4:D5:C2:D2:01:17:89:9F:DB:B2:1A:C0:4F:82:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/1c0e1981-3ad0-3c5b-9bb2-07ae7c480c63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.207.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:2a:79:cf:49:35:64:23:68:c9:6a:c6:40:75:7f:9f:88:cf:
         09:e8:be:80:5a:ea:6d:58:d9:6a:b9:a0:6a:59:9c:fb:66:cb:
         d8:0d:ba:63:40:2b:31:13:22:44:70:59:93:b6:ae:7f:0c:61:
         88:c0:4f:c0:f4:bf:f9:37:c1:2d:3e:ea:7a:b6:c7:40:e9:bb:
         f2:94:63:bd:c3:4e:d2:ef:11:2a:e7:ce:f2:9c:70:b2:b6:ed:
         0e:4c:aa:e7:69:bf:50:da:34:c4:ca:8c:a5:77:12:01:91:89:
         7d:d2:79:a3:dd:09:34:2c:ad:59:1c:4a:48:e0:f1:21:00:9b:
         7a:1b:52:f8:03:dc:1b:53:fa:cc:90:36:dc:a0:39:87:cd:b8:
         3d:63:a2:b9:45:03:2a:1c:5b:b0:12:6c:06:c6:f8:d4:40:81:
         90:f4:bf:00:b1:4a:49:0a:2f:fd:d9:b8:30:aa:be:f5:8b:20:
         c8:ac:43:b6:b6:69:89:67:2f:55:cb:d2:76:d6:e7:2c:3c:12:
         6c:dd:68:4d:b0:ab:17:0d:2d:40:68:5d:a8:fa:40:a8:01:ea:
         70:72:7c:06:92:99:cd:7d:fb:0d:24:98:ad:ce:fc:46:cd:10:
         72:83:b2:2e:4b:35:ff:65:1e:45:d8:b8:79:1e:a4:36:b7:47:
         ec:32:a3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 16:10:46 2025 by rpki-client