Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/74361c5f-eb63-3f6a-9f93-aaca9e28416c.roa
File:                     74361c5f-eb63-3f6a-9f93-aaca9e28416c.roa (raw, json)
Hash identifier:          xChD1CiezgfmMVNPU1WRwbvYBGNsLoziwa8jjkoTZKw=
Subject key identifier:   F4:B1:FC:CB:27:3A:07:4C:52:AF:33:4A:FB:40:63:2F:FE:92:29:52
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584A71EB52E04E7B3C99B9AB25E0
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/74361c5f-eb63-3f6a-9f93-aaca9e28416c.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     19886
IP address blocks:        171.162.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:52:e0:4e:7b:3c:99:b9:ab:25:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=04ad60fa-af20-4515-840c-aeb31aceeaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:18:8e:4c:7b:87:6a:b5:5e:e5:06:83:39:
                    a5:74:68:a5:33:1d:24:48:63:b8:55:88:2c:a5:1f:
                    de:6e:c7:b3:ef:d7:78:88:18:fc:c0:34:b1:f7:d3:
                    92:dd:6c:a6:34:ed:9c:12:4e:2b:f0:4a:cc:eb:0e:
                    36:87:f6:92:7c:db:28:17:4b:61:7b:3b:09:d0:ed:
                    74:01:c6:c5:e9:53:48:e8:21:ec:30:e4:79:d4:28:
                    af:f6:a8:5f:7e:9b:ec:db:1a:96:98:da:2b:ce:cf:
                    d9:5d:f3:e5:f0:76:bb:e3:e4:e2:c5:25:40:cd:8c:
                    2c:2f:46:80:43:9d:d7:ec:9e:66:a2:77:07:bd:3c:
                    e5:60:7d:e9:ab:6e:28:3d:65:53:ca:31:64:5c:a8:
                    78:cd:e0:97:16:7d:03:e3:04:96:21:cc:6a:df:61:
                    3e:27:6c:bb:6e:c7:a5:09:df:df:67:7e:8a:98:f3:
                    a0:e5:9d:b5:5e:ad:2c:52:4f:3e:96:7e:94:59:4a:
                    f0:34:40:1d:ba:1b:a2:7b:aa:42:77:8a:89:05:40:
                    c4:58:f1:cb:83:c7:d9:b6:1f:65:32:f3:f3:b9:02:
                    56:2f:a5:64:da:c7:06:7e:ff:1d:1b:4b:97:75:c6:
                    08:8b:37:f2:5c:a6:c0:54:64:95:e6:57:19:06:57:
                    5d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B1:FC:CB:27:3A:07:4C:52:AF:33:4A:FB:40:63:2F:FE:92:29:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/74361c5f-eb63-3f6a-9f93-aaca9e28416c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:f2:55:09:85:e4:19:72:06:eb:64:f9:e5:80:cb:10:1d:a9:
         3b:47:88:09:b6:e6:6e:09:fa:3c:49:17:a8:32:40:b7:e7:36:
         fb:48:4d:ef:dd:12:3b:d2:08:4b:27:2b:51:3f:f4:77:58:2f:
         4c:59:30:d7:2b:50:56:bb:1f:12:c1:37:ed:9f:cf:c6:32:57:
         f4:9a:c7:0c:f0:a5:97:1b:be:f8:3e:84:b3:84:ee:57:b5:61:
         9d:10:56:7f:26:7b:58:7e:59:b2:5a:fb:91:34:a7:2d:e0:12:
         95:07:b9:1d:c5:21:2b:27:76:dc:e1:f1:01:19:8a:26:db:e6:
         41:5f:0a:65:6f:fa:19:c7:f1:3a:d2:27:ab:77:78:36:0a:4a:
         38:5b:c7:12:ee:50:a2:4b:7b:91:28:4b:80:dd:2b:f4:2b:04:
         bc:c5:98:63:f8:04:e9:58:10:af:0e:ae:4a:df:99:31:1a:f4:
         10:79:0f:cb:e5:b2:1e:be:6d:35:f7:39:d6:96:7b:54:98:6c:
         20:a3:71:6c:35:c8:54:72:86:da:9a:77:be:10:ea:a1:5e:d3:
         a1:e1:b4:d6:c3:fb:d7:53:ab:d4:f5:ec:f4:7e:53:dc:62:56:
         44:80:9f:0a:96:49:3b:51:c4:1f:0c:b3:7b:70:cf:b4:fa:50:
         3f:02:3f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 14:37:24 2025 by rpki-client