Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/f18de111-e484-3b81-9969-2061a9f5e1d4.roa
File:                     f18de111-e484-3b81-9969-2061a9f5e1d4.roa (raw, json)
Hash identifier:          iH3HfxQSAyN6m6Hui1NFTlL2L8aeJ/1UcmT4zXYyuFs=
Subject key identifier:   41:0A:11:71:25:36:42:99:AA:78:53:F0:B1:7F:EF:67:02:84:F4:A4
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584B679741CB5EEB9370A3943C80
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/f18de111-e484-3b81-9969-2061a9f5e1d4.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     46261
IP address blocks:        74.91.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:41:cb:5e:eb:93:70:a3:94:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=228b121a-c1cf-47f2-b3fc-a38a4e0819ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:67:4d:e4:b4:ad:e6:71:59:a1:46:bb:70:6b:
                    78:f3:37:11:34:9f:88:ae:06:6f:bc:e5:2b:cc:22:
                    b9:9e:5d:8a:a7:1d:da:64:50:c0:4f:cc:b7:0a:68:
                    87:46:c4:81:13:71:7a:69:93:93:57:14:cc:57:b7:
                    7d:2b:67:ed:cf:e9:71:49:09:da:4a:38:f1:a6:92:
                    ec:29:b4:2b:db:84:16:fb:37:56:bd:46:1c:7b:1d:
                    1c:8d:43:f7:da:25:f0:ed:dc:cf:40:69:8e:93:36:
                    e0:7f:0e:0c:da:24:34:71:0f:58:65:7d:b7:e9:70:
                    b6:48:40:41:5d:33:81:2e:eb:88:6b:94:65:25:7e:
                    a5:0b:40:24:61:ee:55:70:d1:64:5e:d3:f3:91:2b:
                    3a:d9:f5:73:2f:ae:ad:fb:75:64:dd:d9:14:d3:c8:
                    fa:12:b8:80:9f:ae:48:c1:c5:b7:d8:f7:79:49:d1:
                    b9:3d:93:1f:b8:f7:c1:8a:91:34:7d:db:c6:c0:ac:
                    70:8a:2f:51:5e:d6:e9:14:5d:db:72:bb:9a:3f:02:
                    15:ad:c6:f6:50:d6:f6:9a:7b:51:e3:87:91:aa:3b:
                    78:09:a2:0d:de:ed:53:98:56:37:d5:12:8d:1f:ad:
                    39:62:98:b1:6f:1b:70:53:ad:82:85:07:b3:bb:09:
                    2f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0A:11:71:25:36:42:99:AA:78:53:F0:B1:7F:EF:67:02:84:F4:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/f18de111-e484-3b81-9969-2061a9f5e1d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:9a:32:13:31:22:5b:af:5b:86:2e:0f:6d:ba:9d:39:99:97:
         8b:38:c8:4f:ee:78:e8:d9:28:87:0c:95:1f:d0:e8:63:af:f7:
         2e:2a:50:80:fc:2e:a3:bb:04:56:8d:1b:37:ea:6f:52:c6:40:
         1d:af:fa:04:e9:4c:79:87:5d:ef:b6:a0:ec:46:f1:08:14:ff:
         d4:02:67:cc:c3:47:ae:e0:e3:36:98:e0:d0:01:1e:1c:15:c0:
         fb:27:13:e0:3f:b3:2f:65:19:cb:c2:d1:af:49:fa:b7:6f:5c:
         f3:9a:29:f4:0a:c1:c3:f9:54:bb:ea:0e:54:53:39:20:e6:04:
         a2:00:f7:2f:19:1c:01:eb:68:2e:c0:6f:37:b7:77:b2:f7:b0:
         65:a3:64:a7:93:a7:60:cc:d9:de:a9:25:b9:76:5a:47:4a:74:
         6a:74:26:29:b4:29:16:19:2c:29:2b:f5:72:1d:e1:84:e8:ab:
         1d:d3:f3:d2:c7:f2:24:cc:f3:90:d7:9d:29:86:d2:e6:8d:1e:
         9f:05:b0:ce:90:f7:b2:09:63:21:e2:49:e5:23:04:5c:38:fc:
         b3:19:72:5e:56:6d:61:7f:91:a8:9c:ac:37:15:8f:eb:f7:b7:
         bc:45:24:25:b6:32:e5:3b:e2:df:08:eb:13:91:b8:f6:9d:c0:
         38:44:2c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:05:17 2025 by rpki-client