Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/cbe661bd-8e44-3c9c-85ab-da5f012891a4.roa
File:                     cbe661bd-8e44-3c9c-85ab-da5f012891a4.roa (raw, json)
Hash identifier:          eM/4QpRWSWUE9Msvdw/tCBxiQaX0ZZPu5vvQy7T/nsE=
Subject key identifier:   A1:40:4D:6A:FF:E8:A4:C4:D9:F6:3B:05:0D:CF:20:10:FE:DC:79:5F
Certificate issuer:       /CN=9e84557a-e1a0-4f10-b840-c930dc9d2ece
Certificate serial:       010D0C9F4328584AF52156735F430CBC50E6F900
Authority key identifier: 50:8C:8B:24:64:77:87:14:E7:98:80:E4:AC:1B:46:D4:56:6F:E3:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/cbe661bd-8e44-3c9c-85ab-da5f012891a4.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     62759
IP address blocks:        74.119.124.0/22 maxlen: 22
                          162.245.176.0/21 maxlen: 21
                          163.123.240.0/22 maxlen: 22
                          199.255.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/9e84557a-e1a0-4f10-b840-c930dc9d2ece.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/9e84557a-e1a0-4f10-b840-c930dc9d2ece.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:56:73:5f:43:0c:bc:50:e6:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e84557a-e1a0-4f10-b840-c930dc9d2ece
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=78ad0e50-f8db-48b6-839f-1dd8dea05871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0f:4d:95:43:fb:72:ab:de:d4:5e:77:60:f8:
                    84:99:89:32:93:17:a6:2d:72:31:87:94:83:63:cb:
                    ec:15:29:38:e6:0b:e4:a9:b1:43:2f:ae:63:9a:fd:
                    09:e0:65:3c:28:5b:6d:ca:cc:18:ad:8e:59:07:74:
                    97:3a:f9:ee:14:7e:57:40:b4:64:25:66:51:cc:ac:
                    01:79:ea:bc:d1:88:5f:1d:15:fc:c4:b1:96:ff:f5:
                    cb:14:47:0b:39:9e:d5:f3:dc:59:cb:17:b3:09:c4:
                    97:f9:d1:0c:36:39:f0:dd:60:f9:37:ab:44:11:86:
                    73:bb:0c:ae:c5:bd:cc:52:6a:6b:6b:53:70:57:fc:
                    66:6d:2a:8d:a1:b5:95:8c:e1:07:87:7f:0d:5d:aa:
                    d2:a1:e4:17:4c:e3:8a:d0:c9:5f:a9:c5:3f:97:1c:
                    c8:d7:2d:70:24:bc:e3:ff:08:02:46:cb:1c:b7:53:
                    7b:59:01:4e:cd:18:51:01:d1:6e:52:e7:8f:f5:c4:
                    f7:9a:b8:cd:2e:59:55:5d:0b:00:34:24:47:28:c2:
                    60:03:d8:90:17:d0:e6:71:ac:8e:b4:99:dc:b0:ee:
                    be:5c:01:b7:6b:47:0e:2b:99:a7:a2:06:e0:74:72:
                    13:49:bf:eb:39:b6:98:60:7d:53:aa:3f:d9:63:7f:
                    c5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:40:4D:6A:FF:E8:A4:C4:D9:F6:3B:05:0D:CF:20:10:FE:DC:79:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/cbe661bd-8e44-3c9c-85ab-da5f012891a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece/9e84557a-e1a0-4f10-b840-c930dc9d2ece.crl

            X509v3 Authority Key Identifier:
                keyid:50:8C:8B:24:64:77:87:14:E7:98:80:E4:AC:1B:46:D4:56:6F:E3:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9e84557a-e1a0-4f10-b840-c930dc9d2ece.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.124.0/22
                  162.245.176.0/21
                  163.123.240.0/22
                  199.255.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:e2:7d:14:c5:e2:b7:f8:cd:85:c2:32:35:17:75:85:84:af:
         d7:22:72:9c:cd:dc:58:9a:d3:17:0f:45:31:0b:f3:24:2d:d9:
         a4:d1:12:64:df:ab:21:41:2b:20:4f:c0:67:4f:83:8a:c9:83:
         80:1f:90:1d:55:9c:7a:8d:d8:a0:a6:8e:61:57:cb:c1:65:ff:
         91:b9:58:93:a2:74:aa:4d:0a:a5:84:73:4f:52:5d:8d:82:cd:
         6c:7d:a1:e8:87:6b:dd:a1:86:65:5d:ae:fb:08:c6:60:d9:d1:
         3f:06:e0:f9:8e:a3:2e:8d:5a:14:c1:f1:1b:03:15:7e:32:23:
         d5:ba:a5:29:b7:9b:29:26:cb:71:47:19:f6:ac:8d:c8:0a:3f:
         52:a1:d6:d1:ed:f2:b3:a6:64:40:7b:34:09:be:32:4d:c6:bf:
         0d:54:be:a6:09:70:78:b9:16:f3:c1:b8:e6:60:50:08:3f:4d:
         58:0b:a9:82:ae:f5:5a:f7:f9:e4:b2:09:96:21:15:64:ad:b8:
         42:a0:3b:12:de:8e:58:75:6b:b4:40:77:08:6d:01:1a:31:e8:
         11:8d:d5:20:b4:15:d2:ca:6f:8f:16:d6:46:c2:fa:63:84:41:
         7d:0a:17:07:1a:54:ed:45:c2:1f:33:7c:02:00:bd:6f:82:92:
         5f:83:78:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 14:50:07 2025 by rpki-client