Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/10b0ff7b-42c0-35ae-9961-75fd05e1bf09.roa
File:                     10b0ff7b-42c0-35ae-9961-75fd05e1bf09.roa (raw, json)
Hash identifier:          br4Tk7iQabl37rSQ+dLf8gESbK6dFmqvsyxKKyP2jzc=
Subject key identifier:   C0:F5:00:A5:A8:BA:51:6C:0F:06:BB:AC:BA:E1:AD:C9:01:AB:B7:82
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B1806DCF059D1464772C84F60
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/10b0ff7b-42c0-35ae-9961-75fd05e1bf09.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     35916
IP address blocks:        74.48.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:dc:f0:59:d1:46:47:72:c8:4f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=e28111ce-de35-4d46-8042-434dfb21017f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:33:68:ca:f2:5c:c7:b2:72:a9:22:fb:00:f4:
                    7d:e6:3c:9a:5a:8a:74:ad:e4:06:fb:ae:18:c4:4b:
                    5a:61:63:29:88:6d:4a:15:fd:16:17:da:35:0c:1e:
                    31:22:5d:0c:f8:d8:19:34:59:94:12:08:c2:72:07:
                    f1:f3:42:a7:7e:c3:48:24:1d:f3:47:30:90:b3:89:
                    00:78:f0:53:60:66:bf:90:6e:f5:20:3c:a7:80:7c:
                    9e:ba:e0:87:01:1a:d5:4e:85:d7:b5:a8:5c:d9:a6:
                    86:63:90:0b:d0:3a:80:37:2e:13:8f:92:91:36:40:
                    cf:44:33:ad:33:b8:ce:5a:19:7e:9c:ce:d4:14:27:
                    f0:7e:1a:7d:0c:d2:25:20:3d:e5:89:f1:f6:55:d0:
                    8c:46:52:64:b8:57:8c:76:dc:02:6e:24:0f:f3:b3:
                    c1:58:3b:21:ff:6d:3b:77:7d:a2:ad:43:12:a8:e4:
                    67:9c:b1:79:9e:a1:57:1e:dd:30:67:b9:7d:39:24:
                    15:06:43:be:a8:a1:ff:09:1f:4d:56:0b:6e:0b:f9:
                    31:43:d2:22:c2:9e:32:2b:94:11:1d:41:4e:9c:56:
                    a1:bc:1e:06:14:85:76:9b:18:f0:9e:ca:ba:e1:f6:
                    2d:86:1b:c3:a0:ea:bd:6e:d3:80:6a:24:cc:b1:aa:
                    b7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F5:00:A5:A8:BA:51:6C:0F:06:BB:AC:BA:E1:AD:C9:01:AB:B7:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/10b0ff7b-42c0-35ae-9961-75fd05e1bf09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.48.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:7b:7a:0b:48:60:dd:89:20:d0:6c:1b:26:cd:23:93:61:65:
         27:29:9d:5d:f7:17:0e:fc:b7:cc:81:fc:36:d4:04:76:e2:f9:
         ee:e8:f5:21:56:4b:62:37:0e:5d:25:55:29:c7:a1:54:ea:4f:
         94:91:81:09:1d:1e:ba:9c:2d:5d:8a:f1:98:55:78:fa:35:8f:
         ae:44:27:7e:24:a0:7f:df:25:ee:12:44:7d:29:35:7e:07:b8:
         23:74:49:38:a5:24:14:3c:a8:4c:d3:e4:a4:a1:d8:71:04:99:
         69:1f:bc:db:36:f1:f9:61:26:09:85:56:0b:ee:51:c6:2a:9c:
         25:74:9e:67:40:13:66:81:20:fb:82:cf:c4:ab:3d:a5:9f:2d:
         90:ce:bb:aa:ed:f9:30:e9:e0:4f:98:9d:cf:f8:83:1f:7c:14:
         24:4b:c9:cd:f4:79:b2:d0:b9:aa:fc:e8:9b:bd:34:d4:c3:d8:
         d2:97:2a:a3:30:38:e3:bd:a9:17:9e:4a:d3:5f:da:24:7a:aa:
         c8:27:01:ce:4d:96:e6:76:d7:07:a4:ed:af:d4:c3:cb:57:cc:
         a7:4d:55:22:b7:e4:aa:f2:18:99:e2:1e:da:bc:6e:1d:ae:a5:
         57:b6:28:04:72:3d:3d:73:f1:8e:82:b4:d2:1e:ec:59:61:c6:
         c7:14:2c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 22:28:36 2025 by rpki-client