Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/24ba5273-3345-3148-8db9-2c7983ba89c8.roa
File:                     24ba5273-3345-3148-8db9-2c7983ba89c8.roa (raw, json)
Hash identifier:          SUjH78OrxqtuzbI5ckoCzSYX6hlCCJEP1v731NctNxI=
Subject key identifier:   0B:44:EC:09:09:FF:1E:30:68:97:74:4A:0E:D7:4F:10:F8:3C:56:D8
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F4328584B13D6BDD6FB506169F4B22580
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/24ba5273-3345-3148-8db9-2c7983ba89c8.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     13451
IP address blocks:        74.205.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:bd:d6:fb:50:61:69:f4:b2:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=9a616024-a713-4a20-9973-f207c4b420dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:61:aa:b5:1a:ae:d6:74:67:48:17:1d:57:90:
                    8c:af:51:06:61:80:ab:4c:e1:b4:9e:31:82:22:fd:
                    7d:e9:d4:63:ca:8b:57:a9:7b:11:95:d5:80:37:ac:
                    e9:7e:c7:74:7a:0a:1e:aa:69:1a:bd:13:61:50:bd:
                    ba:9d:19:50:6c:35:1c:0f:e5:99:03:9e:f4:db:7b:
                    c1:d3:4e:f7:d8:46:77:f9:88:d8:d0:b8:30:51:ab:
                    f8:92:33:2b:93:b2:7d:11:ff:c8:5e:4a:66:ed:16:
                    9e:44:8f:ae:be:f1:02:41:ce:38:70:1b:42:5b:7a:
                    a1:28:1e:96:0d:a9:df:57:0d:7f:5e:12:55:5f:f8:
                    3d:73:58:d2:a0:e6:c2:21:ca:6d:91:e6:5e:01:56:
                    e4:8e:3f:ec:cc:cf:39:18:1e:f9:08:c4:80:70:f2:
                    a3:8d:69:24:61:a9:32:24:c2:05:1b:16:a7:39:a4:
                    02:86:af:8c:a2:1b:61:8a:57:35:bf:b6:d7:7e:74:
                    01:9a:44:13:cb:3a:0d:97:6d:81:57:ce:97:49:93:
                    e8:9c:7a:16:17:a2:75:3b:90:a3:1e:c3:71:ed:9a:
                    4d:10:3e:ac:7c:45:ff:4b:8b:2d:5c:c3:e3:9c:04:
                    e6:95:a8:e5:8a:49:10:87:d6:4d:21:79:33:d7:01:
                    8e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:44:EC:09:09:FF:1E:30:68:97:74:4A:0E:D7:4F:10:F8:3C:56:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/24ba5273-3345-3148-8db9-2c7983ba89c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.205.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a2:af:57:94:64:0f:cf:5e:f2:ad:b4:c6:b5:0f:86:15:e1:
         3b:7b:06:2c:01:66:2a:35:50:6b:52:19:97:0d:1d:9b:48:64:
         24:bf:b7:db:40:90:b9:28:4b:cd:f0:7d:0f:6e:c3:72:47:b2:
         ec:32:90:84:e6:48:f8:53:d4:26:dd:b2:43:0b:ec:80:e5:75:
         9e:cc:2c:68:4b:08:9e:0e:36:20:6a:cd:03:ba:3d:0f:1e:42:
         5c:20:36:89:22:e3:ed:4e:af:cd:e8:7a:c0:4d:81:8c:bf:27:
         aa:d1:a1:95:8c:a4:d8:fa:1d:3a:18:33:3c:1c:15:15:3f:c7:
         ad:bc:5a:96:86:3d:83:9d:78:42:26:31:2a:88:55:53:25:10:
         23:af:eb:25:92:08:59:19:5e:19:e6:14:74:e5:2a:cb:62:a0:
         16:b2:e4:00:3a:e2:b6:ae:62:f4:97:7c:75:fd:5a:3a:75:61:
         b7:1d:1b:51:55:4b:1d:35:d1:f4:53:48:04:d6:ce:a5:ea:86:
         9c:4d:3d:9b:a5:95:02:21:d3:42:df:6b:ea:96:fd:0b:01:b6:
         f1:62:87:66:9e:47:3b:e0:a2:d3:26:e6:26:4e:ba:5c:b1:71:
         22:67:da:80:e9:04:ab:a4:7c:d9:a7:f3:3c:dc:02:44:65:46:
         8a:df:d3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 21:20:31 2025 by rpki-client