Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/35e140ec-66eb-33f2-8e01-d0fc6ce40187.roa
File:                     35e140ec-66eb-33f2-8e01-d0fc6ce40187.roa (raw, json)
Hash identifier:          l7txOfI7sTnHqIZjQ7gosm0FaEVlk7Z7EnsWBA9Kn/k=
Subject key identifier:   55:46:8E:43:EE:34:1B:32:28:35:7F:42:08:5D:A2:21:44:4D:56:FD
Certificate issuer:       /CN=d184e471-080a-4e54-bf94-60dd0c8beb48
Certificate serial:       010D0C9F4328584A629091ECB068BC67691F7880
Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/35e140ec-66eb-33f2-8e01-d0fc6ce40187.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     22926
IP address blocks:        74.118.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:91:ec:b0:68:bc:67:69:1f:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=ed80b805-8744-4fe4-a05a-2a2f007883b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5f:7f:19:c1:cd:73:18:14:c3:f9:84:cc:80:
                    4c:c8:9e:0c:70:55:08:36:ef:50:45:94:c1:a3:bf:
                    73:72:6c:f3:73:a5:2d:a3:ff:7a:fb:fd:16:fa:84:
                    a0:9a:d2:62:29:2c:91:99:2f:aa:15:7b:3c:a4:d2:
                    9c:8c:16:1c:4f:b4:71:2a:1e:20:da:4b:52:9b:67:
                    7f:0b:87:7c:6c:1c:34:d6:c5:27:19:ac:10:85:fa:
                    68:8e:0a:05:a8:fd:71:c7:46:e4:f4:8a:7c:ae:ab:
                    0f:db:37:7a:56:de:6f:89:ed:ce:88:9d:e4:d9:e5:
                    4e:2b:17:73:8d:d7:9e:57:48:a7:cd:ae:36:02:11:
                    58:e2:e4:11:61:ee:5a:4b:dc:78:84:32:ed:b4:fd:
                    74:36:41:47:9e:e2:30:29:5e:59:59:ff:4c:cc:0c:
                    a7:67:37:a6:8e:ab:05:6b:d1:09:88:7e:ee:b3:17:
                    62:56:d7:49:5c:56:37:f3:83:8c:b3:48:af:3f:2c:
                    7f:47:fd:3c:32:65:ae:5c:9e:dc:8f:82:a6:a6:cf:
                    81:20:c0:71:0c:86:99:f3:f5:34:1e:2f:54:13:08:
                    a6:59:b3:c0:91:ec:6e:d6:9f:c8:a7:2b:f5:4c:0b:
                    1f:85:e7:e1:76:74:f2:c6:98:49:f7:bd:76:f9:bb:
                    39:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:46:8E:43:EE:34:1B:32:28:35:7F:42:08:5D:A2:21:44:4D:56:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/35e140ec-66eb-33f2-8e01-d0fc6ce40187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl

            X509v3 Authority Key Identifier:
                keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:6a:b8:c6:e7:50:8d:d8:d6:ae:f0:27:a6:b5:51:81:a4:ba:
         42:0d:28:3e:c8:29:89:2c:a4:81:ea:ae:2d:1c:f1:01:e3:66:
         06:89:d7:10:04:a4:ca:d7:1e:f7:32:93:5c:74:f5:44:5b:e5:
         6a:64:c2:4a:5d:2c:0b:5d:ce:2c:42:8c:41:26:40:5c:c5:5c:
         52:fc:fe:fb:3f:ab:14:ee:d8:7c:9c:e7:65:3a:ba:ef:6c:b7:
         60:6a:db:87:7b:ed:91:0f:f9:a2:d8:1c:fa:91:bb:95:8b:e7:
         cc:f7:37:29:03:73:ea:80:7e:f0:6e:78:06:5d:fa:52:2c:0b:
         87:a3:17:cd:18:17:a3:07:36:d3:87:b7:d9:26:5f:14:20:8e:
         83:96:47:24:4a:26:48:63:f3:e6:b4:16:bb:1e:9f:50:2f:94:
         c2:80:c3:40:1a:e0:15:56:03:05:fd:7d:50:17:62:9b:48:20:
         9e:49:9a:8a:5b:78:6c:3b:5d:59:1d:88:b9:e6:6c:de:85:85:
         67:1a:5d:b5:72:a1:2c:4e:a5:73:4c:77:df:92:46:47:81:15:
         c2:1a:ba:2c:94:fc:68:9c:86:d2:f6:f4:d5:b2:87:48:90:8b:
         92:b6:b8:f4:8c:c8:6a:39:21:7a:00:43:0f:99:8b:44:29:99:
         fd:a4:24:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 14:39:08 2025 by rpki-client