Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/8cf90abc-b412-39d6-bd30-224d82228687.roa
File:                     8cf90abc-b412-39d6-bd30-224d82228687.roa (raw, json)
Hash identifier:          ZW5arKEqj55j4L3Tsd1uIP/L+TmrZovslkoGdF50t0c=
Subject key identifier:   CC:72:59:95:4B:74:21:CC:3E:D0:2D:94:AC:43:77:05:B2:41:12:CD
Certificate issuer:       /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
Certificate serial:       010D0C9F4328584AC7112216864CC879E8CB4300
Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/8cf90abc-b412-39d6-bd30-224d82228687.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     22709
IP address blocks:        74.124.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:22:16:86:4c:c8:79:e8:cb:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=406a25f5-30dd-47d8-9573-f29c6f067d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:96:0d:8f:f7:fd:59:a6:22:04:de:00:35:43:
                    3b:e6:d8:0f:17:3c:06:cd:ed:65:f7:1a:c8:df:c4:
                    2a:e1:1c:8e:7f:f4:fd:89:a4:26:3f:07:62:9f:94:
                    5d:17:27:cb:d9:a4:37:ea:7b:2f:5d:e9:e3:21:b5:
                    7b:19:26:7c:a4:b4:f3:61:aa:ba:b3:4e:15:10:8a:
                    62:b9:c2:66:de:27:b6:13:11:a2:8d:7d:f6:21:8b:
                    2d:a4:d5:d7:08:dc:bb:63:c9:d8:ba:5d:dc:ac:20:
                    82:e2:d4:ef:ba:5c:c4:28:d9:64:38:5c:94:7e:11:
                    e3:35:19:2e:7d:bc:a9:b7:50:30:0c:00:36:00:7a:
                    c0:2e:99:06:5f:f6:f2:bb:65:00:9e:eb:50:0c:20:
                    35:43:70:a2:91:54:ea:de:46:fa:19:8d:9c:a7:4e:
                    c7:6d:12:78:2e:93:41:c7:b3:1b:3f:30:86:a1:83:
                    bd:4c:82:60:95:55:91:09:ae:50:f0:c9:f0:bf:f4:
                    69:88:a8:e9:e2:7a:d2:61:78:65:53:17:a2:24:f1:
                    f4:2f:bd:28:8b:12:a7:b6:39:7e:4c:38:7e:45:5f:
                    41:e0:4c:1d:12:ca:44:e6:42:dd:d7:c0:f9:c2:43:
                    cd:72:00:10:30:4d:77:57:08:db:95:a8:6b:61:1a:
                    30:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:72:59:95:4B:74:21:CC:3E:D0:2D:94:AC:43:77:05:B2:41:12:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/8cf90abc-b412-39d6-bd30-224d82228687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl

            X509v3 Authority Key Identifier:
                keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:c6:c5:ee:dd:5b:38:7b:0c:15:ca:c3:01:dc:00:3a:89:6b:
         97:21:1a:7a:a0:3c:8f:43:53:66:4d:12:3b:8e:84:97:47:ee:
         31:63:57:1b:51:23:a2:2a:0c:89:83:37:3d:0d:2c:04:4a:32:
         9b:d2:1f:60:51:6f:ef:82:86:05:bf:d8:17:1b:d6:ff:d4:dd:
         f7:40:b2:bc:ab:8a:a5:cc:97:a9:77:93:48:5f:81:f4:8f:0e:
         60:7c:29:7a:45:b6:b8:4b:a3:69:23:48:0a:9c:68:ba:dc:dd:
         c9:6d:f3:96:55:a5:1d:7f:09:46:00:9b:b0:f2:2e:c8:dd:c1:
         83:2e:97:75:9d:5c:42:8f:d7:da:00:cd:8b:60:45:2b:23:dc:
         01:67:af:53:23:96:6f:fa:1b:d4:97:0b:9b:90:03:23:33:a4:
         51:2c:8a:a6:e8:c7:a7:ba:fd:ab:ef:06:f6:28:55:4c:32:16:
         15:ef:fd:5d:6e:98:43:fb:85:1d:4a:67:dc:2b:76:b9:be:10:
         92:a5:9c:df:2d:fe:d8:82:79:39:1f:fe:5f:5a:41:15:aa:b1:
         99:05:85:3f:62:99:2f:30:a3:5f:dd:2b:f6:e6:fd:4c:ea:7d:
         3c:e3:00:dc:cc:a7:c9:2a:ef:20:06:39:74:66:8f:0f:63:07:
         42:60:73:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:55:52 2025 by rpki-client