Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/a2c3899c-531a-337d-8d6c-047bf9cf6907.roa
File:                     a2c3899c-531a-337d-8d6c-047bf9cf6907.roa (raw, json)
Hash identifier:          yulz+wOnUCWBW2brS6ShJloFDVOVde+HzYaeIzqF5ls=
Subject key identifier:   9A:B0:B6:6E:99:A2:49:3F:5C:43:A6:BA:07:97:17:C2:66:EE:98:F1
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328584AF521269386B78F8C4F67E540
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/a2c3899c-531a-337d-8d6c-047bf9cf6907.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     46450
IP address blocks:        74.80.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:26:93:86:b7:8f:8c:4f:67:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=ebe19e66-2870-40ba-bc68-f3d2b3d521c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ae:b7:30:f1:55:b5:78:ae:e0:b4:34:55:25:
                    28:43:88:21:a6:37:19:af:15:1e:3d:f3:32:ee:df:
                    e3:f7:3d:88:cd:db:35:76:3f:b9:36:29:04:29:a7:
                    e0:3f:b3:7a:32:65:cd:d1:ce:ee:9d:f8:25:e8:a9:
                    35:68:54:95:21:b1:39:e4:1a:89:00:b8:9b:a8:3a:
                    82:01:ea:1a:3e:ce:21:9b:28:64:be:b9:ad:87:74:
                    0e:90:f9:9c:ae:fa:03:a4:ba:01:47:5c:e7:7a:22:
                    78:5d:89:ed:95:79:09:f8:02:22:84:c6:56:4c:20:
                    d3:e5:60:9c:b7:c4:53:6b:82:1f:ad:2e:40:d7:8e:
                    96:e2:85:5e:4d:bf:25:72:8e:8f:f8:8f:89:f4:8a:
                    5e:93:2e:96:0c:3e:a6:d2:64:a0:2e:68:6b:b8:48:
                    e8:e4:b7:9f:8e:18:5b:13:29:4c:c8:64:06:71:85:
                    b9:1b:45:14:dd:4b:1d:b4:cc:95:aa:80:92:f7:d5:
                    dc:55:16:c2:32:2a:45:12:59:50:cf:d0:63:58:13:
                    88:58:ef:f0:11:8b:99:e4:00:d9:ee:06:94:e8:bb:
                    86:52:8b:7e:80:a6:b3:9a:2b:d7:a3:fc:a5:a9:f7:
                    38:73:64:66:ba:f8:36:74:e5:4f:6f:94:49:96:50:
                    8f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B0:B6:6E:99:A2:49:3F:5C:43:A6:BA:07:97:17:C2:66:EE:98:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/a2c3899c-531a-337d-8d6c-047bf9cf6907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:40:36:74:5e:2d:0a:ff:cf:53:0f:fd:dd:11:41:3a:c5:d2:
         a7:96:22:3d:9c:58:db:8c:80:db:74:86:4d:30:6e:3f:b2:ab:
         16:76:d0:a6:41:da:27:f4:93:ef:5a:03:52:2c:f7:9c:62:f4:
         c2:6d:3a:94:5c:d7:95:bb:6d:57:02:22:6b:62:78:34:ed:39:
         30:d5:9e:14:46:4c:85:9b:e6:bc:8d:93:79:aa:9e:2e:7c:aa:
         12:50:15:22:4c:13:d4:27:c2:d8:e0:a4:75:a5:19:00:13:ee:
         23:ba:b7:54:e6:58:bf:d4:f6:83:6d:e8:e3:f2:cd:4c:79:fb:
         76:42:ea:97:0c:e3:69:11:8f:e8:5a:54:c2:a7:e6:3d:db:e0:
         56:c2:26:b3:4d:06:a1:94:c2:e3:ae:47:99:cf:d3:bd:b9:cb:
         c8:e7:06:5c:5d:db:16:0a:35:5d:6c:e0:f5:e3:b0:db:85:e8:
         0b:fe:20:6b:a8:e1:b3:75:5c:bf:a9:ae:fd:36:e9:fb:2e:c8:
         ae:fa:87:49:2f:08:9b:bf:4b:b4:37:f3:19:c8:e7:8b:8f:7a:
         c1:b9:59:0f:0a:fb:71:80:c7:73:fa:a0:53:eb:70:40:6a:7e:
         4d:91:43:9f:6f:6f:53:a2:17:94:3a:39:fa:b4:9f:57:77:86:
         fe:ed:26:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 09:33:21 2025 by rpki-client