Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/62c5e121-1d71-3aad-a4fb-3d15cea52de3.roa
File:                     62c5e121-1d71-3aad-a4fb-3d15cea52de3.roa (raw, json)
Hash identifier:          EpDhq6QVy4D0CvlcfsXdBxA/vQl+gUITXASNijVBZ/o=
Subject key identifier:   CD:D6:5F:55:5C:5C:BB:93:42:6C:3E:DB:A2:7C:B5:46:BA:80:04:E0
Certificate issuer:       /CN=28635d6a-8623-4918-823a-dc1ad56ec1bd
Certificate serial:       010D0C9F4328584A9D30E36D934FE7AF7C5D8F80
Authority key identifier: ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/62c5e121-1d71-3aad-a4fb-3d15cea52de3.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     53429
IP address blocks:        74.123.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:e3:6d:93:4f:e7:af:7c:5d:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28635d6a-8623-4918-823a-dc1ad56ec1bd
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=0c231927-2719-466b-825c-efc6951b06b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:26:e6:34:77:99:17:ec:ee:6a:c2:dc:5c:d3:
                    ea:da:d5:ad:a2:d0:e1:ff:d1:3b:67:1f:5b:67:f1:
                    88:f7:99:04:fb:5b:4a:81:c8:7c:0a:30:9a:42:86:
                    bc:39:2e:ee:2d:ab:ca:cd:bf:7e:a0:18:f4:17:b7:
                    33:e6:05:87:91:90:67:d9:e7:c6:bc:07:8a:29:7c:
                    f2:50:94:37:27:10:bd:44:48:0d:60:2a:dc:a2:f9:
                    86:29:0c:6d:54:c7:2c:6f:16:30:6d:9e:8a:10:6e:
                    18:20:ca:3e:52:78:61:70:58:77:c7:78:ad:5d:9f:
                    1c:10:71:6a:6b:34:56:dd:6f:41:42:a4:7a:e4:f9:
                    31:94:cf:70:36:fc:56:11:ec:1d:b9:b7:45:1f:27:
                    94:79:88:1c:22:9d:cc:63:39:ac:55:f4:d3:fb:64:
                    9a:62:4c:d0:ac:5c:85:67:c7:f6:b2:23:62:73:17:
                    a4:c1:59:1c:2b:e2:4a:53:6c:88:51:51:c9:1e:d7:
                    16:2d:74:a3:0f:58:51:be:82:3b:ad:95:93:5c:b3:
                    55:ee:1f:25:6c:19:94:74:77:bf:3f:a7:14:e6:c5:
                    ef:43:37:93:ea:f7:77:9b:51:bf:c9:73:b0:05:ec:
                    f9:86:c6:fe:07:70:e7:b7:52:92:e3:03:6c:59:0c:
                    cc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D6:5F:55:5C:5C:BB:93:42:6C:3E:DB:A2:7C:B5:46:BA:80:04:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/62c5e121-1d71-3aad-a4fb-3d15cea52de3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl

            X509v3 Authority Key Identifier:
                keyid:ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ef:a9:3c:d3:7c:ec:21:5c:2c:8d:7c:8c:40:fe:be:bb:bd:
         8b:2d:f4:df:ee:9e:49:58:24:26:98:94:5c:95:2d:66:ee:e5:
         83:27:bb:1c:1a:a4:32:15:e2:4c:14:09:e0:2a:e1:a0:c2:c5:
         f6:b3:e0:63:5b:30:38:b3:2a:7b:35:5a:d7:2f:b7:0f:f0:bb:
         48:cb:09:c9:e4:f3:7b:7b:c4:6d:e6:c7:e1:d5:71:33:64:80:
         d0:45:0e:ee:93:8f:ed:bf:d4:f2:33:bb:bb:9c:01:17:5e:3a:
         e7:c2:d3:ff:c8:30:7f:1a:eb:90:03:02:49:02:5a:84:f0:3d:
         bd:bd:59:f6:71:bb:b8:12:90:ab:65:c1:7f:a1:28:43:08:17:
         30:3b:09:e5:48:70:84:77:30:3e:da:a3:23:df:2e:4d:af:5c:
         9a:ae:f1:4c:a9:74:e6:95:80:62:33:d3:26:73:a2:f4:bc:37:
         16:2a:7c:c4:9f:01:7b:a4:1b:bd:16:db:58:f9:c4:d2:34:e8:
         a7:98:6e:3f:13:c1:a4:c3:0f:94:ee:e1:95:eb:14:1e:1e:fe:
         ec:44:d3:86:75:8d:62:74:af:ac:ff:92:35:ad:1e:28:96:fe:
         f3:8f:56:c7:6d:61:2c:4a:77:d7:d4:eb:d5:d1:02:29:3c:28:
         cc:c2:74:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:20 2025 by rpki-client