Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/833760e4-6289-3e4f-b752-fa667417c563.roa
File:                     833760e4-6289-3e4f-b752-fa667417c563.roa (raw, json)
Hash identifier:          tzG44SIIkAwlGJ0/ePHDVQPlJPYrXwvVeimM89jWdwM=
Subject key identifier:   4A:B5:F4:5A:11:CA:BD:FB:44:34:7F:4A:52:62:2D:36:B1:41:11:E2
Certificate issuer:       /CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
Certificate serial:       010D0C9F4328584AB91B7F9ABEE6952E77599B60
Authority key identifier: 9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/833760e4-6289-3e4f-b752-fa667417c563.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     396982
IP address blocks:        74.112.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:7f:9a:be:e6:95:2e:77:59:9b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=ab74db61-6bc9-4eb9-99e4-508e5cb8286b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:ff:0a:17:b5:bf:78:4e:df:94:4e:cf:7c:
                    45:93:52:9e:19:f9:78:e3:f8:6b:d9:af:ef:98:e0:
                    98:27:1b:67:8d:a2:67:50:5f:91:7d:6e:fa:fc:5f:
                    eb:43:15:de:b2:c1:63:65:eb:65:f6:53:66:cb:76:
                    17:34:7f:b4:4a:2b:5d:88:83:97:e0:83:62:31:3e:
                    19:f7:d9:14:c1:55:a3:60:bc:61:09:f5:e4:1b:99:
                    90:1e:16:2b:1d:3a:d0:66:da:a2:c8:b2:a5:9b:c0:
                    85:b1:17:19:74:f4:95:9e:55:4a:5b:18:da:2f:e8:
                    6d:34:4c:80:13:68:cd:ec:7f:2d:61:26:1d:8f:37:
                    cd:ae:b6:9b:fc:01:a4:0f:e3:e5:35:19:fc:63:37:
                    87:1d:38:bd:13:41:4b:21:a0:a7:48:d9:7a:38:af:
                    e0:e7:62:fb:a7:b4:00:33:12:2c:df:64:2b:a3:12:
                    09:a4:76:27:58:cf:e1:4c:9d:73:b0:ef:80:17:63:
                    94:78:3c:16:8d:b4:5c:a7:6d:63:9f:4b:8b:f2:1b:
                    d8:6a:fe:4b:69:30:c7:f8:f1:82:cf:9d:ab:ef:f1:
                    eb:1c:1c:3a:b2:49:cf:1a:47:99:cc:c9:67:54:1d:
                    92:5f:83:10:43:a9:99:ca:05:5f:4a:ad:21:f5:28:
                    85:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B5:F4:5A:11:CA:BD:FB:44:34:7F:4A:52:62:2D:36:B1:41:11:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/833760e4-6289-3e4f-b752-fa667417c563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl

            X509v3 Authority Key Identifier:
                keyid:9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:09:e3:60:6e:2f:b3:6f:aa:a8:de:26:34:38:e9:87:e9:44:
         0a:0e:d5:32:2a:10:96:7b:7e:67:e7:f1:53:84:0e:1b:9b:a3:
         a0:16:f5:0d:8a:b9:2f:55:06:c7:7e:22:36:83:27:34:66:80:
         94:02:98:01:c7:3d:c0:f4:eb:c3:b7:bc:6c:9d:f0:7c:31:52:
         f6:69:25:7a:d2:0c:bb:00:6a:b9:28:19:7b:40:70:35:e4:a0:
         3a:d7:be:16:07:c5:d2:42:5b:6a:89:e8:46:b3:f4:8d:e3:43:
         7f:7c:50:61:fe:f1:45:82:52:f4:91:75:4c:a6:5b:be:7b:aa:
         2a:7a:40:7c:c9:8f:b3:05:e3:32:23:b2:4d:bb:b2:70:cb:07:
         03:53:86:3f:99:d0:49:ed:1b:f0:36:0d:c3:4e:36:4f:96:e0:
         ef:c6:d3:5a:f0:17:4b:3e:b6:1b:3f:bb:4a:6f:b8:1d:b9:72:
         8a:c1:c1:84:39:85:86:0d:81:ec:a3:0a:a2:09:7d:85:e8:0c:
         ed:23:d0:ea:be:7a:78:7d:88:8a:03:37:e7:4e:62:ff:4a:d4:
         ef:fb:29:52:82:6f:d3:d4:81:ff:07:e3:a6:79:f1:71:41:5b:
         50:79:c6:f1:5c:1d:fa:83:73:5e:a8:6e:f1:27:73:7d:ed:59:
         04:2d:2f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:18:36 2025 by rpki-client