Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/4b06c7a0-15f0-3df0-8fa7-356f45e68b30.roa
File:                     4b06c7a0-15f0-3df0-8fa7-356f45e68b30.roa (raw, json)
Hash identifier:          9sTCHU+j5qRSMWwAh5nFCTENo7utwa5kixtsfLYSmwc=
Subject key identifier:   C9:B1:E3:81:18:C0:B5:E7:5B:3D:A6:04:C9:2D:AC:94:FC:23:40:81
Certificate issuer:       /CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6
Certificate serial:       010D0C9F4328584A7E7B5A343A5BADFDDD3FF180
Authority key identifier: 8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/4b06c7a0-15f0-3df0-8fa7-356f45e68b30.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     13520
IP address blocks:        199.74.222.0/24 maxlen: 24
                          199.74.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:5a:34:3a:5b:ad:fd:dd:3f:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=8b14476d-1317-4eaa-9ed4-a8ae14fe4425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bc:4d:f9:c1:95:d1:2c:60:b4:ff:d2:9b:e7:
                    aa:45:4d:f6:14:94:e2:87:dd:26:4c:c9:34:da:ff:
                    de:c5:04:51:a9:7c:e2:b0:85:c8:06:1b:2d:23:4e:
                    7c:f0:82:0d:3a:83:b8:f4:19:da:20:c1:af:5a:23:
                    ac:26:4e:aa:85:45:cd:a4:5d:c1:0e:94:4f:55:e5:
                    6b:5b:d2:fa:c6:2a:7e:75:c0:a6:86:0e:f5:72:95:
                    ae:11:f9:9e:b2:f1:ad:f3:2b:86:5d:80:f1:97:7d:
                    12:de:89:55:cb:5a:96:7a:5d:bb:4e:e1:60:b1:c1:
                    47:46:9f:dd:d8:5c:e0:1d:df:29:13:f9:ad:13:b6:
                    05:81:9c:aa:f3:42:6f:68:88:5c:f6:98:1a:b6:98:
                    ef:42:2e:5f:0c:cb:1f:63:0e:7f:69:8a:c6:4f:fa:
                    7e:ea:53:27:7d:79:af:b7:9c:d5:66:74:44:36:d0:
                    6f:f2:05:79:77:a3:fd:6d:d3:6f:d1:79:45:bb:c3:
                    f7:86:ad:8c:9e:11:3e:dc:af:f7:16:1a:ed:65:b6:
                    56:f0:95:6b:12:d7:4c:74:35:65:a8:15:49:4a:04:
                    fe:82:3d:52:81:7b:4c:17:cf:e7:cd:91:76:90:a0:
                    2d:59:08:5f:c7:a3:d3:ba:da:99:26:eb:e3:11:ea:
                    6d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B1:E3:81:18:C0:B5:E7:5B:3D:A6:04:C9:2D:AC:94:FC:23:40:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/4b06c7a0-15f0-3df0-8fa7-356f45e68b30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl

            X509v3 Authority Key Identifier:
                keyid:8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.74.222.0/24
                  199.74.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c5:06:de:82:d3:fc:b6:0a:0d:70:83:9f:07:e3:4e:01:04:
         75:e9:a0:eb:00:bc:b3:1e:54:59:24:ae:92:84:df:6f:50:10:
         6e:af:7d:9b:ff:00:d6:0a:7b:7d:2c:85:c3:12:76:2f:8d:33:
         2a:a3:7a:f7:a3:d1:af:c1:0c:4b:62:96:27:d4:ff:60:37:96:
         5b:d2:6f:8f:71:cb:6b:8a:47:bd:fa:c6:7e:f8:12:46:36:d7:
         78:e4:a4:ca:10:52:67:8e:a1:01:f3:1f:01:22:e8:2b:cc:b5:
         8d:41:08:30:97:ff:39:1c:81:5c:c1:dc:5c:5e:14:b9:bb:38:
         02:1b:e7:b1:58:b8:0b:16:30:c3:a8:0a:70:ff:44:7c:62:77:
         ec:4b:3e:7a:8d:14:b2:84:fe:ed:2d:0c:e3:b3:42:13:c7:6f:
         7b:d7:c1:a3:ee:49:08:7c:28:b6:76:05:7b:c0:d5:f4:8f:16:
         9b:92:d4:c2:6e:ab:fe:2c:34:92:41:12:15:6c:ea:c1:b1:c0:
         eb:0b:f0:8c:70:da:0d:3b:21:4d:b8:63:4c:24:25:66:0a:8f:
         50:a6:05:b4:96:47:25:43:3f:13:05:26:56:71:ba:52:a8:9a:
         c2:ae:49:38:c9:ba:15:db:a1:eb:5c:7e:5e:0a:a2:30:c3:6e:
         77:c3:49:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:03:00 2025 by rpki-client