Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/9ff35021-1a5a-37a7-8f79-b9c773e21707.roa
File:                     9ff35021-1a5a-37a7-8f79-b9c773e21707.roa (raw, json)
Hash identifier:          hZ3A5sAsSRdt7zceYjwIKeMzuNCfNQmcRytKBNI2cvc=
Subject key identifier:   20:7A:E5:8B:5D:AE:7E:AE:56:58:23:F1:60:0E:3D:D4:4A:D7:44:29
Certificate issuer:       /CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6
Certificate serial:       010D0C9F4328584A7E7B5A01CB95F59FA60BBB00
Authority key identifier: 8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/9ff35021-1a5a-37a7-8f79-b9c773e21707.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     12161
IP address blocks:        199.74.222.0/24 maxlen: 24
                          199.74.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:5a:01:cb:95:f5:9f:a6:0b:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=782ab790-d66e-4a9a-bbb7-de9a1c4154eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7b:4d:30:24:5e:a5:47:60:81:62:42:2c:b4:
                    a4:c3:5f:c8:a5:58:c5:cf:1f:a5:78:b9:20:85:4e:
                    c6:1b:02:70:a1:93:f4:f3:7a:60:02:0d:ff:8b:ee:
                    47:df:42:57:b7:e0:65:9f:20:76:af:51:17:75:81:
                    3a:35:68:07:f6:56:cf:ca:c1:4f:bd:17:b4:37:9f:
                    91:c5:b1:d0:57:6e:35:ee:db:ee:25:8f:1f:52:93:
                    9e:a4:b7:43:16:cc:e5:fa:c4:f0:7e:06:96:b6:3b:
                    90:21:f8:96:bd:35:2f:e1:73:0a:2f:0f:d6:63:a9:
                    d5:bc:bf:eb:68:3e:52:c2:18:cd:65:55:34:cb:54:
                    14:7a:d6:c3:dc:d5:7b:13:1f:9f:68:84:4b:74:d1:
                    cd:11:e7:36:b5:20:f3:c0:0b:65:d7:ef:0c:82:1d:
                    f0:1b:cd:0f:7b:80:68:48:08:48:79:db:51:d4:7a:
                    26:5e:af:53:4c:55:4d:62:4e:35:91:2e:45:5a:65:
                    e5:8c:ac:24:d6:a0:1c:25:21:01:39:46:c9:db:e6:
                    57:08:b2:cc:19:58:86:76:77:ab:d7:7f:5e:1a:77:
                    6e:0d:a3:25:b7:0c:5e:31:96:eb:24:d3:96:dc:a8:
                    55:50:86:30:39:60:98:0c:df:ed:a5:ca:fb:2a:8a:
                    1d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7A:E5:8B:5D:AE:7E:AE:56:58:23:F1:60:0E:3D:D4:4A:D7:44:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/9ff35021-1a5a-37a7-8f79-b9c773e21707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl

            X509v3 Authority Key Identifier:
                keyid:8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.74.222.0/24
                  199.74.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:d7:a4:2b:25:df:76:56:a8:0d:21:f8:97:b0:3d:63:a9:fe:
         71:90:56:df:87:8e:61:99:88:0a:33:57:9f:36:10:e3:36:d9:
         e4:4d:8c:51:61:18:9c:d1:97:2d:78:d2:60:03:4a:c5:f2:61:
         a9:e4:c0:7b:d1:71:b6:44:20:a7:d3:b6:4e:e0:06:07:b0:2a:
         08:f3:03:37:6f:ce:82:a3:78:39:20:f1:c4:c5:8d:b5:a6:93:
         2c:a7:d8:82:ec:56:e2:48:6a:42:d0:34:b1:1d:d0:23:0e:15:
         f0:11:4e:ad:a0:7d:a0:88:67:b2:d3:7c:44:2c:35:4c:3e:da:
         33:f0:db:3d:a3:6a:28:06:98:5e:b7:41:16:50:6c:f3:b5:8b:
         17:22:c4:5d:e6:2b:69:b3:13:c2:c4:15:96:0d:e5:a6:82:dd:
         c7:86:d7:b1:6b:8a:44:bd:39:b9:ad:e1:26:b3:81:2d:4e:ff:
         d7:0a:44:51:92:74:f8:76:db:d3:36:b4:b2:f4:ab:48:f3:4a:
         67:0d:7f:f9:6b:c9:41:37:9a:ca:1a:a5:7f:ad:84:10:12:21:
         1a:f8:ea:1a:85:87:4c:55:5a:74:7c:49:e5:9f:e5:63:d3:88:
         65:23:4c:1f:05:d2:9c:34:7d:1c:c8:75:6f:d3:93:19:1a:65:
         60:ca:45:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:41:37 2025 by rpki-client