Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/eaf24c8f-15b5-3927-a5cf-a560c7612a07.roa
File:                     eaf24c8f-15b5-3927-a5cf-a560c7612a07.roa (raw, json)
Hash identifier:          7oo7/2LKu3uYhU4P5VgTg1pUj86Rw837gbRRn/zmcJA=
Subject key identifier:   65:D5:19:14:E8:CD:B2:4C:73:AC:71:71:68:35:C2:96:2D:C8:ED:26
Certificate issuer:       /CN=93486113-52ec-4d22-9c7f-d493f8e27cb3
Certificate serial:       010D0C9F4328584BABFD04AA6CFAE7464A7D7980
Authority key identifier: 3C:A2:CB:86:C0:C6:7E:F3:71:43:38:DD:49:7C:F4:23:D6:A5:F4:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/eaf24c8f-15b5-3927-a5cf-a560c7612a07.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     40328
IP address blocks:        208.74.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/93486113-52ec-4d22-9c7f-d493f8e27cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/93486113-52ec-4d22-9c7f-d493f8e27cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:04:aa:6c:fa:e7:46:4a:7d:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93486113-52ec-4d22-9c7f-d493f8e27cb3
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=4297ce5f-0511-42c0-a77d-6ffa5caabeb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bb:69:22:fb:1f:ac:e4:0c:bf:51:92:ca:bd:
                    50:50:66:85:f4:f0:d1:62:03:ea:c5:49:98:32:72:
                    77:ed:c9:87:5f:66:61:a1:12:8f:3e:4f:ca:00:9c:
                    fd:1a:72:53:87:93:06:87:92:90:0a:3a:f9:79:b9:
                    56:ed:9f:b5:f4:f3:d3:b9:0d:43:5c:48:dd:21:07:
                    cd:5a:5b:76:a3:e6:f0:c1:46:62:96:c3:e4:11:dc:
                    14:78:5c:3b:e4:cb:79:b1:a3:94:28:ef:f8:a5:15:
                    68:f2:24:09:09:86:76:98:a0:da:37:22:33:42:0a:
                    4d:0b:71:10:a7:16:29:79:3d:ef:65:ec:a9:4a:03:
                    6a:86:b3:e1:94:fc:fc:42:27:76:ae:9e:05:c5:4a:
                    a2:d9:57:24:54:ce:b8:f9:b6:27:31:06:07:61:fc:
                    1d:0b:ae:78:36:f3:4e:53:44:ed:a7:7d:f4:f8:ba:
                    f7:52:3c:f6:24:1e:ce:88:77:ce:34:2c:0d:f5:89:
                    b2:35:13:ca:93:39:be:de:8c:31:37:80:4c:d1:3f:
                    25:97:44:1d:e8:33:7a:88:82:8f:e4:b7:02:b1:f9:
                    da:ee:74:21:12:63:6a:99:35:a0:34:b2:fd:ba:80:
                    9a:f2:c9:05:51:8f:d5:59:96:47:00:cf:9b:50:6b:
                    44:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D5:19:14:E8:CD:B2:4C:73:AC:71:71:68:35:C2:96:2D:C8:ED:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/eaf24c8f-15b5-3927-a5cf-a560c7612a07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/93486113-52ec-4d22-9c7f-d493f8e27cb3.crl

            X509v3 Authority Key Identifier:
                keyid:3C:A2:CB:86:C0:C6:7E:F3:71:43:38:DD:49:7C:F4:23:D6:A5:F4:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:2a:cf:86:77:94:5c:de:a0:92:0a:5c:81:06:25:dc:9f:64:
         3e:45:88:78:9b:38:02:b5:b8:e9:05:ff:52:b1:df:41:44:b4:
         7d:df:7c:d1:7e:6b:f4:6c:6d:15:16:5a:30:ac:f2:ea:1e:cf:
         c8:d6:fe:26:58:6f:0e:1f:57:e6:a4:34:e8:32:20:ae:c1:11:
         cc:57:01:51:24:29:e7:88:c5:f1:08:f8:e3:a3:44:6f:4b:c5:
         2e:9d:aa:23:eb:f8:17:4d:ad:87:27:df:5d:35:59:e5:0d:97:
         81:ec:66:7a:33:f8:80:4f:d9:2c:62:a2:62:d3:a0:8f:9b:41:
         3e:e9:62:23:89:78:51:02:8f:8d:63:a2:47:6c:50:cf:e5:d1:
         5b:8e:3e:cd:57:ff:1d:b7:9b:5f:dc:f0:48:49:c4:fb:da:d7:
         38:d1:68:e2:c8:88:91:a8:74:e0:84:2f:88:86:ac:cd:65:fd:
         ee:9c:5c:40:5e:c8:98:79:da:5a:71:75:21:6a:d3:7f:cf:41:
         13:87:8a:d4:83:dc:b0:17:4e:c8:50:ee:93:d3:3c:74:20:c5:
         fa:ce:2f:04:31:b6:3c:34:33:dd:15:02:fb:3c:84:ad:c9:46:
         0c:d4:9b:da:0b:4f:18:b5:6e:00:74:7b:9f:96:7c:f5:b9:7f:
         45:b7:af:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:19:24 2025 by rpki-client