Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/ee54df25-5db0-3dbe-9cf5-1366a3b2fdc1.roa
File:                     ee54df25-5db0-3dbe-9cf5-1366a3b2fdc1.roa (raw, json)
Hash identifier:          l+HKSex55g+jgtRNI4Ah28qYZ6kOBjkPukgmzhFeK64=
Subject key identifier:   31:0D:54:B1:16:18:45:69:DF:1B:0E:70:25:57:C4:BD:32:25:9B:6F
Certificate issuer:       /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Certificate serial:       010D0C9F4328584A655B3C6759F856B680A90D80
Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/ee54df25-5db0-3dbe-9cf5-1366a3b2fdc1.roa
Signing time:             Thu 03 Jul 2025 13:01:04 +0000
ROA not before:           Thu 03 Jul 2025 13:01:04 +0000
ROA not after:            Wed 01 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        74.123.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:65:5b:3c:67:59:f8:56:b6:80:a9:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
        Validity
            Not Before: Jul  3 13:01:04 2025 GMT
            Not After : Oct  1 13:01:04 2025 GMT
        Subject: CN=3a4a6295-2738-4067-a5f3-362cdbe4a2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fa:fd:db:2f:bb:b8:ac:05:29:fb:16:d4:1d:
                    e7:4b:3d:9d:5e:ab:4f:c5:96:46:6d:e0:af:ca:7e:
                    0e:12:da:05:41:0d:ea:29:19:0e:94:25:c6:60:66:
                    b7:fc:b6:4e:90:7c:f7:b1:53:66:c1:76:e3:1b:2d:
                    71:d7:0e:2e:da:0c:d4:92:88:47:e3:93:38:3f:7e:
                    90:ad:03:e1:30:a9:1d:e8:02:bc:a1:5a:9e:62:8e:
                    bd:39:ae:c6:1a:a2:e2:28:6f:22:11:d5:52:f3:05:
                    8d:ac:30:41:2a:65:91:98:b4:d6:16:96:b4:4d:21:
                    33:6a:68:b6:f1:13:bf:31:cf:03:6b:3b:87:83:ba:
                    87:c6:c9:89:1c:ad:2a:e0:2a:fa:2b:9e:9b:34:1d:
                    27:27:65:7a:ba:07:8e:30:ee:12:d9:30:68:cf:19:
                    8e:68:23:5f:b0:57:e2:bd:17:37:d1:25:8f:44:c5:
                    c2:7e:d7:54:60:8e:19:e7:50:55:64:4e:19:9f:fb:
                    e0:be:b8:c6:f0:59:4f:65:8d:5f:6c:b0:ec:ac:f8:
                    df:04:f5:79:a4:bc:83:8d:eb:3f:94:f6:df:b9:bf:
                    1a:04:29:7b:5e:04:32:67:8a:13:60:f2:48:2a:ae:
                    c6:ac:82:97:27:eb:0a:89:d5:59:a9:5b:83:47:30:
                    64:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0D:54:B1:16:18:45:69:DF:1B:0E:70:25:57:C4:BD:32:25:9B:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/ee54df25-5db0-3dbe-9cf5-1366a3b2fdc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl

            X509v3 Authority Key Identifier:
                keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:81:97:91:21:5a:e1:9e:02:83:da:a6:d6:dd:47:a0:31:67:
         37:e5:fc:6b:62:38:52:97:be:8d:7b:84:49:be:08:57:83:f0:
         5e:1f:c9:ea:69:b9:55:0f:a3:61:2a:a5:ff:cb:c7:51:44:f9:
         5b:b0:22:12:71:3b:67:e5:c2:56:eb:cc:59:df:03:d6:3f:03:
         07:7d:38:05:1b:35:7b:56:b5:d9:66:a1:0e:49:d0:61:f2:4e:
         85:8c:f1:3e:17:79:a9:a8:65:1c:f4:48:de:34:b1:56:e7:50:
         10:ff:f1:8c:6b:31:85:3a:00:4d:02:4d:e7:e2:1e:79:62:ad:
         60:a5:c6:0f:09:40:c4:a2:ac:b4:3f:7f:d9:55:8d:7d:3a:4d:
         54:1f:37:d0:e2:d8:3d:ae:e5:e4:18:89:1c:64:2c:fb:96:8e:
         a4:4e:b2:38:5a:19:c0:40:53:df:82:70:ae:91:a1:44:20:cc:
         05:d7:8e:ba:5f:3c:c3:fc:2c:4f:b0:1a:3d:ff:dd:47:36:17:
         b0:17:ae:b2:df:63:fc:b9:b7:65:5f:fe:49:49:c5:c0:cd:86:
         f0:c9:f9:33:94:cc:d9:fc:e5:7a:e3:96:46:12:4e:ff:92:39:
         35:78:df:6e:be:83:51:5a:06:7c:e7:ba:75:8d:ca:a4:a9:52:
         8c:f3:ec:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:10:41 2025 by rpki-client