Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/74043b36-4da5-3e84-b21c-ebd4075cbecb.roa
File:                     74043b36-4da5-3e84-b21c-ebd4075cbecb.roa (raw, json)
Hash identifier:          bWay3uAsh20ugq9guyTqDYeh90YTDOjya96XrYxhJN4=
Subject key identifier:   DD:FB:EA:9F:8B:ED:75:7F:7E:AC:E4:65:36:11:74:43:8B:5D:6A:B9
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584AA85BBC21548DC913831C8780
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/74043b36-4da5-3e84-b21c-ebd4075cbecb.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     33333
IP address blocks:        67.220.64.0/19 maxlen: 24
                          68.168.16.0/20 maxlen: 24
                          69.42.208.0/20 maxlen: 24
                          186.190.208.0/20 maxlen: 24
                          2607:3b40::/32 maxlen: 48
                          2607:f5a0::/32 maxlen: 48
                          2607:ffd8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:bc:21:54:8d:c9:13:83:1c:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=942c2cc9-3dfe-4c78-829d-a20c92084130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:c8:ab:26:59:15:38:af:33:db:b5:78:11:
                    1e:20:a5:ef:1c:5b:b5:9a:ea:3e:50:45:ad:f1:dd:
                    30:8c:bc:50:73:c3:7b:f0:4a:12:44:dd:28:c0:aa:
                    fe:46:a3:2e:18:0f:e2:8c:e2:33:45:76:2e:cd:d8:
                    07:14:c8:a7:ed:a5:e5:fb:34:e2:f9:f2:33:38:d2:
                    b8:69:b1:0b:44:6c:a1:4d:f8:3a:57:41:a4:c7:f7:
                    1a:5f:12:f5:59:39:35:56:b1:a4:7f:7c:11:f9:4f:
                    b7:13:9f:17:88:18:4b:b7:36:72:31:48:fc:f3:89:
                    b1:44:99:cf:70:06:c2:a0:f3:aa:b6:b5:ab:07:c5:
                    09:a6:61:32:17:45:5a:13:c8:05:55:2a:4d:97:61:
                    16:0e:1d:48:b1:e8:77:56:57:90:ce:7d:05:7e:a0:
                    bc:50:c0:41:b9:ea:c2:f8:5f:c9:ff:da:bc:f3:3b:
                    e6:2c:d2:b0:92:d4:90:ba:cd:a1:85:30:a8:97:b0:
                    57:1e:24:25:f0:9c:de:f2:4f:8b:dc:90:80:7d:11:
                    b6:a6:b6:8a:e1:16:43:2c:bf:aa:2f:09:f3:85:be:
                    99:18:f4:3f:4b:9c:d9:0f:e5:5f:a2:77:b4:71:24:
                    e7:f6:e4:77:c4:7f:fb:0b:ef:49:60:cd:07:47:2f:
                    9b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FB:EA:9F:8B:ED:75:7F:7E:AC:E4:65:36:11:74:43:8B:5D:6A:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/74043b36-4da5-3e84-b21c-ebd4075cbecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.64.0/19
                  68.168.16.0/20
                  69.42.208.0/20
                  186.190.208.0/20
                IPv6:
                  2607:3b40::/32
                  2607:f5a0::/32
                  2607:ffd8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:88:83:c8:62:85:b1:c2:99:b6:1a:33:a3:70:3d:08:ef:8b:
         67:fc:c5:8b:60:95:d9:8c:d6:e2:e0:0e:86:94:b7:39:ee:55:
         36:8e:39:f5:ed:59:41:89:90:f4:fc:38:02:79:b4:40:5f:0d:
         d0:01:6e:36:5b:fc:93:4b:f7:1f:e7:a2:69:4d:59:47:3c:06:
         f7:85:90:95:04:90:06:bd:d2:c1:c1:24:fd:86:b4:20:c1:12:
         39:c2:30:f2:af:bf:6e:08:ec:01:e8:fb:ec:f6:74:5b:ac:6e:
         20:85:ca:14:44:08:92:ee:86:bb:76:5c:2d:80:f5:92:98:74:
         15:d6:bd:80:ae:f3:c5:83:c3:cc:e2:6f:c8:bf:97:78:0d:ff:
         e6:db:62:d2:4c:19:41:a2:0e:e9:f9:b3:03:a6:9b:10:ba:47:
         ef:91:79:8e:47:18:bd:54:64:9d:aa:53:87:70:38:ba:76:1b:
         97:cf:40:f1:47:27:2b:44:8d:7d:31:07:f7:3f:78:49:27:98:
         e5:3a:51:fc:9a:17:f4:bf:b8:63:b2:a4:65:e4:84:6c:2d:24:
         3d:18:a9:3f:0f:f6:bf:8b:23:ba:66:65:65:83:c8:de:81:4f:
         33:d4:2d:83:5a:f2:b5:92:dc:73:ff:2b:a4:e2:f3:db:5c:f9:
         39:10:f0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:09 2025 by rpki-client