Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/faadd0a3-a993-3496-8f98-a98da5a4e705.roa
File:                     faadd0a3-a993-3496-8f98-a98da5a4e705.roa (raw, json)
Hash identifier:          /d2pQ1cK8W+2NtFCva1v7A+YY6p1ledSdvLXyZJGvjc=
Subject key identifier:   4B:3D:44:0E:A9:1A:73:40:7E:C4:B7:97:5E:6F:F4:A9:A5:7F:76:7E
Certificate issuer:       /CN=e9d9b9dd-0b27-411a-a8a4-122477510cdf
Certificate serial:       010D0C9F4328584BAA97A2C9D7FF2D5569997240
Authority key identifier: D0:3E:87:DB:98:AC:2E:8F:70:FF:B9:F1:85:A8:7A:49:C7:BC:9E:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/faadd0a3-a993-3496-8f98-a98da5a4e705.roa
Signing time:             Tue 28 Oct 2025 01:00:31 +0000
ROA not before:           Tue 28 Oct 2025 01:00:31 +0000
ROA not after:            Mon 26 Jan 2026 02:00:31 +0000
asID:                     35350
IP address blocks:        198.74.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/e9d9b9dd-0b27-411a-a8a4-122477510cdf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/e9d9b9dd-0b27-411a-a8a4-122477510cdf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:aa:97:a2:c9:d7:ff:2d:55:69:99:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9d9b9dd-0b27-411a-a8a4-122477510cdf
        Validity
            Not Before: Oct 28 01:00:31 2025 GMT
            Not After : Jan 26 02:00:31 2026 GMT
        Subject: CN=0d51bf45-4cd5-472c-b1f4-88a94be12f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:76:85:44:5f:74:13:a2:f6:e2:fe:52:66:59:
                    71:d2:59:8d:7b:50:53:5c:00:a7:41:e2:60:90:1b:
                    b7:74:00:16:cd:d9:d2:ba:84:66:21:a0:bc:58:d7:
                    c9:96:1d:37:e7:c3:91:ec:ae:17:e6:d5:01:43:3d:
                    6b:5c:b9:33:1c:65:e9:9e:fb:a4:40:e6:04:0a:f0:
                    41:e0:a4:25:f2:be:46:4a:61:55:0d:51:25:a5:33:
                    a3:24:7b:ac:63:b1:a5:4f:07:fe:b8:af:f1:13:1c:
                    d4:5d:f7:2f:b0:0d:e8:18:8d:7a:8e:2d:c1:bb:aa:
                    c3:be:a0:40:45:e8:ab:68:b7:6c:a7:15:41:66:53:
                    0e:81:4c:6b:4d:e6:16:2c:16:92:e8:48:bd:04:2f:
                    ca:5b:2d:8b:cd:dc:dc:1d:6f:38:2a:b8:85:5e:3c:
                    3e:b6:a3:6e:42:3b:21:9b:67:3d:11:97:42:3e:56:
                    33:10:2f:bc:43:16:cd:99:60:cd:86:90:fa:f8:ac:
                    34:f5:84:b7:25:7c:bd:ab:98:98:64:77:66:29:7b:
                    7e:7c:e5:2a:23:9f:76:42:04:ed:fe:3e:8b:c1:05:
                    0a:9d:8d:e3:b9:68:63:94:cf:8a:92:e8:c7:41:e8:
                    45:0e:b5:e8:d3:01:61:68:a0:04:be:d0:e1:46:57:
                    ff:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3D:44:0E:A9:1A:73:40:7E:C4:B7:97:5E:6F:F4:A9:A5:7F:76:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/faadd0a3-a993-3496-8f98-a98da5a4e705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/e9d9b9dd-0b27-411a-a8a4-122477510cdf.crl

            X509v3 Authority Key Identifier:
                keyid:D0:3E:87:DB:98:AC:2E:8F:70:FF:B9:F1:85:A8:7A:49:C7:BC:9E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.74.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:98:2d:0c:7b:94:39:3b:08:6d:39:66:f0:00:36:6f:f3:18:
         e7:86:96:a4:a0:82:30:6f:4a:98:09:90:fa:2c:52:2d:79:4a:
         6c:81:ba:5d:b8:2f:d9:64:be:9c:a3:aa:b4:2e:80:fe:7e:52:
         9a:e5:ab:87:35:42:18:fc:bd:27:58:5d:fa:e7:02:f7:7d:e3:
         c1:b4:41:3e:0b:f0:47:33:46:f1:38:34:a5:8f:ef:5c:c2:81:
         37:58:1a:26:98:9c:e2:b2:02:5f:3f:1e:0e:1d:85:7c:f8:db:
         61:e5:8e:f5:e9:d6:06:05:fc:63:ab:a7:c4:69:ce:7b:93:c2:
         25:da:d8:ce:72:5d:70:ed:6d:df:c4:b0:2d:60:a1:f0:05:a2:
         5a:10:6e:0d:9a:86:fc:37:d0:13:bc:62:e1:df:88:c8:b4:ff:
         62:1f:e7:fb:56:41:a0:79:3c:92:8f:84:e7:fe:ef:7d:17:74:
         cf:d8:bc:71:88:19:b7:03:34:2b:18:45:aa:7e:5c:e9:37:3d:
         22:0f:a7:a9:27:08:48:07:01:25:85:af:06:06:e4:78:ca:85:
         ff:aa:af:fc:a4:81:d4:97:98:c8:24:06:7b:09:ee:eb:d4:8f:
         ee:dc:b1:b1:3b:0c:ff:05:1f:00:3f:7d:5d:c9:41:95:39:17:
         c4:bb:0d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:33:20 2025 by rpki-client