Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/05d9eb95-20e4-3a67-930e-c531b8efe640.roa
File:                     05d9eb95-20e4-3a67-930e-c531b8efe640.roa (raw, json)
Hash identifier:          gNmXfE6zK+CzTB4hbPzeAOE0ZiwaF6jafGoYo2yE2IQ=
Subject key identifier:   5F:52:16:BA:BE:00:34:CE:63:06:34:97:16:EA:6F:C8:4B:28:15:43
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA161ACA86AEF510071D03480
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/05d9eb95-20e4-3a67-930e-c531b8efe640.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20001
IP address blocks:        74.87.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:ac:a8:6a:ef:51:00:71:d0:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=3887f3fc-283e-4a23-be6b-e252a50d13d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3f:b4:9c:ba:0a:78:30:7a:e0:b2:d3:be:08:
                    e5:f5:16:e4:97:95:af:b5:c6:41:2f:76:57:ff:91:
                    2d:e4:53:49:ff:c6:11:3d:ee:11:f6:aa:85:d2:45:
                    58:6e:b5:ac:20:b1:00:db:8d:65:f3:35:51:a9:75:
                    52:70:6a:94:bd:d8:66:d0:22:cd:88:7d:45:de:73:
                    c8:17:ca:46:c9:14:ad:40:00:fb:b6:0d:58:75:68:
                    29:61:1f:86:1b:f6:8e:ae:59:5b:7b:19:3a:38:e3:
                    bb:39:08:ce:91:3c:70:f8:e7:99:4e:50:70:11:ec:
                    22:22:74:fb:f3:d5:d0:0c:60:8f:a8:e6:c3:c5:65:
                    5c:7a:56:1d:a0:bc:73:1b:4e:30:35:34:95:00:fe:
                    24:6f:60:93:82:00:4e:3a:4f:4c:53:cc:2b:a7:02:
                    42:01:b0:21:0a:70:7c:0e:70:ae:69:50:8c:8d:af:
                    df:ec:c4:8c:30:18:79:75:6c:68:8b:f1:64:73:5a:
                    96:21:e4:69:01:41:fd:16:16:af:dd:06:d9:67:63:
                    46:f0:57:27:e0:09:6e:3b:77:7d:cd:c1:62:cb:da:
                    5c:bb:5e:38:30:d1:06:09:e8:f3:ef:f1:a2:bf:7d:
                    09:5d:ea:09:f4:34:89:6c:2e:d6:97:42:25:b1:45:
                    e0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:52:16:BA:BE:00:34:CE:63:06:34:97:16:EA:6F:C8:4B:28:15:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/05d9eb95-20e4-3a67-930e-c531b8efe640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:17:42:50:61:40:c0:3b:08:38:d1:ab:bb:af:37:55:54:97:
         80:2f:59:ae:0a:fe:33:a2:b6:ce:2b:f0:3d:77:a3:ab:ee:60:
         71:55:4a:1c:26:f1:f4:44:e0:85:bc:91:30:a7:3d:67:13:28:
         d8:19:5d:17:45:99:e9:91:76:d2:2d:4b:d6:87:7c:32:37:6c:
         70:ff:36:ee:f3:fd:96:3c:31:be:90:15:13:71:bd:50:87:7c:
         f7:82:9b:37:d8:71:01:79:8d:b6:24:1d:47:fb:90:e2:9b:c1:
         1f:14:1e:9d:3a:43:2f:d7:e3:bb:57:17:e4:72:b7:13:5d:8a:
         18:69:df:9e:16:48:94:09:c2:cb:c7:b0:0b:3f:9f:ea:57:33:
         e9:e2:59:b8:65:fa:81:32:49:ff:9d:e5:8c:4a:63:07:07:3a:
         6a:b5:e9:82:26:b4:14:6f:55:63:20:3a:fa:f4:5a:af:0f:d6:
         3e:73:6a:5d:03:37:42:81:d9:ce:a1:66:30:87:08:a5:df:ea:
         3c:13:44:76:ee:81:38:9e:a0:da:2a:09:e8:b5:20:21:39:55:
         d5:4c:ad:3c:12:8c:12:a5:de:2f:aa:45:d1:12:c4:ec:bf:c7:
         b3:44:58:a3:c3:24:df:80:60:1e:f0:74:96:b6:9c:40:cb:f0:
         3c:b0:b9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:02:40 2025 by rpki-client