Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/060d0cd8-871e-3996-91ec-54f81e71521b.roa
File:                     060d0cd8-871e-3996-91ec-54f81e71521b.roa (raw, json)
Hash identifier:          YBo5kaaz5X8cZXlM/Y4N0TsJtk5em86+b94O0rICH6Y=
Subject key identifier:   E6:15:76:2F:7B:A1:84:98:E7:A8:3B:51:5C:96:EF:8B:BD:82:EA:A3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA160F4930B0F4420643FC800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/060d0cd8-871e-3996-91ec-54f81e71521b.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     10796
IP address blocks:        74.87.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:f4:93:0b:0f:44:20:64:3f:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=258d03d7-739e-47ca-920e-4bc79b77da7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ee:aa:79:da:d7:27:6c:71:94:0d:77:a5:cc:
                    49:a6:f0:b0:7d:3b:f9:38:af:22:3d:f3:1b:f7:22:
                    99:da:3a:a9:65:6e:ef:1c:72:44:15:9d:37:84:0d:
                    05:26:89:93:0e:96:c1:65:13:91:ed:58:44:86:19:
                    e1:f3:45:cc:c0:51:f5:b4:86:4b:97:f4:3e:ab:0e:
                    a6:33:bb:b1:71:f8:7a:fc:96:bf:0a:b2:0d:59:15:
                    e5:cb:71:d8:fd:3c:17:44:a7:3c:e2:7f:72:6e:b7:
                    d2:e8:34:1e:cb:d1:ca:f7:b7:4d:44:71:7d:b3:4d:
                    ed:08:a1:5a:1c:39:8b:13:a2:9a:b0:ef:2d:aa:7a:
                    05:c6:cb:8c:93:1a:2e:25:23:bc:8b:66:64:18:75:
                    ed:9d:62:fd:5e:47:21:a5:0a:20:45:92:ed:a2:82:
                    27:78:dc:48:cc:d6:a4:ab:8a:33:3e:56:50:15:e8:
                    18:dc:fd:77:ba:96:54:95:46:60:7c:a2:c5:01:1b:
                    b5:b5:56:4b:1d:58:3e:d0:0c:55:9a:97:34:b1:7d:
                    53:64:a7:31:21:cb:ee:9d:b1:a8:9c:85:b8:a2:84:
                    cd:fc:42:64:09:cd:b5:49:6f:b5:4c:53:68:2f:b1:
                    76:7c:e2:c4:d9:1c:b2:0a:43:39:f9:cd:d3:bf:46:
                    c3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:15:76:2F:7B:A1:84:98:E7:A8:3B:51:5C:96:EF:8B:BD:82:EA:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/060d0cd8-871e-3996-91ec-54f81e71521b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:63:98:80:f9:72:32:c3:62:14:37:c6:97:62:72:a8:39:b8:
         03:ad:32:42:a9:eb:8e:c6:d3:e1:f9:1f:24:e5:ee:1c:af:31:
         38:4d:64:a3:e3:fc:07:1a:a9:1f:f6:87:70:5e:b7:97:53:d6:
         bb:da:3d:9a:c7:0f:be:a0:ba:f4:90:42:db:02:54:21:43:cd:
         b8:da:06:04:8e:57:60:61:1f:29:ea:c7:84:7a:2d:2d:8a:46:
         30:26:bf:37:ef:d2:2b:b5:17:09:f7:95:d2:89:99:05:9b:3b:
         55:c7:55:a4:5e:e4:07:03:63:fe:66:e9:74:53:91:1a:ee:c8:
         d8:d5:a2:01:82:32:a2:92:a5:56:db:19:20:0d:78:50:bd:8d:
         27:00:34:e4:ff:42:60:31:16:ac:60:ed:31:12:07:47:c8:ea:
         67:b0:86:31:6e:d9:52:97:e1:94:4e:29:f5:7f:bb:bf:41:8b:
         43:7d:2e:6a:59:78:9e:95:e1:4b:ac:f3:9c:19:fe:6d:2e:3d:
         01:21:b8:d9:0c:97:7e:62:0a:6c:b6:33:ca:1d:86:d8:e7:5f:
         92:7e:ef:b7:48:53:79:95:e2:a9:72:5e:09:94:91:32:f6:af:
         d3:82:b8:7b:7b:40:16:77:d7:44:6a:f0:64:17:a6:6f:bd:7d:
         f9:39:0e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:56:31 2025 by rpki-client