Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aa5fe7e4-b8c0-3238-9851-623418e95d1d.roa
File:                     aa5fe7e4-b8c0-3238-9851-623418e95d1d.roa (raw, json)
Hash identifier:          JP7bcqG182RvrZt5+nrn0AJ1sYuwYcCjeWw0Gua6Cj4=
Subject key identifier:   DA:13:D4:1A:D2:A1:07:D6:55:08:78:A6:3F:A0:5F:19:90:06:0A:57
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA16118875AD6046F7D926340
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aa5fe7e4-b8c0-3238-9851-623418e95d1d.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20001
IP address blocks:        74.87.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:18:87:5a:d6:04:6f:7d:92:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=0b9723ba-ae50-4b4c-8383-5954e53dca62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bc:14:78:ae:a5:63:b4:41:c6:64:43:9d:b9:
                    e3:d8:e9:c0:98:ed:4c:99:8b:fc:d9:f2:91:c0:6b:
                    1f:6b:0f:d7:b4:79:04:5f:3b:1f:ea:dd:d5:00:c8:
                    8d:03:5d:a5:ae:fd:48:ce:0d:9b:9c:dd:fe:2c:c5:
                    00:d3:cc:74:07:b1:9e:db:03:c6:2a:28:10:69:42:
                    f5:f1:87:77:62:18:ad:1b:51:06:cb:dc:da:69:b7:
                    6a:d1:2d:92:c5:70:37:bf:86:85:18:ee:68:80:6f:
                    36:c3:ce:bb:2c:6a:56:1a:b7:a0:2c:fa:bb:77:9a:
                    cb:c5:bd:e5:5d:ed:2a:b4:0e:b0:c3:28:d6:ba:8f:
                    0c:02:27:01:3b:ca:d0:ac:e8:73:fb:ac:57:56:57:
                    b4:58:5d:01:2d:b8:e8:12:c8:2a:34:c7:57:05:9c:
                    07:86:74:a2:1a:b4:6c:d8:14:71:f6:94:47:e3:2c:
                    f5:74:9a:db:43:2e:da:23:cb:9a:b9:31:2f:46:b1:
                    d2:7f:43:af:f6:7b:d5:f1:d9:2c:e3:30:12:51:a1:
                    04:15:e3:16:42:1e:d6:1b:7b:d2:a6:c8:38:dc:70:
                    d3:4e:dc:2b:84:1e:58:3c:91:9d:80:03:91:cc:5b:
                    88:95:ad:df:6f:c3:1a:ee:5f:64:57:84:38:c7:bc:
                    b3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:13:D4:1A:D2:A1:07:D6:55:08:78:A6:3F:A0:5F:19:90:06:0A:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aa5fe7e4-b8c0-3238-9851-623418e95d1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:d7:35:14:91:37:1d:b0:78:44:11:48:89:8f:2b:69:6c:f6:
         d1:10:8b:f0:52:af:09:d1:73:d0:61:58:27:7f:2f:e0:d7:9c:
         8c:fa:bb:d5:09:0d:f9:15:06:87:14:a3:71:c8:62:ef:7f:98:
         0c:37:2b:50:8b:f4:2b:b9:bc:3b:eb:4b:e4:ae:80:c7:01:40:
         9c:9d:dc:92:ed:22:02:4b:a6:9a:88:05:72:01:62:ee:f4:94:
         e0:a1:39:25:5d:92:60:20:68:a4:b1:18:64:d0:eb:f0:6f:12:
         a4:4c:aa:d1:c8:44:7e:ad:98:72:61:95:c3:49:ce:43:a7:1c:
         cb:fc:73:c5:42:15:e6:3d:a8:fc:c9:d1:bc:23:69:1f:46:c2:
         ce:da:7a:59:4a:30:42:49:46:c5:52:bb:d9:b6:ce:62:18:69:
         3f:20:f0:95:e7:10:98:4d:a4:c7:6a:fa:5b:51:35:1d:df:f9:
         de:54:3e:1b:90:1f:74:d5:ae:1c:21:9b:a6:e8:b0:c3:89:39:
         0c:c1:ef:d5:1f:8b:b8:44:b4:8f:5b:f6:3e:4d:b8:0c:d6:9a:
         d8:fa:02:37:ba:81:a2:71:78:08:d7:6c:95:67:3c:5e:a0:2c:
         19:6a:aa:cd:09:9c:d1:2c:30:fa:e7:17:cb:b0:5e:4c:fd:9c:
         6d:e2:36:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:58 2025 by rpki-client