Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4060bb7b-e475-30a3-8893-bc8967930f24.roa
File:                     4060bb7b-e475-30a3-8893-bc8967930f24.roa (raw, json)
Hash identifier:          vh4aJ13ehOjAy2SZbl8X3FSPAroxD3k/s59+Hw4LJxk=
Subject key identifier:   35:DB:A5:78:0D:8B:DA:30:7E:36:EB:78:F9:83:4E:05:7E:87:97:F5
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328584A8575EA6BCCEFB38081F61C80
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4060bb7b-e475-30a3-8893-bc8967930f24.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     835
IP address blocks:        74.119.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:ea:6b:cc:ef:b3:80:81:f6:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=c7b694aa-4c59-4e8a-8d82-c0ac0e51871b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c2:8a:fd:78:8b:78:ac:c5:d5:a5:d9:d9:21:
                    83:43:a2:25:b9:29:ae:08:ed:71:bd:e7:9f:5a:f1:
                    5b:1b:57:ac:64:f2:d8:1d:50:80:28:04:db:ef:ff:
                    88:49:9b:93:77:c9:4e:3e:59:a5:6b:53:88:25:b9:
                    a8:03:43:60:83:c9:9e:2b:04:a7:a6:59:5a:27:fe:
                    37:d0:59:a1:26:5d:47:fb:6a:5a:3d:57:fc:98:3a:
                    07:eb:72:40:ab:cf:50:1c:8f:1b:13:cf:4f:26:52:
                    9c:eb:22:2a:89:84:bc:aa:34:22:52:93:5b:56:d3:
                    0d:b6:5c:65:23:4a:2d:70:15:28:b7:90:dc:d2:b7:
                    c1:54:bb:13:9d:50:c9:de:2d:5c:3b:01:c8:73:f3:
                    ac:fc:5c:06:c0:d5:b6:9d:7d:53:95:0b:89:61:5c:
                    b0:4e:95:d4:c3:f1:a1:58:42:b6:e2:50:c5:05:c9:
                    b7:a5:77:73:59:77:16:97:af:c0:ea:47:ac:14:8a:
                    72:07:dd:51:71:b3:d5:d6:a4:d9:98:09:18:c7:2f:
                    ce:9c:5e:ce:fb:20:29:75:85:3d:df:1b:ff:97:5b:
                    11:28:08:45:b0:01:57:7d:dc:4b:96:76:c3:c0:42:
                    70:3e:75:d9:88:00:25:3a:08:3b:39:8b:b3:0d:7e:
                    d5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DB:A5:78:0D:8B:DA:30:7E:36:EB:78:F9:83:4E:05:7E:87:97:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4060bb7b-e475-30a3-8893-bc8967930f24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:bd:3f:77:37:6f:b1:10:9b:77:0c:83:3f:e9:dc:f3:99:d6:
         1b:65:fe:74:ea:e9:1d:ba:c3:7f:36:02:81:b9:8e:43:78:62:
         e4:9f:8a:6a:41:47:be:d5:4a:8c:5b:04:76:14:d7:1c:17:53:
         42:46:4b:be:7e:cd:c2:c9:99:db:a3:cd:e9:85:df:ac:8d:61:
         b0:ac:10:dc:6d:b3:50:d4:42:fc:44:29:67:ba:84:86:5b:13:
         88:b2:65:af:e5:92:cb:e4:d5:26:0d:73:e1:a7:0b:c9:82:94:
         95:ba:1d:06:75:2b:fc:cd:30:9f:17:83:85:87:27:a7:3c:04:
         b9:29:bd:be:22:32:34:42:46:62:ad:ff:bc:b4:d6:1e:bf:09:
         c8:14:47:54:2c:a0:44:67:92:8b:a1:d3:28:88:f6:bf:b3:1c:
         8a:9b:3e:3d:04:38:a9:a3:d0:d9:14:1b:27:69:71:d6:e2:62:
         82:5e:25:3d:d3:7c:db:be:dc:17:42:d8:62:ec:04:e9:95:cb:
         53:3e:a3:7a:be:62:ae:78:95:b3:77:d0:b7:3e:fb:22:68:60:
         ea:dc:90:03:dd:7c:61:65:0e:4a:f9:c9:8d:14:1e:7e:db:f1:
         bb:43:68:1d:cd:8d:55:8f:02:d3:4f:92:44:77:34:2d:aa:1b:
         eb:e3:f9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:31:00 2025 by rpki-client