Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8c261214-34d3-3feb-b587-96300f111017.roa
File:                     8c261214-34d3-3feb-b587-96300f111017.roa (raw, json)
Hash identifier:          ygan7bbfjIZkbyt3Hc7guvHGvZroA3l2nXt9APz0x3Y=
Subject key identifier:   44:C4:7F:9F:D2:F0:4C:97:4D:AD:EA:CC:7F:55:01:2D:2F:A8:A6:67
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E964D27B56D9ACE6EC55D00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8c261214-34d3-3feb-b587-96300f111017.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        174.83.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:4d:27:b5:6d:9a:ce:6e:c5:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=6b78aea0-d15f-4c32-a049-5c4d13dbe6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:14:30:3b:d0:2f:ee:ff:3b:f5:19:3e:c1:45:
                    59:be:27:7d:9e:26:a9:4b:b2:e4:d2:4f:62:b3:f7:
                    95:20:12:fb:a1:b5:54:6c:e3:8b:2e:93:e6:40:ee:
                    68:11:40:a4:a5:fa:0d:05:4a:a0:50:73:39:e4:89:
                    bc:0c:96:3e:df:e3:46:60:9a:b0:b6:b8:07:42:53:
                    5f:f2:93:e3:9b:4c:7e:87:50:a8:e2:cb:ad:2a:78:
                    e3:fc:c0:1a:72:cb:7f:da:45:f9:50:72:6f:5f:69:
                    77:df:7e:3d:d6:e1:ba:fc:cb:59:d3:20:85:80:27:
                    b3:71:95:2e:0f:1c:25:53:59:9e:1d:cd:1e:cb:5e:
                    09:6e:d7:5b:5f:fe:1e:12:4f:f9:08:b7:f4:80:ae:
                    3a:9f:6d:31:0c:ed:66:a5:cb:28:0b:9a:69:58:b4:
                    9d:c3:92:cc:cd:d2:be:aa:13:41:f6:47:3b:ba:09:
                    b4:5a:f8:00:8a:0d:c1:12:8c:c9:d7:40:df:3f:2f:
                    9f:50:81:5c:16:a9:db:2c:15:05:7f:98:2a:bc:74:
                    8f:52:fd:df:7b:18:70:fe:62:57:26:6d:12:96:fb:
                    5b:67:64:4f:68:49:dd:8d:3b:33:92:a9:d3:d3:b8:
                    c8:43:4d:7b:ff:c3:bd:de:f1:a9:7d:a0:72:e0:dd:
                    20:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C4:7F:9F:D2:F0:4C:97:4D:AD:EA:CC:7F:55:01:2D:2F:A8:A6:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8c261214-34d3-3feb-b587-96300f111017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.83.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:34:02:a5:ed:6b:8e:34:90:44:81:f0:f6:84:e6:67:ff:4b:
         5b:96:86:55:ff:87:4e:45:5b:76:06:06:a0:83:2e:85:47:65:
         52:fd:c4:43:cc:dd:a7:83:5a:44:bc:0d:83:f4:94:eb:70:c5:
         a3:80:42:9d:5f:3c:87:3b:44:87:09:01:59:21:c8:51:d4:16:
         ab:60:72:40:73:62:3f:3d:ae:55:ed:f0:3c:a8:a9:f3:21:2c:
         22:d4:0e:82:14:df:8e:6a:a0:03:23:20:12:2a:93:c3:a2:6e:
         4c:dd:3e:24:c3:64:27:32:bf:ea:e9:bf:42:48:c3:9c:6a:77:
         86:cc:a5:be:95:98:41:72:57:15:e9:15:5c:bc:2a:d1:36:51:
         20:61:ad:99:a5:e9:52:49:af:0d:33:97:21:64:26:66:05:0e:
         74:f9:6d:42:53:46:2a:1a:58:f7:f7:61:3e:44:3d:b5:a8:73:
         ce:1d:f5:0a:39:b4:21:ab:67:08:47:2c:96:0d:1e:e0:af:43:
         d1:65:3d:17:a3:5e:5c:8a:ed:ab:d5:17:18:f4:7d:0e:36:f3:
         19:9a:e5:da:4d:5d:3d:12:53:19:c2:13:4e:08:b2:80:ed:fe:
         85:b0:e7:8d:83:39:ba:bd:a1:bd:8b:bc:d1:cb:95:54:41:cd:
         9f:8e:8b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:14 2025 by rpki-client