Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ad237144-b5c7-37a8-acda-98562917ad9b.roa
File:                     ad237144-b5c7-37a8-acda-98562917ad9b.roa (raw, json)
Hash identifier:          TG4NeKSTsCEtb5N2VretXROQEHH2HRujnIgyFkPhoVE=
Subject key identifier:   77:E9:8F:19:77:F7:CC:F1:A3:3C:EF:D1:63:B2:BE:25:4F:9F:A0:81
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584BBFA5975B2D79AE29E9C32180
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ad237144-b5c7-37a8-acda-98562917ad9b.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     40002
IP address blocks:        69.74.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:97:5b:2d:79:ae:29:e9:c3:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=43f519ab-eced-403e-8074-1a07e6208d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a2:22:ab:d8:f1:44:d9:82:bc:04:d1:50:8d:
                    9f:d3:2c:7d:6d:c8:29:70:e8:53:f2:fb:e1:04:22:
                    98:9b:76:37:c5:0d:03:a4:2d:88:08:aa:f9:0f:67:
                    d5:ce:42:1f:2a:3d:c0:1c:9a:09:c5:1e:05:60:10:
                    3d:fe:bd:11:fb:ff:4e:ae:4e:5c:69:ef:b7:da:93:
                    22:7d:4e:1d:1c:77:2b:a2:d9:0b:4a:b7:47:09:8e:
                    3f:66:57:2a:4d:eb:0d:f4:57:5b:0a:0e:9a:0d:9a:
                    f6:ba:c7:36:80:66:27:83:bb:82:e7:da:a8:f5:6d:
                    e6:54:f8:43:71:e9:91:a5:b5:ac:1e:0f:1a:af:5a:
                    9e:cc:2c:1e:05:94:93:bd:1f:10:7c:d1:5d:af:22:
                    8b:01:49:ad:41:58:c6:8f:a8:8d:68:83:21:5f:dd:
                    6f:93:0f:f0:16:db:ff:be:e2:0b:b0:71:f3:57:ce:
                    52:ae:7d:01:2a:3d:1a:71:7f:5e:10:9a:f9:c1:77:
                    e2:1c:0f:06:61:0c:a8:bd:bd:fb:7c:53:eb:ac:f4:
                    97:20:47:5c:40:68:7c:a4:ec:b6:80:e9:dd:a5:5d:
                    a9:c7:12:6a:b6:a3:ef:a5:6e:cd:b1:4b:10:27:6d:
                    15:b5:ed:ae:1c:19:00:40:32:73:0e:a7:1b:2e:87:
                    74:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E9:8F:19:77:F7:CC:F1:A3:3C:EF:D1:63:B2:BE:25:4F:9F:A0:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ad237144-b5c7-37a8-acda-98562917ad9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:80:aa:58:67:0e:37:10:57:e8:84:b2:da:83:7f:b0:40:53:
         18:80:57:d8:71:38:72:b2:91:a2:f7:87:ea:28:53:c3:f4:86:
         1d:42:7e:2b:f7:30:6a:a2:87:7d:69:cc:08:ff:2d:59:6e:1d:
         60:1a:1d:4e:53:5f:7e:3d:65:18:95:3d:c5:b3:3a:e9:87:3c:
         58:97:ae:d9:99:ea:8d:bd:66:aa:58:73:5b:bd:c5:ce:f6:f1:
         aa:83:bc:1e:68:0c:50:f0:37:cc:9c:42:95:3e:93:d1:94:67:
         a9:17:e5:a9:74:93:4b:06:8e:f7:8a:23:a0:66:2d:21:f6:58:
         f8:31:31:fc:55:c0:df:1c:76:ba:a6:eb:8a:ab:0c:39:b1:bd:
         b6:0b:c2:a0:22:3f:ac:ca:4e:eb:33:3c:58:5c:43:12:ff:04:
         a6:37:77:4a:46:79:76:2c:6b:39:f6:23:ba:a9:69:29:a4:ed:
         7c:3a:7c:0e:c1:52:fe:99:96:0b:1c:a0:69:2f:d8:2e:4c:d7:
         6d:5c:31:bc:c9:45:0a:09:bd:e5:4b:d1:a2:27:9b:b7:33:b5:
         c5:bb:6f:1f:7b:e3:97:e9:1e:42:07:ad:08:f8:ed:66:e3:77:
         d9:28:5d:4b:f1:61:a2:e3:13:f8:b7:df:ac:40:46:61:77:58:
         89:4b:a5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:50:55 2025 by rpki-client