Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/6ceba9b9-edba-36b7-b47b-decceeffbbbb.roa
File:                     6ceba9b9-edba-36b7-b47b-decceeffbbbb.roa (raw, json)
Hash identifier:          NdDYCKcqezwqFBQ7PpqLmDrH5hCilbyojqkJ9zBGZAY=
Subject key identifier:   8D:C2:30:A7:AA:56:16:D7:3F:82:F5:8F:E1:32:B0:CD:65:28:E9:E0
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F4328584AB4EB6B9FF4A395FD685E71C0
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/6ceba9b9-edba-36b7-b47b-decceeffbbbb.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     13984
IP address blocks:        74.117.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:6b:9f:f4:a3:95:fd:68:5e:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=7a0e94ac-57b2-4506-8dfd-b9e512bdbb77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9d:23:58:00:95:8f:d9:87:4a:5d:ec:d4:61:
                    de:8b:26:3a:52:c6:59:05:aa:61:a5:a9:1c:4c:f0:
                    68:ab:40:3a:01:4c:5a:d1:c8:25:1f:de:4c:66:a1:
                    f9:d9:73:b6:24:56:85:c1:85:2d:27:0c:27:c1:8e:
                    57:dd:0c:7e:b7:48:3f:76:af:bf:a6:01:37:dc:2c:
                    f0:c7:a8:c2:14:b6:58:83:3b:ee:a1:50:e6:a9:6d:
                    d1:bf:79:db:de:4b:ad:51:80:c5:9a:b3:8a:41:f7:
                    37:eb:8d:6e:40:d8:b0:c0:3c:cc:3f:6f:41:0a:9a:
                    c3:2d:c0:6a:1b:0d:18:20:43:88:bb:6e:6e:46:bc:
                    d0:d1:05:09:af:f2:f9:1a:6d:62:f5:69:0b:90:fc:
                    8f:50:9f:a2:d5:8b:bc:fe:22:91:ca:d8:e2:04:11:
                    ef:79:c2:f2:8c:b0:2e:41:87:16:1a:9a:ff:eb:16:
                    a3:6e:b7:a5:15:8d:7d:03:07:67:85:1c:88:6b:51:
                    38:a5:55:6e:7c:ec:cb:3c:a7:50:90:cb:2a:70:79:
                    73:99:03:1f:7a:dd:7d:e1:01:8e:87:d7:42:a5:43:
                    61:10:6a:a7:a5:a5:ef:e8:12:3b:03:60:70:48:5d:
                    84:50:63:c1:c2:41:ee:1c:0d:5c:ea:45:40:e9:15:
                    c7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C2:30:A7:AA:56:16:D7:3F:82:F5:8F:E1:32:B0:CD:65:28:E9:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/6ceba9b9-edba-36b7-b47b-decceeffbbbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:2f:5b:a0:7c:a2:22:e5:a1:4e:0a:72:e1:31:c4:4c:f3:ba:
         33:88:7f:df:26:94:65:7b:06:68:a8:42:e3:c1:13:5d:71:4c:
         0b:63:d2:2c:86:88:f6:ed:76:35:05:ef:66:d2:f2:22:15:9f:
         7a:cf:d3:98:83:70:5a:b1:7e:83:c0:79:d6:08:71:01:e3:6c:
         05:c5:cc:80:3d:57:54:c0:00:24:52:e0:d4:3f:4f:dc:51:ed:
         61:38:3c:6a:59:98:d6:ea:a1:ae:5d:aa:89:a7:30:79:30:bd:
         bd:1c:06:2c:ba:56:3b:43:ba:27:25:1f:0c:59:e2:e5:fc:20:
         39:a3:66:2b:30:b8:3d:0c:95:97:41:f6:4c:82:b0:6a:b7:6f:
         00:6b:60:de:42:e2:52:f4:a1:c7:9f:79:b3:63:09:d5:98:c6:
         ec:d0:88:42:7f:de:b8:bf:78:bd:d1:66:f1:8c:68:33:78:e6:
         8e:e4:9f:4d:6a:96:54:f7:8b:42:ca:d7:50:52:5e:6f:9b:3a:
         9d:6f:5d:e0:3e:2b:35:cb:f1:12:78:e8:56:25:3e:19:10:6b:
         27:86:e4:27:d4:ec:58:ca:ad:b1:94:0b:08:c7:0c:1a:6a:c8:
         48:cf:11:0e:4e:4c:7a:38:45:44:e9:d0:1a:79:89:a0:90:1e:
         79:b7:dc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:34:04 2025 by rpki-client