Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ee701b77-3993-3c20-9919-88afdd489b89.roa
File:                     ee701b77-3993-3c20-9919-88afdd489b89.roa (raw, json)
Hash identifier:          cR4rFEg9BnPsNMUwgH/FZA7mt6dyjgAozJZdF2OkZWo=
Subject key identifier:   CF:BE:D4:33:D4:80:AD:04:52:C2:80:70:B3:22:4A:44:BB:A8:56:63
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584A2ABAFBCCF7B48002DB7D2800
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ee701b77-3993-3c20-9919-88afdd489b89.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     11404
IP address blocks:        74.85.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:fb:cc:f7:b4:80:02:db:7d:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=3bc23a22-4142-4a51-8554-ec7449ca10c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2a:9b:a4:59:dd:10:0b:da:53:4e:92:c8:9d:
                    35:c0:d1:45:dd:15:de:7b:c1:c2:72:ac:cb:71:be:
                    c2:52:05:1a:66:3e:73:fa:d3:d6:ab:d4:bb:1e:04:
                    1a:c9:a6:4c:77:ed:f5:ad:52:29:91:75:0a:4e:45:
                    ec:80:1a:18:96:ee:0e:44:b0:7f:16:40:73:18:a7:
                    15:fd:fe:64:95:5b:d9:72:1d:3d:9a:8f:70:b3:ad:
                    75:a3:07:13:40:0b:3f:ad:60:74:b3:a8:ee:85:40:
                    b0:7a:cc:c5:5a:df:7d:db:c9:19:d5:50:bc:01:79:
                    ea:6e:ee:34:d8:9d:d6:d2:47:cb:48:3e:99:df:2a:
                    61:71:27:21:df:51:bc:eb:2b:3f:16:51:67:27:f5:
                    46:69:84:dd:63:47:08:26:3d:14:df:df:3b:4f:bc:
                    96:38:c4:8c:47:18:85:d2:08:f0:52:10:5b:f2:5f:
                    8c:26:fb:6d:b2:6b:9b:26:45:73:38:34:86:84:ca:
                    96:4b:dd:e8:6b:27:c7:f6:1e:86:2c:eb:46:ed:65:
                    ba:c8:ad:31:c7:99:aa:6d:26:b1:1a:c3:00:88:60:
                    8e:d4:04:aa:38:da:1f:2d:e9:cd:e5:92:90:74:a5:
                    a9:90:99:c9:8c:ca:b8:43:64:3e:76:47:cb:87:3a:
                    a7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BE:D4:33:D4:80:AD:04:52:C2:80:70:B3:22:4A:44:BB:A8:56:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ee701b77-3993-3c20-9919-88afdd489b89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.85.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:02:0c:7f:10:91:09:3f:b9:97:26:0a:13:46:87:b4:81:f6:
         1b:14:0a:6c:91:f0:00:9f:81:f3:03:50:76:cf:8c:54:21:97:
         b6:06:fb:a1:b5:8c:03:b6:70:1d:d7:dd:f1:0b:da:91:20:b7:
         d7:d7:8f:20:8c:65:83:e2:86:33:03:b3:ea:29:46:ad:f5:cd:
         2b:ae:0e:75:f7:45:07:dd:a8:71:02:df:2e:43:8d:30:03:ff:
         51:d5:a0:38:e1:c3:a8:71:2e:f0:2c:32:96:21:d8:e5:a3:60:
         0f:36:10:49:32:ef:d3:ea:71:fd:47:8e:f3:93:54:27:fe:c5:
         27:fc:9b:72:3b:a6:c3:e0:64:ba:87:d6:78:2c:4f:d2:a4:eb:
         d6:19:58:a0:3d:49:1c:94:a6:67:c4:72:d4:46:a6:2d:19:11:
         b1:0a:69:6c:e0:bc:ab:04:19:ca:95:ea:e1:d7:6a:3f:07:1b:
         21:bf:51:2c:9a:69:d5:02:df:b4:d1:85:e3:0b:39:e8:5a:b2:
         45:03:39:c5:cb:4d:b2:d2:e0:fd:2f:a8:06:30:9d:ef:74:5b:
         ce:0a:bc:e6:02:7b:59:2c:e8:06:18:46:8a:ea:aa:06:57:53:
         5f:ac:fe:7b:26:0b:44:44:d5:54:a8:1f:da:09:b4:2f:13:ee:
         46:87:c9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:41:47 2025 by rpki-client