Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/14e79948-c1a1-3775-8799-ae8d24a3c5ac.roa
File:                     14e79948-c1a1-3775-8799-ae8d24a3c5ac.roa (raw, json)
Hash identifier:          N2v4hgkYK8eBUt4hrg1c7H38YjGHpbUqhv3G6e8aOuM=
Subject key identifier:   BE:5B:A6:C0:0B:B2:55:7A:8F:C4:C9:87:CE:7F:76:10:F8:43:62:E8
Certificate issuer:       /CN=0412f035-b376-4807-a8ac-e98680ab0e36
Certificate serial:       010D0C9F4328584A268AC2B6EFC277E60E9C2200
Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/14e79948-c1a1-3775-8799-ae8d24a3c5ac.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     6142
IP address blocks:        74.85.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:c2:b6:ef:c2:77:e6:0e:9c:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=e434a916-bf9a-4422-87d4-50c22efd63df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:58:90:f6:bb:a6:88:a5:e4:8b:83:a6:13:12:
                    82:de:47:62:17:78:c2:81:38:b3:18:30:43:70:c3:
                    f3:df:10:d6:1c:54:68:aa:87:a5:ba:6f:bc:72:d6:
                    c2:a0:a3:60:28:0d:8e:56:94:1b:cf:ab:c0:cb:fe:
                    29:1c:ea:8a:6f:1f:6f:d0:a7:47:24:c5:ab:68:52:
                    59:fa:21:38:43:0e:ac:49:77:18:94:5d:6d:37:a2:
                    a1:15:1e:c3:c5:ed:92:40:d9:72:6a:e3:55:05:03:
                    52:e4:a5:d2:3d:bd:57:d9:b7:0d:84:e9:6d:3a:6a:
                    75:02:c4:3e:54:ef:4e:e2:7a:ab:3a:6c:af:d4:57:
                    4e:bd:9e:45:f9:a9:2f:b6:82:3a:7a:e3:e7:d0:7c:
                    1b:37:28:b0:41:5a:97:62:5f:7b:f4:e1:01:bf:c9:
                    fd:62:9a:c9:bc:dc:76:7a:fd:b7:75:d9:cb:a2:8d:
                    5f:b5:0c:41:e4:10:e6:99:fd:ea:c3:37:f4:75:67:
                    36:b5:cb:fc:03:14:b4:39:49:b7:fd:f0:30:14:8a:
                    64:bf:60:3d:b6:ce:a5:6e:9b:9a:7c:2b:05:a1:9e:
                    05:22:f3:86:31:84:3c:5f:41:41:9f:2f:94:82:28:
                    91:4d:1b:c4:00:da:18:3d:5c:36:fd:c3:20:ce:9a:
                    65:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5B:A6:C0:0B:B2:55:7A:8F:C4:C9:87:CE:7F:76:10:F8:43:62:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/14e79948-c1a1-3775-8799-ae8d24a3c5ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl

            X509v3 Authority Key Identifier:
                keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.85.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:7b:a4:b9:c5:0a:78:70:43:25:f8:5c:36:46:6f:75:33:e2:
         48:01:93:6b:e1:01:ed:59:e6:22:85:60:26:80:1d:96:fe:b9:
         e2:8d:18:56:c0:64:f6:0d:4a:fd:d1:ba:55:00:cb:be:ea:2a:
         fc:5d:c3:e5:5f:f0:ec:f1:d0:ed:dc:c3:d6:e2:02:70:36:da:
         9c:0f:3a:33:e9:ec:e3:a2:93:7d:7e:5e:1b:06:69:6f:9e:76:
         ba:d1:48:da:f7:00:56:a5:71:60:d7:ff:de:74:f7:5b:ba:52:
         38:a5:41:34:a6:92:01:0d:ea:c4:e4:9a:73:3b:ff:fb:f5:2b:
         60:2b:4b:b3:4a:7e:bd:9c:8b:aa:d0:8c:2d:8a:97:ae:34:3f:
         89:b0:d2:ff:b0:47:86:43:9d:63:cc:6b:0e:03:c3:f2:16:c2:
         86:68:e0:01:22:2f:e0:fc:92:5f:33:30:10:0e:79:b6:57:40:
         fb:a0:8b:ff:8e:49:d6:74:78:b8:6b:8f:47:94:7b:a7:c3:e0:
         b2:fd:2b:70:d9:55:0a:5d:6a:3c:9e:7d:1a:25:5d:3b:1c:15:
         a8:c3:15:9d:7b:03:22:04:0f:be:9d:81:8f:00:53:d0:15:04:
         3d:d1:68:21:ab:98:3f:9c:e7:e0:77:5a:bd:43:c9:f6:a5:e0:
         d7:fe:0d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:53:43 2025 by rpki-client