Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/4925d209-f003-3bb9-b12d-10cc44b06d40.roa
File:                     4925d209-f003-3bb9-b12d-10cc44b06d40.roa (raw, json)
Hash identifier:          7Pwh8V6lyQ3WXEmS1Aw3cCBJxJv1Mf3adlnoNsMzjvc=
Subject key identifier:   2E:00:EE:98:58:E3:AB:98:3E:18:32:59:E0:72:80:4A:EA:1B:6F:D6
Certificate issuer:       /CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2
Certificate serial:       010D0C9F4328584BBFA5A40E2C4F70C9763F3800
Authority key identifier: AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/4925d209-f003-3bb9-b12d-10cc44b06d40.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     15278
IP address blocks:        74.117.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:a4:0e:2c:4f:70:c9:76:3f:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=c4211a18-3dea-4b7c-aed1-9adfa0b427fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:34:ec:61:1e:f1:ed:e3:33:ae:7f:01:e0:c1:
                    5b:47:3f:da:6e:10:82:3c:2c:d3:c7:93:54:04:a5:
                    54:26:6e:1d:eb:66:1f:5b:64:22:34:34:d4:2a:71:
                    0f:a8:ca:2c:8b:91:b7:7d:d8:a8:08:f0:dc:c9:8c:
                    30:58:05:91:3c:18:0c:f2:68:4d:b7:a8:51:9a:4f:
                    be:10:45:73:cb:2b:b6:c8:ac:24:30:a2:91:29:76:
                    a6:d7:a9:1c:65:c3:dd:d7:8b:62:7f:9c:7a:e9:11:
                    13:04:9a:2b:b2:ea:6b:c6:74:31:4b:9f:45:a5:93:
                    b2:a8:12:2b:8b:73:e5:35:c5:06:86:a3:f7:79:23:
                    7d:c9:f0:e5:ba:c2:79:97:ac:66:21:70:e1:f4:a1:
                    a4:e1:2d:e2:2f:1a:20:50:ec:11:28:68:d2:8b:e4:
                    1b:41:90:96:d5:a6:af:1a:53:9f:2a:74:fc:24:74:
                    37:54:06:ed:c6:83:bf:0a:6f:45:0b:7b:81:70:a6:
                    1b:6c:71:b8:c5:81:92:84:0b:bf:55:d4:6f:b9:b8:
                    68:42:67:ec:9f:96:b4:e7:12:44:e7:40:9b:6f:6a:
                    8e:7a:81:d8:ae:63:07:e4:ad:a3:01:c0:41:db:e2:
                    6f:fe:50:e9:12:0a:79:1d:2d:68:11:b6:fe:2f:29:
                    5a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:00:EE:98:58:E3:AB:98:3E:18:32:59:E0:72:80:4A:EA:1B:6F:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/4925d209-f003-3bb9-b12d-10cc44b06d40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl

            X509v3 Authority Key Identifier:
                keyid:AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:1c:9d:fe:37:87:dc:3b:1d:fc:71:ec:ee:05:0f:eb:38:2a:
         75:eb:81:9b:d3:43:63:30:50:b5:28:e6:c8:a1:8a:1b:2e:53:
         31:1a:c8:d4:99:c7:e4:da:f3:d5:e9:35:26:d3:73:ff:0a:39:
         f7:53:b0:e0:ee:4f:d4:e3:04:14:9f:58:c7:a1:73:c3:b2:ca:
         72:fd:77:9d:e6:b9:c2:cc:8c:52:d4:ec:34:34:95:cd:05:81:
         28:87:bc:9b:dd:8d:63:ae:a1:2d:ca:eb:f8:e4:78:54:24:ad:
         64:50:8e:d5:5b:e4:7b:ad:91:cb:b0:9f:7a:61:e1:3a:2f:72:
         1e:ad:f7:eb:fc:d0:1a:39:40:b3:1f:3f:54:b5:be:78:66:78:
         4a:e9:27:c0:0b:07:21:89:49:6c:58:9c:13:fd:1e:cf:c5:1c:
         09:10:44:e1:65:fe:7b:2a:a1:37:33:70:7c:2e:15:00:d6:ff:
         05:4b:b5:16:10:92:42:18:80:1e:4b:df:ee:7c:cc:46:90:4d:
         5a:eb:c8:70:64:b1:14:70:3c:4c:57:30:df:83:b1:a5:94:f2:
         03:da:49:69:01:92:44:73:fa:23:f4:69:ab:9d:e0:fa:9b:87:
         f7:4b:0e:86:b4:38:fe:40:62:d9:d1:50:79:a7:c6:1b:10:87:
         47:bc:d6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:36 2025 by rpki-client