Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4/3a4cbd7c-87a4-3946-9bbd-2abb2a875f93.roa
File:                     3a4cbd7c-87a4-3946-9bbd-2abb2a875f93.roa (raw, json)
Hash identifier:          4GO1FVT4NIyXBa6JW2saV3fnCbKoh5sbgqlqawbduvU=
Subject key identifier:   AE:6F:FA:73:17:12:46:1B:04:BD:75:E9:89:BA:D4:B1:C3:64:0A:73
Certificate issuer:       /CN=8adbc307-9e15-47ff-abb8-570dd88539f4
Certificate serial:       010D0C9F4328584B9E07BB36C6B951A6641B2780
Authority key identifier: 54:CC:85:65:6D:D8:16:EF:C0:01:CC:85:73:03:3D:60:B6:90:FD:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4/3a4cbd7c-87a4-3946-9bbd-2abb2a875f93.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     397294
IP address blocks:        74.80.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4/8adbc307-9e15-47ff-abb8-570dd88539f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4/8adbc307-9e15-47ff-abb8-570dd88539f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:bb:36:c6:b9:51:a6:64:1b:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8adbc307-9e15-47ff-abb8-570dd88539f4
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=e952ab9e-2e9d-4ee9-9cf8-5b8e791490a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:da:63:13:00:e1:19:dd:41:36:38:a8:73:56:
                    1a:eb:03:67:90:3a:b8:8f:1a:7f:1c:fd:c2:37:08:
                    c0:c1:75:4d:8a:d1:69:97:24:23:84:2b:12:23:a0:
                    a4:2c:4f:3c:d2:34:e5:84:af:ed:9c:7b:92:77:b7:
                    c9:ea:af:a3:47:29:93:3f:e9:4c:fe:e3:6b:95:64:
                    10:14:84:85:31:34:22:01:cc:83:81:73:b0:17:37:
                    cc:94:f1:24:9c:1f:28:50:10:03:1a:ac:55:e2:54:
                    d7:75:31:2e:f7:ad:40:5a:60:0a:94:c1:cd:1f:9f:
                    1c:49:a7:c2:6a:20:0d:d2:f1:b9:a3:1b:8b:3f:32:
                    e5:18:cd:79:63:7f:b5:60:67:ae:d6:e1:3c:f0:cc:
                    3e:e0:c8:bc:b4:4c:ae:86:87:d2:48:21:ec:2e:00:
                    25:e3:f3:7c:6c:71:7b:66:9f:37:88:69:56:df:c3:
                    73:41:1e:44:fc:ba:2d:66:56:e9:75:3c:7f:90:44:
                    cc:e7:5e:41:1d:2f:24:11:1f:67:55:48:29:e1:ec:
                    dd:9a:db:ed:8f:6f:20:f7:04:43:53:1f:b2:3f:e3:
                    af:de:58:d2:95:66:4c:f0:a5:d0:c6:46:33:fd:20:
                    a9:a4:24:26:2a:06:2f:24:36:9f:93:c3:1d:48:6b:
                    d3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6F:FA:73:17:12:46:1B:04:BD:75:E9:89:BA:D4:B1:C3:64:0A:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4/3a4cbd7c-87a4-3946-9bbd-2abb2a875f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4/8adbc307-9e15-47ff-abb8-570dd88539f4.crl

            X509v3 Authority Key Identifier:
                keyid:54:CC:85:65:6D:D8:16:EF:C0:01:CC:85:73:03:3D:60:B6:90:FD:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ec:c2:69:eb:1a:66:ec:07:b5:07:8d:04:12:fc:c3:d2:02:
         20:ca:d9:a4:39:4f:76:73:98:e3:6b:14:d4:64:78:23:7c:3a:
         62:e4:00:99:a0:47:d9:d0:e0:d5:bd:f6:8e:28:43:bf:46:ad:
         c2:80:da:7e:ec:d7:db:85:58:28:eb:94:d7:44:d9:9b:69:a8:
         be:f7:c6:ee:4d:ec:65:66:89:1a:5e:ce:c8:86:fb:b4:09:19:
         e2:9e:7c:0a:de:56:50:b8:33:11:2b:63:23:e4:3a:cc:6b:2a:
         f5:53:ac:6a:5a:59:da:21:c6:c3:da:af:ab:a6:fa:02:9a:a8:
         bd:cc:ad:39:49:ec:c4:3f:23:c1:47:bf:99:75:a2:75:a4:00:
         f7:c3:b2:9d:0b:61:79:14:07:9d:96:32:7e:a0:9b:a2:2c:e5:
         60:2f:01:7c:07:63:4e:30:ba:e5:b3:cb:27:14:f1:95:47:c1:
         51:cd:0f:c1:d4:ee:88:d9:22:c6:ea:95:22:f7:f2:f2:af:e1:
         a8:be:0d:c4:24:e0:3f:90:df:eb:4e:d3:66:fd:88:e7:7d:a9:
         2d:b0:27:6e:8d:e6:0d:54:21:2e:62:8d:0c:69:7b:6c:b2:98:
         98:ed:36:b7:2b:a6:68:36:0b:60:53:d4:fc:d3:90:b6:e7:10:
         f1:68:49:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:43:03 2025 by rpki-client