Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/160b632f-22be-3db4-9aa4-71302437048d.roa
File:                     160b632f-22be-3db4-9aa4-71302437048d.roa (raw, json)
Hash identifier:          k0i0XSluSuvB2Ut7Qyvk/vjkZSb863XuDJbPsMEVgAQ=
Subject key identifier:   90:34:B2:BA:8B:E7:17:63:19:23:C9:98:BC:B1:22:3D:FC:9F:41:AC
Certificate issuer:       /CN=677759b4-a247-47ea-badb-bb809bc80a31
Certificate serial:       010D0C9F4328584AB38629C84657E398B39CDEE0
Authority key identifier: 49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/160b632f-22be-3db4-9aa4-71302437048d.roa
Signing time:             Thu 31 Jul 2025 13:00:39 +0000
ROA not before:           Thu 31 Jul 2025 13:00:39 +0000
ROA not after:            Wed 29 Oct 2025 13:00:39 +0000
asID:                     14955
IP address blocks:        74.221.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:86:29:c8:46:57:e3:98:b3:9c:de:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677759b4-a247-47ea-badb-bb809bc80a31
        Validity
            Not Before: Jul 31 13:00:39 2025 GMT
            Not After : Oct 29 13:00:39 2025 GMT
        Subject: CN=894bd205-b3df-4854-8a38-6b23b5394776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f6:0f:6b:eb:ee:c9:52:53:9d:98:78:6b:74:
                    02:c7:12:d1:32:03:ae:b7:5f:64:04:bf:ba:99:1c:
                    16:0b:43:21:1c:54:9d:df:e5:79:37:f1:17:85:5d:
                    64:95:7b:c1:94:62:f5:a7:1e:52:f9:67:ac:cc:a0:
                    9e:78:dd:97:a2:f8:4a:cf:0c:66:8f:18:cb:9c:73:
                    2e:e4:33:13:52:da:d7:2b:81:b5:4b:db:ff:c3:a7:
                    48:e2:47:05:a4:ed:3c:ad:ae:ff:4f:4e:da:17:6e:
                    0d:b2:19:80:6b:c5:ef:00:80:00:b1:87:3b:45:a1:
                    ec:5a:ce:2e:31:74:73:49:cb:ad:db:a5:dd:ec:e4:
                    06:9d:3e:6c:92:99:8e:6d:0d:58:e8:4d:e7:9a:2b:
                    fe:47:e9:55:fa:52:a1:54:fa:c9:3a:87:35:00:36:
                    20:64:df:6f:eb:b6:b2:9b:33:c9:6c:98:9e:b4:0b:
                    10:7a:f7:c2:e0:08:2e:a2:34:06:ff:d8:3c:f5:d6:
                    08:94:92:7b:09:02:80:af:5c:02:09:8a:4f:16:a5:
                    43:a8:12:a3:e5:24:94:0b:e1:f1:dd:29:43:2b:d9:
                    32:9d:12:c0:a6:6c:ea:c2:91:fa:5f:7e:52:5f:e4:
                    bc:1e:7f:b6:a5:6d:9d:89:0b:42:54:ed:99:c1:48:
                    24:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:34:B2:BA:8B:E7:17:63:19:23:C9:98:BC:B1:22:3D:FC:9F:41:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/160b632f-22be-3db4-9aa4-71302437048d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl

            X509v3 Authority Key Identifier:
                keyid:49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:92:fc:8b:e9:5f:1c:14:cf:9a:13:dd:82:df:ae:58:87:8b:
         5b:26:c2:65:d0:48:e9:dd:0c:18:8b:a9:c9:63:be:a5:9a:fe:
         34:9d:ed:20:80:5c:df:7d:36:43:46:ec:73:ae:91:2e:38:5a:
         ef:05:64:2b:31:ee:c5:10:31:1c:d9:d0:e5:eb:ab:41:25:07:
         8b:85:34:67:84:ca:ad:17:9c:80:03:f1:31:fe:05:32:30:02:
         7d:2e:75:1a:3f:42:ca:50:cc:61:f7:43:2d:e1:52:c7:cf:82:
         d8:08:d7:06:b2:f8:83:dc:a6:be:57:27:27:ca:28:47:64:9e:
         6a:bb:3d:17:7f:a8:77:41:42:79:bf:b5:36:1b:a3:8b:c0:59:
         91:71:c0:ce:32:9a:ee:25:c4:37:8b:61:5d:d0:77:be:7d:b4:
         28:53:6c:f9:84:cf:29:db:6a:6b:44:59:6f:c3:02:52:4b:c7:
         29:5c:ad:f0:65:94:53:67:32:66:7e:9b:22:5c:61:97:20:5c:
         45:34:b0:35:f7:36:14:b9:16:a8:e4:74:c3:99:83:25:72:ad:
         77:f1:75:7b:4b:a8:91:c8:24:09:f9:c9:35:f9:8c:d2:ef:fe:
         df:26:0b:6a:32:c2:60:dc:29:e2:fc:f8:00:85:ed:64:34:20:
         24:e5:81:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:58:06 2025 by rpki-client