Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/c55f0a63-8478-3587-ac73-f42098ef3be3.roa
File:                     c55f0a63-8478-3587-ac73-f42098ef3be3.roa (raw, json)
Hash identifier:          a6eAWJbeff9Itbb8VQCrQXeAfsWAG30PbWCbztgVmhs=
Subject key identifier:   08:9D:E8:73:73:20:32:56:C6:7A:EC:F3:4D:61:20:E1:98:71:66:BA
Certificate issuer:       /CN=727f5e3c-17f5-4284-ae37-06cc8cada272
Certificate serial:       010D0C9F4328584B9B3CE510E616EBE17C643600
Authority key identifier: 6F:30:E6:02:4E:29:19:DC:BE:E0:FD:E7:24:9B:67:22:7B:80:A5:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/c55f0a63-8478-3587-ac73-f42098ef3be3.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     7018
IP address blocks:        74.112.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/727f5e3c-17f5-4284-ae37-06cc8cada272.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/727f5e3c-17f5-4284-ae37-06cc8cada272.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:e5:10:e6:16:eb:e1:7c:64:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727f5e3c-17f5-4284-ae37-06cc8cada272
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=cdc659bf-9609-42cb-bcae-0e9b7b462bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:40:7c:1d:5b:0b:d9:f3:48:da:ec:c0:f5:af:
                    9d:ad:ee:78:73:62:1b:3f:71:43:a9:b7:01:b0:dc:
                    00:35:70:06:84:28:84:0c:19:ab:aa:00:ea:16:96:
                    d7:1e:11:ad:f5:c7:de:7a:76:fa:34:c4:46:24:d0:
                    38:21:8c:62:70:ed:86:5f:e5:b4:0e:8f:33:6e:b4:
                    8b:50:ef:6e:f0:4c:9b:d8:2f:41:f4:5b:88:87:1f:
                    4b:67:c9:ce:8a:1c:a9:c3:31:c8:91:87:d4:b4:48:
                    35:ee:ca:d6:4e:70:39:8e:57:7f:bb:2e:e0:73:ed:
                    34:ee:4c:66:66:31:84:fa:4e:8d:b2:f4:49:8e:d1:
                    00:85:ee:65:1f:d7:f3:40:fb:14:16:4e:dc:cb:f4:
                    28:6d:25:cd:59:7c:46:c9:28:c0:a3:ed:cd:80:82:
                    7d:99:01:57:4e:72:9b:7f:4e:34:7f:59:76:cc:b7:
                    35:fa:dd:85:37:03:4d:2e:a2:93:e9:66:0c:a2:8c:
                    7b:b7:fb:4f:f9:b9:14:31:cb:e1:46:7a:b6:b6:9f:
                    33:4d:56:7a:62:e5:22:cf:18:f2:6c:9c:33:af:66:
                    d9:fb:f0:22:a0:5b:d3:2f:a1:f3:b6:56:74:c9:9c:
                    51:97:9b:01:72:7c:93:68:14:63:b6:d9:4f:b4:77:
                    cd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9D:E8:73:73:20:32:56:C6:7A:EC:F3:4D:61:20:E1:98:71:66:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/c55f0a63-8478-3587-ac73-f42098ef3be3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272/727f5e3c-17f5-4284-ae37-06cc8cada272.crl

            X509v3 Authority Key Identifier:
                keyid:6F:30:E6:02:4E:29:19:DC:BE:E0:FD:E7:24:9B:67:22:7B:80:A5:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/727f5e3c-17f5-4284-ae37-06cc8cada272.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:dd:c3:bd:b6:e3:bb:e3:fb:39:6b:de:fb:b1:5c:a7:15:5b:
         93:39:f8:68:0c:0c:e3:20:c7:0a:5c:73:4c:8e:a8:30:c2:30:
         d7:93:3d:f1:5f:2e:39:35:0a:72:6e:2e:d3:07:0c:dd:f9:0b:
         dd:10:6e:01:f4:96:be:8e:b6:b4:ba:30:df:6f:fc:c9:3e:20:
         4e:01:dd:fc:40:f9:9b:de:c3:38:dc:c7:ef:ec:87:45:48:c7:
         1f:e1:c8:53:4e:0d:2d:1c:7d:bd:08:b0:c6:7f:d5:a5:58:af:
         52:22:2d:10:b6:24:f3:f3:7e:4d:e2:ee:36:d9:2e:c6:b9:e5:
         9a:f7:f5:8e:01:f7:11:5b:a7:98:95:51:a6:0e:32:31:04:65:
         58:07:80:2f:b7:76:7a:7c:d0:df:85:8f:95:b4:ae:e5:0c:2f:
         58:8a:3e:ba:f3:58:6b:43:e6:76:a6:97:18:55:11:68:50:2a:
         97:a4:aa:56:f2:ea:7b:19:87:4f:ae:55:12:8b:31:b1:db:04:
         0a:cc:4c:14:50:3f:aa:b2:1a:12:20:55:f2:6e:3f:89:7f:1a:
         d4:6a:e0:99:70:f2:a1:75:e4:12:bb:43:b5:82:fd:9f:21:ec:
         84:a2:ac:6b:b0:f0:e3:c8:09:fd:b7:83:8b:f4:8f:37:4c:7a:
         4f:6a:33:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:46:18 2025 by rpki-client