Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/411d8101-8fcd-3b25-aaae-7c8cc6e0c117.roa
File:                     411d8101-8fcd-3b25-aaae-7c8cc6e0c117.roa (raw, json)
Hash identifier:          KfTaxfK6klpOSg7AtHq5lWI4hmHwUJgARx4GmYUWIxo=
Subject key identifier:   A5:98:36:82:4E:0C:AF:1E:86:C6:27:96:37:D0:D3:5E:70:DE:3A:59
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584A936B5EC21FD31EF0623D9800
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/411d8101-8fcd-3b25-aaae-7c8cc6e0c117.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     7843
IP address blocks:        67.214.178.0/24 maxlen: 24
                          74.80.157.0/24 maxlen: 24
                          74.80.165.0/24 maxlen: 24
                          74.80.174.0/24 maxlen: 24
                          74.80.177.0/24 maxlen: 24
                          74.80.178.0/24 maxlen: 24
                          206.212.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:5e:c2:1f:d3:1e:f0:62:3d:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=046b0964-e720-4346-bfdf-fbbbebb043b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:a1:58:64:18:da:e6:1e:2b:14:eb:4b:53:
                    57:eb:cd:8b:a7:39:75:57:7e:49:43:ba:38:d3:2e:
                    41:cf:84:8a:9f:de:49:7a:cf:27:9e:f3:bb:c4:1b:
                    33:36:e8:17:9d:f5:04:fc:cb:2e:9b:3e:2d:03:d3:
                    d4:b1:3d:e3:d1:60:fc:b6:54:90:3c:3f:c5:7a:9f:
                    a6:70:98:18:a3:e6:da:2c:7a:42:1c:81:ea:74:05:
                    2f:60:8d:a1:7a:67:6f:42:71:4c:47:e2:35:d6:46:
                    f4:05:87:73:8d:af:04:9e:11:53:a2:71:d4:04:f4:
                    b0:a6:af:b6:16:cb:5d:89:a9:fc:80:e7:74:c2:22:
                    54:cc:fc:77:3d:06:df:fb:e3:d4:26:d7:84:1b:e0:
                    fb:59:3f:1c:e1:b9:62:64:fa:97:9d:bc:fc:12:dc:
                    8f:31:8c:36:7e:e8:0e:b7:ee:6c:1c:bf:f0:43:ae:
                    23:54:eb:19:f5:c6:80:3b:57:49:f6:46:1f:20:aa:
                    51:5f:d1:3d:01:7a:9a:f0:59:b9:6c:ae:e6:4e:d9:
                    0c:d9:ad:6c:fb:b3:cc:02:84:69:07:73:18:e8:d0:
                    cb:42:b6:af:41:3b:8a:9d:3e:e6:43:56:16:0e:c8:
                    1a:61:aa:43:c8:9c:89:e3:40:6c:51:47:63:8e:d4:
                    cf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:98:36:82:4E:0C:AF:1E:86:C6:27:96:37:D0:D3:5E:70:DE:3A:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/411d8101-8fcd-3b25-aaae-7c8cc6e0c117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.178.0/24
                  74.80.157.0/24
                  74.80.165.0/24
                  74.80.174.0/24
                  74.80.177.0-74.80.178.255
                  206.212.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a5:b8:11:ca:74:b2:4b:50:28:68:9f:b4:8c:8d:3a:fe:bd:
         45:d5:ba:5f:cd:ec:71:bc:98:8e:c0:b1:89:8e:b1:b4:13:ab:
         6f:64:3f:75:3f:e2:92:59:76:e6:03:58:a5:2d:aa:42:bf:29:
         c2:0b:9e:5f:aa:8d:09:a5:c6:6e:ec:01:5f:8c:35:98:da:3a:
         ec:c9:52:89:0f:f3:58:6e:95:8a:61:b0:06:dc:c9:28:f7:a2:
         a4:9c:48:77:5f:60:d3:78:86:07:2d:db:42:da:4a:54:66:eb:
         7b:ce:1f:92:dc:9c:b6:31:b0:f1:d6:90:ec:49:ba:55:65:60:
         01:b6:11:a5:9a:8b:bf:a4:1d:05:5f:0b:0c:d1:45:72:11:a6:
         db:8a:f1:62:06:e3:76:bd:fd:d6:16:75:b9:a0:98:88:e0:38:
         dd:20:5d:7d:73:6e:20:df:2e:ae:62:d1:8f:3a:ad:7e:08:0f:
         5d:e3:85:16:40:74:be:ce:eb:d9:15:a9:0b:40:f5:a9:c1:d1:
         8c:c2:23:96:a1:bb:54:e5:2a:23:40:3b:80:e5:cb:65:17:2a:
         3e:f4:35:3b:2d:1d:56:f0:da:08:af:00:28:d0:80:4d:ab:71:
         1f:d6:60:ef:1d:6c:b6:c7:be:24:7d:38:4a:66:ae:f4:b4:59:
         17:9c:96:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:15 2025 by rpki-client