Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab381ecf-9f21-39b7-a9ee-6309e067aa96.roa
File:                     ab381ecf-9f21-39b7-a9ee-6309e067aa96.roa (raw, json)
Hash identifier:          ZKPMyUDkNmcm/hvDraCPa4FjT9XygsshMec2pS4c/4Q=
Subject key identifier:   ED:12:B6:3F:2B:3F:C2:31:71:15:88:16:92:05:59:4E:80:5E:D2:D6
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A86DBBB59455E5F613101F400
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab381ecf-9f21-39b7-a9ee-6309e067aa96.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        74.125.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:bb:59:45:5e:5f:61:31:01:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=665f3364-6679-4f0c-aaae-0999b4cb7a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e2:99:a9:86:66:a3:ec:64:27:cf:f5:e6:d2:
                    93:f4:c3:3b:37:67:39:a2:2b:94:3d:94:bd:9e:72:
                    03:49:0e:5d:73:99:4e:3b:08:14:60:c6:e0:67:bb:
                    15:0b:7c:3b:5c:b1:77:fd:82:d7:cb:82:a8:67:74:
                    9f:19:4e:11:57:cb:4f:90:a2:41:1c:fb:33:a8:20:
                    a9:78:37:9e:2e:6e:88:b4:c1:dc:87:03:c9:ab:3f:
                    58:98:72:90:dd:44:47:fe:0e:f3:38:d7:ed:35:43:
                    c0:58:1d:b2:79:8f:f8:72:a2:2e:36:ef:1c:6d:c1:
                    6f:cb:82:18:9d:64:a2:96:8d:60:ac:2b:9e:24:78:
                    42:d5:cf:4e:fc:1f:b2:87:68:e0:18:d3:f7:01:83:
                    ae:62:b2:82:2e:cd:30:55:2d:4d:0c:d6:12:82:99:
                    9c:a6:72:f4:32:91:d2:b3:41:a3:ef:7c:c2:fb:1b:
                    22:34:f2:1d:a4:73:14:3a:f0:dc:11:bd:71:e9:cb:
                    e7:95:d1:d7:8a:3e:2f:6f:e7:f0:e2:19:4a:00:a5:
                    53:fd:35:c9:16:4b:4b:e3:79:68:de:9b:f0:c4:97:
                    e3:84:68:b2:7f:9e:ae:9e:7b:ec:fc:31:05:40:34:
                    f7:a4:24:f1:5b:4c:b4:df:83:a4:53:d5:f9:93:3f:
                    be:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:12:B6:3F:2B:3F:C2:31:71:15:88:16:92:05:59:4E:80:5E:D2:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab381ecf-9f21-39b7-a9ee-6309e067aa96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.125.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:05:80:93:26:59:ee:fe:fa:ab:1b:34:d8:81:ee:89:de:5c:
         14:11:aa:fb:fb:2f:39:19:4e:d8:3d:e3:8b:ec:d2:32:07:e7:
         72:12:aa:09:4f:51:66:5d:bf:36:9d:b9:fd:3f:e6:ce:d6:a9:
         b2:da:29:ba:3e:e1:76:35:6a:36:f9:17:46:f9:2e:59:6b:3d:
         03:d6:59:b2:1c:d5:10:f3:c6:75:f8:0c:06:a5:a2:7b:e8:7d:
         8d:e3:8f:3e:0d:88:67:1a:47:61:cf:bf:38:30:e2:d9:82:6f:
         71:a8:89:e3:0c:7b:1c:f8:d1:61:8c:38:8f:cb:5b:54:44:21:
         91:0e:f4:c2:c0:29:c5:ba:2d:f7:c3:8d:93:23:0f:b1:1b:3e:
         28:7e:08:9e:0e:eb:10:5f:90:fb:d9:9b:2a:f8:b7:3b:e7:c0:
         9a:01:25:32:22:3e:6d:99:87:96:20:9e:89:e1:85:01:25:b1:
         0f:04:62:f1:72:c2:87:1d:ad:5a:94:04:df:50:f3:d6:24:9b:
         1d:9d:5b:a7:a5:ba:0b:ce:89:88:13:15:65:9b:df:ad:e5:ad:
         3d:bc:aa:3d:43:6b:ee:1a:56:92:ab:14:0d:df:f7:cf:b6:6b:
         1f:00:9d:16:cf:30:3c:71:19:04:db:6a:dc:4b:3b:13:56:2b:
         a4:39:66:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:07:23 2025 by rpki-client