Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99a9ace6-201c-3fce-bf1a-a59a358eab9b.roa
File:                     99a9ace6-201c-3fce-bf1a-a59a358eab9b.roa (raw, json)
Hash identifier:          TeefZFup+DxEcYJJKkh+yvcQJU6J6xH/kn5s1KDYyUQ=
Subject key identifier:   36:8A:83:A0:96:4D:7D:A7:57:3A:29:61:72:04:6F:FE:7D:90:C2:7B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F180068D5C9BBE9245B8D900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99a9ace6-201c-3fce-bf1a-a59a358eab9b.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        74.107.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:06:8d:5c:9b:be:92:45:b8:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=073c539e-8ce5-4ee3-95d5-7bc62420a95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:82:2a:cf:db:b6:26:94:83:a7:ad:1e:ec:5c:
                    f4:53:dd:f3:ad:e2:40:f9:62:03:9c:48:b3:a2:58:
                    d0:66:66:02:5c:d4:8c:b2:46:dd:0c:13:ca:f3:58:
                    5c:95:78:a5:95:7a:60:73:e3:88:5b:86:6e:c6:43:
                    06:dc:0c:73:13:7d:44:4d:55:66:d5:70:4d:2f:3e:
                    48:72:f9:80:8c:1e:ce:23:31:34:3c:ac:ee:e0:63:
                    07:c2:35:32:0c:e4:fb:25:71:08:bb:93:b4:f2:dc:
                    9c:29:f0:3a:f3:eb:42:fb:06:6b:cd:9b:b4:84:c5:
                    cb:34:f3:41:96:35:6d:0c:bc:3f:ab:56:0c:76:61:
                    c8:83:f1:f7:0f:d5:bc:b0:c9:27:42:b0:43:f3:28:
                    ea:93:55:99:24:02:1d:61:a9:d2:38:2f:dd:87:9f:
                    ed:1c:11:1c:14:25:34:c8:c9:89:17:9b:01:5c:11:
                    88:19:26:15:f2:15:76:0a:4a:31:56:e2:b6:46:c1:
                    f1:be:55:a3:d3:c2:fe:99:74:3a:9f:81:1b:af:89:
                    60:34:35:c3:8e:b6:69:52:63:e5:65:8c:1f:f7:de:
                    aa:9b:18:45:06:18:c5:5f:a8:18:12:cc:7c:8f:64:
                    e6:e8:02:a6:17:b6:f6:ba:df:fe:f6:8d:5d:af:84:
                    79:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8A:83:A0:96:4D:7D:A7:57:3A:29:61:72:04:6F:FE:7D:90:C2:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99a9ace6-201c-3fce-bf1a-a59a358eab9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.107.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:85:9e:97:ca:86:dc:89:f9:45:83:33:ed:0a:c9:4a:d2:9a:
         e7:d0:a0:b1:bb:9f:5d:32:1e:03:67:d9:b9:26:61:75:5f:12:
         e9:75:60:90:67:e5:8d:ad:23:18:5b:bc:14:be:0b:ad:e3:12:
         21:4e:07:83:1f:07:fe:30:f1:ec:5d:12:b9:4d:91:16:f3:d3:
         b8:1a:d6:51:c5:ec:54:0d:8c:ca:fe:e6:6f:7d:03:74:81:ec:
         ab:dc:98:b3:e5:1f:83:fe:49:ac:0b:4e:1f:cf:e7:fa:b0:20:
         a9:39:84:f1:50:44:17:75:41:20:83:9d:ac:04:94:6e:a5:67:
         14:cf:1d:28:51:19:97:12:25:f1:35:0e:66:93:72:c6:90:25:
         67:70:b0:ee:a4:eb:4c:7a:ad:ca:28:e0:e5:eb:62:50:73:b7:
         1e:f4:c1:0f:a4:7f:81:82:ac:79:02:34:f1:f4:97:46:62:93:
         d2:ff:0a:72:59:7b:60:31:7f:f0:48:c3:84:4e:83:46:d2:1a:
         15:dc:86:da:fc:9d:28:35:ec:0f:b5:bc:04:d8:a3:31:40:ad:
         69:6f:12:28:58:ee:39:1f:8c:56:15:d6:32:fa:67:dd:a3:f0:
         74:fa:30:45:f6:f5:77:12:61:d4:33:5e:fe:9d:3b:d4:87:8f:
         80:3f:5f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:23:58 2025 by rpki-client