Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/6d7bc450-e52f-3fd5-996b-04b20aceb511.roa
File:                     6d7bc450-e52f-3fd5-996b-04b20aceb511.roa (raw, json)
Hash identifier:          wy0ycYSxGnq7qM4gq6lAT1deqget8FI6pmP5hDgLrwo=
Subject key identifier:   B7:06:83:6A:63:10:26:07:E9:23:14:B9:ED:0F:02:AF:8D:90:62:6E
Certificate issuer:       /CN=82d37175-c3df-41ac-ae2b-7c2c2572c7ab
Certificate serial:       010D0C9F4328584B970CEA3D2B2378627C258A00
Authority key identifier: 72:1C:8D:40:BB:71:B0:E8:A8:E1:2A:32:03:61:1A:03:58:38:30:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/6d7bc450-e52f-3fd5-996b-04b20aceb511.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        74.117.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:ea:3d:2b:23:78:62:7c:25:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82d37175-c3df-41ac-ae2b-7c2c2572c7ab
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=821c2743-e0c3-4463-971a-60c66c13920f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:af:91:78:71:78:d4:69:4c:93:24:52:f7:96:
                    33:5d:27:43:d9:22:85:ff:5d:a0:f1:ec:f7:dd:6f:
                    73:2e:69:c4:07:c5:0c:49:5a:ea:15:02:94:de:63:
                    d0:0a:bd:24:be:8a:85:8c:34:1d:78:7e:1f:a8:ed:
                    65:47:59:26:b7:df:78:8c:a2:71:71:fe:b6:88:bc:
                    f8:5b:5d:93:58:d7:a9:ec:60:15:53:76:17:a1:56:
                    32:91:07:2f:72:cb:43:fa:3e:a6:d5:89:a4:54:71:
                    ae:8b:13:5d:ab:f3:25:c9:61:29:38:5c:2e:1a:53:
                    05:7f:4f:07:84:cf:c9:b3:c9:ba:16:24:69:ae:e6:
                    e9:d5:c1:d2:6c:af:55:d7:72:6e:aa:e0:94:8d:fe:
                    e5:19:e8:77:df:40:be:42:ad:1d:90:65:2a:f4:a1:
                    5b:00:b7:79:58:30:f0:15:1e:ff:56:bb:bf:b1:8e:
                    47:aa:17:bc:7f:e8:c6:9c:e6:f7:f2:e9:70:37:59:
                    d0:f7:65:49:55:cb:a5:55:36:d8:d9:3a:f9:87:cf:
                    5d:8b:fd:72:1a:cf:9d:b5:3e:f8:45:af:49:00:1e:
                    e4:8d:7c:61:2d:e5:93:02:5b:72:48:2d:65:f5:6f:
                    b9:59:d8:09:4f:80:92:04:76:c7:73:36:f8:e7:7f:
                    a1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:06:83:6A:63:10:26:07:E9:23:14:B9:ED:0F:02:AF:8D:90:62:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/6d7bc450-e52f-3fd5-996b-04b20aceb511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.crl

            X509v3 Authority Key Identifier:
                keyid:72:1C:8D:40:BB:71:B0:E8:A8:E1:2A:32:03:61:1A:03:58:38:30:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:2b:3a:25:14:b7:d6:1a:8a:9c:9d:d3:24:2f:c1:0b:73:de:
         be:58:39:d6:b6:f3:0b:51:02:c7:4a:44:71:2b:aa:ee:2d:a2:
         04:84:bb:96:45:f3:74:d5:a5:8c:7a:e3:21:12:8a:6e:b3:ac:
         89:b1:2a:c5:1f:ca:f8:65:00:19:04:e4:08:ac:bf:84:04:cd:
         f4:13:31:c9:99:04:0c:bb:3a:a3:99:0d:2b:24:0a:0d:ad:aa:
         02:9a:89:1d:8a:4a:5d:e2:85:aa:e7:77:36:4d:68:fd:38:3e:
         29:c1:f5:47:b9:54:42:d8:74:2c:8e:9e:fb:12:a4:bf:22:bb:
         e1:a2:99:74:d6:a5:19:5c:b2:2c:8b:f3:49:00:8c:57:1a:cb:
         c7:b4:27:5d:a0:c4:e3:4a:c1:a8:70:c3:c8:5d:e3:c6:15:1f:
         de:18:5c:fa:70:f4:73:c1:87:fb:ef:47:2e:fc:b1:0a:3f:95:
         84:a0:f0:3f:8c:6b:3d:b6:82:0a:28:36:b7:03:9d:d7:1f:83:
         fa:3d:49:75:3d:de:2c:ee:98:d5:a1:e3:59:e5:6c:02:b4:cd:
         69:0d:6d:b9:d5:70:21:cb:9c:8d:46:b1:7d:19:08:9e:b2:c8:
         1b:b8:0c:b8:19:83:23:d1:86:29:5f:e6:04:8b:83:e0:c8:b0:
         95:fa:f2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:02:50 2025 by rpki-client