Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/7bf83979-5efc-392c-b18e-088e30365782.roa
File:                     7bf83979-5efc-392c-b18e-088e30365782.roa (raw, json)
Hash identifier:          xuwjf+cvXSm/bpxG9xHoJnWt1GpjraRz0AEpdDh/oLk=
Subject key identifier:   DE:5E:45:FA:BE:6F:F5:4C:45:87:0A:76:02:82:47:47:CE:03:B5:3A
Certificate issuer:       /CN=82d37175-c3df-41ac-ae2b-7c2c2572c7ab
Certificate serial:       010D0C9F4328584AA42B811894733456EC8C7380
Authority key identifier: 72:1C:8D:40:BB:71:B0:E8:A8:E1:2A:32:03:61:1A:03:58:38:30:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/7bf83979-5efc-392c-b18e-088e30365782.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        74.117.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:81:18:94:73:34:56:ec:8c:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82d37175-c3df-41ac-ae2b-7c2c2572c7ab
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=5100fd23-9e59-4477-be4c-d37f4ec60ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2a:88:17:a1:da:b2:f5:b8:55:f1:19:e6:aa:
                    00:8e:69:0b:7b:f2:88:84:ec:4a:01:a5:5b:b0:5c:
                    c0:0a:16:64:f4:3e:6e:63:20:e2:ad:20:82:c4:f2:
                    96:3f:9e:5a:0f:8a:43:b1:2a:04:fb:0e:f4:7b:ae:
                    56:02:ad:a7:68:a0:b5:cc:b1:3b:ac:27:33:73:90:
                    c8:40:29:c6:d1:a5:58:41:15:6d:86:46:1c:af:3c:
                    15:5d:27:a3:4e:00:a2:14:76:27:9c:16:d6:c6:69:
                    46:66:b7:e8:d7:e9:d2:ae:02:ed:72:df:d2:f5:12:
                    51:f7:c5:bc:c6:82:d0:a8:f7:b5:ff:a0:b9:a2:e9:
                    1e:d5:8c:2c:c0:1a:b1:ff:77:04:79:ff:32:03:26:
                    07:fb:e5:0f:9b:5d:02:53:b8:01:55:9a:15:49:d3:
                    83:64:e8:b6:c9:f9:89:b7:92:94:56:71:b0:8b:73:
                    57:58:f1:2b:48:cf:b3:07:f6:2f:7a:81:7a:e1:1e:
                    fc:30:33:10:9b:22:c7:d1:c2:b8:ca:ab:b4:b6:50:
                    7e:91:83:f0:4b:ac:c7:65:0b:76:0d:a2:f6:1a:6c:
                    a2:67:3a:92:db:c2:3a:45:c3:ee:52:01:0d:23:2a:
                    29:82:d0:7a:e6:ec:db:5b:71:1f:f5:1e:5a:30:1f:
                    c5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5E:45:FA:BE:6F:F5:4C:45:87:0A:76:02:82:47:47:CE:03:B5:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/7bf83979-5efc-392c-b18e-088e30365782.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.crl

            X509v3 Authority Key Identifier:
                keyid:72:1C:8D:40:BB:71:B0:E8:A8:E1:2A:32:03:61:1A:03:58:38:30:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f6:39:5b:0d:84:f3:36:e3:f1:4e:15:65:21:8a:2e:c1:6e:
         4c:32:82:23:df:a2:ec:f8:35:64:83:ea:02:de:ce:0e:ed:e2:
         ce:a3:fa:12:be:70:15:f5:8f:78:11:a9:18:2d:ab:2d:ec:d7:
         f3:58:3a:32:11:32:99:bb:61:6f:cf:1d:66:56:46:09:df:8c:
         42:a8:16:33:60:7d:69:43:e8:34:50:42:7b:33:46:3f:f4:b2:
         e1:36:4a:f1:82:5f:ce:57:46:ca:a7:54:63:a1:76:34:f5:bb:
         01:31:08:cb:8f:9f:9e:84:5d:84:a8:c4:f8:11:99:94:76:d8:
         e1:e1:eb:42:d6:00:25:45:86:ee:ca:9e:a1:b7:28:1e:be:a6:
         2d:73:fa:81:a6:82:ae:7d:cb:2d:ca:db:61:3b:51:29:1d:47:
         56:bc:23:99:00:c1:a6:a8:71:e6:b5:13:fa:2f:a3:fb:f8:1c:
         bd:39:0e:3c:7a:ef:33:e6:ed:be:a6:a0:dc:ca:f3:57:64:88:
         f3:72:f2:14:6e:c4:1f:15:e5:ad:e9:8d:d9:74:20:9d:ba:96:
         64:df:1f:37:0a:c3:79:6a:4d:35:a3:a9:74:b0:9d:e9:02:8e:
         9b:e8:2f:5a:a9:60:00:a3:0d:91:4f:57:f3:e0:02:62:12:68:
         4d:17:d2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:03:10 2025 by rpki-client