Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/7bf83979-5efc-392c-b18e-088e30365782.roa
File:                     7bf83979-5efc-392c-b18e-088e30365782.roa (raw, json)
Hash identifier:          7JCqC81cVqTViYbFqtaouaI1FkCsx7rak1lKgDkEW7U=
Subject key identifier:   7B:0C:5E:25:77:A8:35:3F:FE:01:4D:FD:9D:22:22:BE:22:22:FA:97
Certificate issuer:       /CN=82d37175-c3df-41ac-ae2b-7c2c2572c7ab
Certificate serial:       010D0C9F43285849C4D4BE3AD3BDBD8F1D8F16E0
Authority key identifier: 72:1C:8D:40:BB:71:B0:E8:A8:E1:2A:32:03:61:1A:03:58:38:30:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/7bf83979-5efc-392c-b18e-088e30365782.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     14618
IP address blocks:        74.117.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:be:3a:d3:bd:bd:8f:1d:8f:16:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82d37175-c3df-41ac-ae2b-7c2c2572c7ab
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=7b168d01-aef4-4b83-99a2-62c59bedf745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:7e:c8:81:d8:5e:61:9d:95:68:e8:22:8b:
                    c0:92:2c:ec:04:64:25:c9:e7:69:fc:b8:3b:de:07:
                    75:d2:24:a1:06:72:4b:93:0d:fc:a6:64:26:dc:e6:
                    14:96:28:ec:d7:e7:25:23:a1:e6:04:7e:15:e4:77:
                    46:ef:a3:b8:d2:ee:44:06:9c:03:8c:26:9f:8a:e8:
                    00:e3:d6:aa:e2:fe:0c:f2:41:b7:7f:c7:b3:4f:89:
                    ea:5f:34:44:0a:1a:a1:e4:8a:5a:16:b6:2f:f4:14:
                    67:a0:50:7b:dd:72:1b:44:9b:1b:06:47:cb:91:80:
                    3b:90:aa:97:97:98:2e:14:57:a2:2b:89:ab:51:75:
                    1f:bf:1d:8f:07:c4:f9:f9:13:3f:b4:a7:42:0b:77:
                    0f:21:ed:35:99:de:f8:22:4b:2c:11:32:83:d6:67:
                    f5:88:8a:cc:db:b0:c4:21:cb:d3:aa:fe:e4:52:97:
                    12:a0:a2:8a:bf:21:e3:6c:35:ca:e9:e3:3a:8b:46:
                    b2:51:65:70:d4:2b:4c:c4:ee:3d:01:3e:de:9d:e0:
                    03:f0:60:33:80:bf:91:58:11:6c:dd:61:d7:81:12:
                    8d:93:99:0e:25:34:fa:5f:61:12:9f:87:31:09:09:
                    ae:86:9a:e0:25:0d:53:8e:5e:ef:66:30:b6:cd:04:
                    7f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0C:5E:25:77:A8:35:3F:FE:01:4D:FD:9D:22:22:BE:22:22:FA:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/7bf83979-5efc-392c-b18e-088e30365782.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.crl

            X509v3 Authority Key Identifier:
                keyid:72:1C:8D:40:BB:71:B0:E8:A8:E1:2A:32:03:61:1A:03:58:38:30:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/82d37175-c3df-41ac-ae2b-7c2c2572c7ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:62:39:7d:d2:5b:a9:65:80:a6:bd:a6:af:a2:3c:20:f3:1f:
         d6:a6:60:bc:9e:4e:1c:fc:52:46:76:95:86:f3:4d:55:f2:1f:
         c4:7e:51:86:ce:30:15:81:ea:7c:4e:0a:77:5e:b7:c3:d5:f6:
         31:87:33:c5:f1:42:41:34:75:f7:f4:05:3f:0c:c6:2c:69:80:
         4c:6e:6c:fd:a5:72:88:aa:82:af:55:0d:4d:fa:70:c7:14:b8:
         4b:cc:10:89:68:98:5f:c2:2f:72:80:aa:64:7e:25:25:e3:bf:
         94:f7:8f:ef:44:49:25:6e:54:41:44:cd:a4:f1:23:45:3f:fc:
         b1:91:f0:36:9d:99:89:02:13:d6:06:32:f5:92:30:90:ff:4d:
         a5:6b:2c:d1:a6:d4:33:c8:79:b6:a3:e2:a9:65:3e:5a:17:cc:
         1a:e4:ed:cc:90:3a:43:77:68:01:ed:68:ce:8d:8e:f9:ce:70:
         a5:4f:ac:72:cf:f1:75:fb:99:a2:a8:5f:da:ab:70:91:88:05:
         85:9b:7c:9f:c9:c5:74:79:4d:53:80:12:a3:00:89:cb:a1:65:
         b1:39:49:8b:53:35:63:68:80:2c:c7:a9:c4:f6:04:aa:8d:b6:
         fb:35:cb:a0:ac:9a:88:57:20:11:55:7a:d8:16:ee:42:72:7f:
         dc:62:5d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:00:59 2025 by rpki-client