Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/27d77674-40cc-356c-878d-4dbe9170f65c.roa
File:                     27d77674-40cc-356c-878d-4dbe9170f65c.roa (raw, json)
Hash identifier:          mfKZnRRnbbL8sevWRREKSQHYS9VoZqslCts1xFcXw7c=
Subject key identifier:   FE:85:B1:FF:89:DA:B0:65:EE:8F:53:36:09:55:84:5E:5C:50:FF:2B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BEBA7726F0CCDCD10FE1E
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/27d77674-40cc-356c-878d-4dbe9170f65c.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     36103
IP address blocks:        74.82.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:eb:a7:72:6f:0c:cd:cd:10:fe:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=4340f437-b63f-49e5-9c03-37a540bec409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:84:96:0e:7b:d6:9b:cf:c0:fc:eb:2a:88:94:
                    5c:4a:94:94:b8:40:31:f5:4d:0b:6f:ec:96:d1:44:
                    f4:93:aa:35:cf:ca:7a:5c:ad:42:8c:74:48:f9:96:
                    aa:28:ea:f9:e1:94:59:a5:54:ed:5b:61:b2:a3:d7:
                    57:8e:79:86:0a:7d:45:e2:e7:e3:16:d2:eb:b6:48:
                    f7:f7:24:3f:f1:ff:f4:f7:87:72:76:c3:8f:65:93:
                    ec:39:99:80:5e:24:e3:07:27:e3:88:ff:e3:42:4e:
                    13:15:ca:58:25:be:c1:b4:0d:28:55:46:64:18:c7:
                    f0:d6:b3:dc:90:e9:e1:20:dc:aa:8a:0f:fd:be:48:
                    19:30:15:7a:1b:ea:2a:73:74:53:f2:5d:93:b9:2c:
                    87:82:21:af:d9:68:82:bc:53:fe:65:34:94:ba:03:
                    2c:2a:42:03:fe:87:19:fb:3d:9f:05:57:4b:ed:7f:
                    1a:8e:d7:d1:88:93:77:50:1b:73:33:21:30:44:c0:
                    de:7c:bf:ba:2b:b2:c0:30:b9:2e:be:a7:2a:a1:a2:
                    11:2e:07:f5:7f:2b:30:fa:44:e5:fd:ac:67:d1:49:
                    c7:23:ea:61:4e:3a:05:4e:36:b9:02:0d:0b:61:f5:
                    67:db:6d:25:87:42:86:61:e2:ae:8a:df:e1:56:44:
                    ed:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:85:B1:FF:89:DA:B0:65:EE:8F:53:36:09:55:84:5E:5C:50:FF:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/27d77674-40cc-356c-878d-4dbe9170f65c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.82.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:96:0f:2d:5b:fd:a7:5f:cf:88:d9:0b:49:82:e7:75:6e:4b:
         de:6a:50:2d:b3:27:54:fc:ba:89:33:1d:e4:b5:60:8b:98:0f:
         7f:19:9c:55:91:33:22:7e:fb:b6:49:13:1b:72:20:77:3b:76:
         f5:d8:1d:e1:ff:ed:f9:2e:b2:49:82:53:ff:f3:4a:27:00:69:
         c4:36:ce:06:89:21:b6:70:c8:cc:41:62:71:96:a5:87:1e:e0:
         57:a6:38:ea:1b:71:db:b9:83:b9:99:d9:38:c0:b4:f5:2d:e0:
         e5:5d:6d:8b:a9:b7:f6:19:33:e0:3c:94:95:8f:1a:df:27:7e:
         95:b9:99:1b:36:d9:e2:61:5d:58:43:dd:96:79:20:52:4f:20:
         d5:77:cc:7d:36:10:fa:10:e1:d2:6b:35:e5:c2:e3:73:3b:83:
         28:76:d8:d8:c3:32:be:fc:d9:f9:a5:96:d5:f6:f1:03:09:4f:
         6b:17:90:5d:b3:3b:6e:b3:00:f0:34:3b:b3:5f:6d:bf:63:df:
         44:87:72:b9:cc:09:2f:ab:fa:fd:4a:25:6c:11:01:8f:d9:7d:
         76:0b:3f:00:f9:63:eb:c1:82:5b:b8:b2:8f:85:4b:bc:7b:ad:
         25:89:f2:59:58:70:1c:83:75:de:17:03:93:b9:bf:9c:27:c6:
         c8:42:f5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:45:44 2025 by rpki-client