Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a8834c6-18e5-378a-8096-66e1fef53c8c.roa
File:                     4a8834c6-18e5-378a-8096-66e1fef53c8c.roa (raw, json)
Hash identifier:          F33wf/wHy0vXOSb2bt92ZCuVzmCzRiwIic5qorrlqYw=
Subject key identifier:   13:0F:46:CD:D9:1D:0C:BE:EE:A9:83:E3:79:20:D8:41:EA:36:38:B0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BC0B408BD438A60F3A640
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a8834c6-18e5-378a-8096-66e1fef53c8c.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     394996
IP address blocks:        74.82.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:c0:b4:08:bd:43:8a:60:f3:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=e4466ff8-eecc-40bc-8cf2-13341e40743c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:38:90:0f:b2:04:e5:8a:1c:17:f8:c5:f4:c4:
                    0f:e9:82:1d:cb:1d:a2:fc:33:6a:27:f5:17:da:ff:
                    18:da:16:52:c7:6d:98:c5:44:cb:d7:4d:74:17:80:
                    7c:80:ca:b5:d0:de:68:3d:35:65:80:d5:68:09:a8:
                    3b:46:d7:aa:c4:f8:66:0a:64:c6:39:5c:cc:09:a8:
                    df:19:19:ac:8a:86:58:5f:b7:c9:aa:8b:d7:dd:2c:
                    fb:3a:4e:c9:55:88:c5:2e:35:dc:0b:f8:a4:e7:88:
                    a8:fe:79:42:44:0d:28:66:71:9e:89:f7:ad:b8:02:
                    38:8a:a5:e9:09:70:a2:dc:19:52:a0:c4:1a:03:e9:
                    96:96:2f:85:16:0a:49:c4:45:f8:95:65:8d:ac:2f:
                    ad:b7:cb:d8:b2:d6:12:e2:3a:9b:ff:16:e1:50:a6:
                    5a:de:e1:b2:1c:0d:81:69:ca:85:9d:a9:40:53:14:
                    96:2d:f1:c2:04:35:99:c7:2e:70:46:a8:20:e5:1c:
                    c2:03:c4:0b:28:e4:f2:b7:f5:7d:35:0d:51:36:60:
                    f5:9f:55:51:a7:89:0c:6d:ec:3c:4b:d8:72:4e:ca:
                    52:78:7f:ab:36:a3:ab:0a:86:fc:8f:16:45:04:9f:
                    b7:74:28:d0:25:57:51:f8:0a:1b:84:d7:f8:b9:bc:
                    c3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0F:46:CD:D9:1D:0C:BE:EE:A9:83:E3:79:20:D8:41:EA:36:38:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a8834c6-18e5-378a-8096-66e1fef53c8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.82.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:dd:91:b6:08:b9:25:9c:4a:ae:2a:c3:a4:30:af:23:e0:d7:
         fe:28:2a:3c:ab:93:60:23:39:e9:07:e6:31:03:d1:dd:46:37:
         c7:dd:c7:6e:ed:03:e7:de:95:f0:7d:1d:cc:93:eb:e5:be:72:
         cd:04:bc:89:92:7e:86:8b:e5:cc:31:33:35:11:4e:93:80:eb:
         0f:7c:0d:c0:1c:c1:5c:ed:51:5c:f8:6e:6e:2f:75:e0:05:cb:
         05:f8:92:4b:3b:4a:6f:46:9e:89:65:68:e5:95:4a:45:5b:73:
         e1:27:19:9f:28:50:32:b6:8e:67:c1:f7:ef:6c:47:f6:1c:9b:
         fc:60:0c:56:05:11:9b:58:d5:b6:14:da:77:1e:23:b2:5d:4a:
         69:e6:84:a4:51:d4:82:24:08:e6:39:18:d2:5b:6b:38:13:45:
         f8:3f:8d:74:16:99:0e:91:69:d8:b9:c5:7e:64:d6:8f:46:b2:
         86:1e:e1:46:b8:ef:9a:9b:10:e5:2d:ff:07:60:52:86:a3:fe:
         38:8d:8b:e8:df:ec:1a:9a:2d:2c:24:18:4a:a8:05:82:d1:30:
         c5:99:1e:03:a8:0a:28:2b:87:c6:52:d0:50:8f:b0:33:28:7f:
         93:bc:a8:87:66:d2:aa:b1:d3:24:5a:8a:7f:f2:46:66:07:e0:
         ca:71:e5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:50:16 2025 by rpki-client