Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/199dfb28-cdac-4edc-a298-dd88768e447b/7173d6ae-ff36-3bc8-b6e2-db6c8ebc4380.roa
File:                     7173d6ae-ff36-3bc8-b6e2-db6c8ebc4380.roa (raw, json)
Hash identifier:          JQPOmGmNqLW7qDrSForU0VkI7fEK4/jA5Y9VzIKXgYU=
Subject key identifier:   10:AE:14:FD:1A:73:A2:9D:A0:48:8C:D6:5B:45:C7:AF:4A:8A:1A:56
Certificate issuer:       /CN=199dfb28-cdac-4edc-a298-dd88768e447b
Certificate serial:       010D0C9F4328584A9A4821CC57F3E0B8291E72B4
Authority key identifier: CB:40:12:59:2D:7D:E4:A8:D1:46:BA:92:A3:88:94:A5:EB:E9:C1:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/199dfb28-cdac-4edc-a298-dd88768e447b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/199dfb28-cdac-4edc-a298-dd88768e447b/7173d6ae-ff36-3bc8-b6e2-db6c8ebc4380.roa
Signing time:             Tue 22 Jul 2025 12:00:35 +0000
ROA not before:           Tue 22 Jul 2025 12:00:35 +0000
ROA not after:            Mon 20 Oct 2025 12:00:35 +0000
asID:                     398704
IP address blocks:        74.118.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/199dfb28-cdac-4edc-a298-dd88768e447b/199dfb28-cdac-4edc-a298-dd88768e447b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/199dfb28-cdac-4edc-a298-dd88768e447b/199dfb28-cdac-4edc-a298-dd88768e447b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/199dfb28-cdac-4edc-a298-dd88768e447b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:48:21:cc:57:f3:e0:b8:29:1e:72:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199dfb28-cdac-4edc-a298-dd88768e447b
        Validity
            Not Before: Jul 22 12:00:35 2025 GMT
            Not After : Oct 20 12:00:35 2025 GMT
        Subject: CN=e8838594-9bb4-469e-a2b7-545aa56c14b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a3:7d:1b:a6:63:de:95:b2:c5:2b:92:1a:1b:
                    6b:f5:b2:25:ca:c2:33:8f:13:d3:3f:d3:d5:44:08:
                    2b:aa:38:b3:fb:4a:ec:97:bd:86:5a:f8:ba:bd:26:
                    45:cf:a0:91:52:bb:95:14:be:0c:80:c5:0b:6d:3f:
                    6a:0a:2f:b8:b3:1b:42:fb:f9:af:98:7a:c8:2a:57:
                    02:d4:45:5a:8e:47:d5:39:bb:c3:2c:ed:66:da:ba:
                    9c:59:fe:63:4f:7a:c0:57:9e:a9:7b:20:4f:59:9a:
                    f2:a8:b6:de:96:9a:e2:53:fa:2c:83:ef:e2:da:83:
                    ec:3d:36:a2:67:61:99:cb:4d:83:2a:81:4f:b5:4f:
                    d9:ce:b0:e9:62:46:ef:cb:b6:77:2a:af:83:2b:00:
                    54:60:d6:4a:da:cd:be:cf:d1:b6:ac:9d:82:d2:f4:
                    fe:cc:da:22:6c:83:36:71:34:46:31:c8:73:3b:ff:
                    be:19:aa:95:71:ab:86:6a:0d:30:22:55:9d:40:fa:
                    d7:73:fc:44:ab:30:eb:08:24:52:24:1f:c4:0e:f5:
                    73:12:89:36:01:4b:b8:46:89:11:eb:75:04:e9:e4:
                    30:68:23:49:22:37:03:b3:63:30:0c:b8:9d:ec:b3:
                    30:5d:a3:90:99:db:74:9e:0d:1f:98:03:98:f3:f1:
                    8f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AE:14:FD:1A:73:A2:9D:A0:48:8C:D6:5B:45:C7:AF:4A:8A:1A:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/199dfb28-cdac-4edc-a298-dd88768e447b/7173d6ae-ff36-3bc8-b6e2-db6c8ebc4380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/199dfb28-cdac-4edc-a298-dd88768e447b/199dfb28-cdac-4edc-a298-dd88768e447b.crl

            X509v3 Authority Key Identifier:
                keyid:CB:40:12:59:2D:7D:E4:A8:D1:46:BA:92:A3:88:94:A5:EB:E9:C1:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/199dfb28-cdac-4edc-a298-dd88768e447b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:67:48:d2:5f:2d:d3:8b:9c:cd:7f:62:55:72:a4:74:fc:f1:
         1a:c0:48:94:e7:0b:4d:c8:4a:ff:6d:44:9b:98:a9:31:d3:fb:
         c7:47:c7:a8:ea:3a:71:36:ed:74:84:3c:0a:51:72:d7:5d:ba:
         d7:f3:f6:f8:04:4c:f2:71:91:b0:3f:3f:0e:43:2d:4c:3d:c2:
         a2:6a:93:97:fd:95:4b:2e:bf:a9:85:67:b3:8e:c7:c7:7f:58:
         d1:1f:7d:55:13:6f:6c:3f:c2:87:74:fb:6c:0d:a1:c2:f9:5e:
         73:dd:52:09:ae:4c:7e:02:c3:54:df:fb:0f:a4:34:4d:69:08:
         62:b7:09:e1:09:76:90:e9:af:c9:bf:98:1f:e3:7c:c1:06:48:
         cb:60:6d:9d:86:46:23:35:0f:2a:3c:51:0d:69:a6:f2:e4:98:
         27:f6:e9:dc:30:84:a0:78:7c:36:ca:bc:a4:69:d3:1e:41:99:
         00:8c:a7:65:3d:f4:eb:1c:a5:e6:2a:5a:b5:06:63:6f:5f:89:
         f2:52:08:60:42:48:3e:0b:fa:7f:ae:49:2e:61:87:0e:ee:36:
         22:54:29:28:ef:40:8c:b5:73:6f:a9:c6:23:9d:31:f6:b7:cb:
         0c:23:62:3c:1b:be:17:51:b6:8d:5d:4a:38:2d:07:66:fa:33:
         43:37:8a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:27 2025 by rpki-client