Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/20178dda-8774-36f7-bfa2-a283ca212a2d.roa
File:                     20178dda-8774-36f7-bfa2-a283ca212a2d.roa (raw, json)
Hash identifier:          FvAFxhN+a+0DEJU+u1KiI6EIuzyh2nRqiyZwK8/BD2k=
Subject key identifier:   0B:45:BE:36:63:FD:70:57:2B:2F:30:3B:3C:20:34:3D:EC:62:D4:41
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAB161244CE826C7126C00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/20178dda-8774-36f7-bfa2-a283ca212a2d.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     15321
IP address blocks:        209.226.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:b1:61:24:4c:e8:26:c7:12:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=a88a06e2-710e-44ce-8fcf-821c88053d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ad:67:bc:80:7d:18:6f:eb:e0:1e:35:3b:ce:
                    c9:e5:50:57:24:ba:ce:26:f8:bb:dc:44:b0:12:61:
                    2f:39:67:17:5d:93:8a:1d:27:cf:46:35:9c:40:62:
                    36:6c:e8:d4:e2:09:7f:68:93:0d:1a:29:e1:99:49:
                    4f:a0:5f:58:99:d1:0f:40:dc:d9:a2:89:ab:f7:1a:
                    81:44:38:a3:2d:69:20:bd:56:11:02:6a:17:4c:d4:
                    02:fd:bf:a5:1a:4b:4e:5c:1f:59:fb:15:ec:d4:13:
                    43:bc:72:c1:c7:30:11:2b:77:5a:a3:e8:d8:7d:69:
                    df:62:c1:d1:df:43:ba:b0:11:44:5b:92:a3:c9:58:
                    8e:41:88:1d:74:a3:b7:16:ac:5a:2b:37:66:42:ea:
                    4e:0b:d9:4d:01:ec:6c:d8:89:b0:be:b3:4e:0d:d9:
                    01:0e:89:dc:a8:9c:12:e9:fd:1a:ff:e4:fd:21:d2:
                    e2:7f:fc:37:39:0a:6b:86:0e:71:9f:54:fc:2f:3b:
                    b5:3d:1b:4e:51:a4:b5:9c:48:60:80:90:5e:fd:8f:
                    6a:3e:7c:cf:4f:4f:d9:58:9f:df:c7:20:6b:d6:db:
                    73:e0:f9:da:04:f0:fd:dd:4b:55:be:ef:ff:c7:e5:
                    71:e0:ee:80:34:58:48:2c:4a:a3:b0:f7:d4:5f:c0:
                    ce:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:45:BE:36:63:FD:70:57:2B:2F:30:3B:3C:20:34:3D:EC:62:D4:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/20178dda-8774-36f7-bfa2-a283ca212a2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c4:0e:dd:fd:95:67:87:2c:a2:36:15:a3:88:f7:4a:3a:16:
         55:ea:b9:98:1f:e0:78:6f:3a:0d:0e:fd:15:f1:c2:94:aa:99:
         20:99:df:1b:f8:06:60:6b:db:19:ec:ec:3a:d3:d6:dd:69:73:
         ff:1f:79:8d:86:b3:30:78:06:76:12:37:ef:f1:73:d5:2f:ae:
         61:fb:62:9f:f8:09:f6:ce:60:80:eb:c6:68:65:14:a4:74:60:
         3b:55:a8:cc:c6:4e:9f:d3:fa:44:25:63:1f:a5:c7:ea:80:7a:
         8d:d5:23:01:62:a2:8d:ea:e3:d7:a0:31:c4:4f:ba:fe:07:b6:
         ee:0b:47:ab:43:d4:f1:5d:2c:58:36:12:a5:03:cd:c2:a4:5f:
         d0:e0:3d:0d:0f:9f:0a:ff:d9:7b:3f:68:0e:63:5b:35:50:c6:
         1e:0e:13:b2:8e:1d:ba:b7:33:98:ea:14:f0:8b:1b:f0:15:fb:
         8b:7b:7b:b4:ae:a5:ad:bf:64:bc:6f:ed:f7:de:af:1d:0e:a2:
         3f:42:44:e6:ac:1a:f1:6c:76:20:22:be:12:14:fc:bb:5b:b6:
         29:20:a4:c7:aa:a7:a2:15:a0:66:0d:a5:ae:b5:e5:62:9c:95:
         99:6c:bd:46:10:23:92:35:6e:c7:ea:b6:36:ed:44:d7:25:8e:
         ad:4b:0b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:43:32 2025 by rpki-client