Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b58a680d-a56f-33ef-9b5d-c1e0ba8c10d3.roa
File:                     b58a680d-a56f-33ef-9b5d-c1e0ba8c10d3.roa (raw, json)
Hash identifier:          RzUO0SZv0E9oABwMLp0OcxQzE2rcyoDS8n2J21NcSLY=
Subject key identifier:   4B:91:CE:05:8E:00:E1:80:EA:D8:74:52:26:3A:3A:CF:2A:76:FE:E5
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA972C1BAD43063C774180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b58a680d-a56f-33ef-9b5d-c1e0ba8c10d3.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     577
IP address blocks:        174.90.220.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:97:2c:1b:ad:43:06:3c:77:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=5b090099-0bbe-43fe-8bd2-815b6d27fed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:87:69:34:cf:85:63:e9:9c:6e:66:c8:75:2f:
                    2e:75:a6:ef:95:88:89:c6:3e:be:57:29:a8:45:bd:
                    04:61:61:3c:50:84:49:fc:cf:38:fb:8f:48:2e:4b:
                    bd:7a:34:fe:43:ac:b7:13:4f:20:21:d3:e6:e1:fe:
                    53:26:f6:8c:90:68:04:60:26:e9:78:cc:6d:15:39:
                    db:ff:5c:20:ac:3a:06:e4:36:03:f2:aa:d8:24:01:
                    d9:93:a7:e0:c2:67:ec:56:13:dd:26:74:69:e7:d9:
                    2a:d7:04:99:9f:e9:be:8f:d2:76:93:5c:cb:6b:fa:
                    21:6a:72:f3:bd:59:6b:2f:65:ff:b6:4b:70:3d:25:
                    56:2c:8a:43:1a:32:c7:2f:3e:6a:1c:36:03:d8:3e:
                    cb:6f:dc:39:af:b0:6e:18:81:59:e9:3c:83:12:98:
                    92:e0:e0:40:0a:4e:9e:94:8e:b5:e5:4a:25:0b:2e:
                    de:21:7b:73:28:ad:ea:6c:d9:65:b1:47:01:50:29:
                    31:03:0e:9a:1e:63:d1:6d:6f:72:ed:51:75:65:75:
                    16:d2:07:a5:6a:eb:54:57:23:ae:04:01:56:ff:d9:
                    13:09:d7:74:2f:ed:df:81:6b:94:b8:a0:69:ce:45:
                    34:8f:35:2d:fe:2b:d4:9a:49:1d:50:24:64:85:f7:
                    87:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:91:CE:05:8E:00:E1:80:EA:D8:74:52:26:3A:3A:CF:2A:76:FE:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b58a680d-a56f-33ef-9b5d-c1e0ba8c10d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.90.220.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:7d:b0:17:ae:4d:3c:d4:7c:d2:5e:77:e9:aa:1a:26:c9:07:
         66:55:36:11:09:d2:7f:6a:d6:d9:f4:35:0c:e2:c2:a8:76:a9:
         49:1e:64:94:1b:55:48:c5:e0:19:9b:3d:f5:dc:57:cf:c6:e3:
         2b:fd:0b:a4:fc:a4:b5:19:86:77:60:80:88:d9:7e:23:a0:28:
         02:36:5a:bd:9b:6b:3e:24:5a:b9:f2:9c:68:a5:20:c3:90:56:
         f2:4f:03:53:1f:c6:15:6c:f6:fc:9a:36:48:a3:34:cd:b9:17:
         18:38:bd:da:2a:a4:52:5b:46:92:8f:fb:75:a6:57:70:b0:ec:
         dc:ad:6d:01:1e:d3:e2:ef:0a:4a:d5:6e:c8:a2:24:31:3f:2b:
         8d:b9:3f:55:b5:a0:44:95:26:0f:30:cb:a2:92:a2:f5:8d:6f:
         77:6f:b2:82:1b:30:b7:21:74:6d:f3:db:c2:20:84:87:03:1d:
         43:c0:b3:dd:97:dd:3d:02:68:9f:2d:6a:a4:cd:21:52:6c:41:
         85:63:f0:ec:7c:95:fa:83:95:26:9b:81:bd:69:ab:c9:9f:17:
         48:28:8e:d4:05:5c:bd:14:18:4a:fb:a5:2a:1b:b2:81:6c:a9:
         e2:a9:84:4d:2e:8b:15:45:a8:c4:1e:24:4a:16:da:75:35:aa:
         fa:43:ce:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:08:39 2025 by rpki-client