Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/362ee3ed-39d3-3a24-8491-74fd9d22f4fb.roa
File:                     362ee3ed-39d3-3a24-8491-74fd9d22f4fb.roa (raw, json)
Hash identifier:          5tkBYBI8E06h3OVGw4PThMIjQ1zEF66/mS2TF+aaJoI=
Subject key identifier:   3B:19:9B:61:07:1E:04:D9:0C:E4:A7:90:A0:8C:F3:4E:34:08:05:89
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584ABD4BA343D1C41D0E3811D000
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/362ee3ed-39d3-3a24-8491-74fd9d22f4fb.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     394089
IP address blocks:        74.221.134.0/24 maxlen: 24
                          74.221.136.0/24 maxlen: 24
                          74.221.138.0/24 maxlen: 24
                          74.221.140.0/24 maxlen: 24
                          74.221.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:a3:43:d1:c4:1d:0e:38:11:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=d26565ed-eee1-411d-8560-0db1cb73907a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a8:9b:f0:7b:a2:52:2f:e8:29:85:47:42:16:
                    42:dd:a9:92:d8:78:ca:1b:0c:05:f5:fe:13:5e:2e:
                    87:a2:eb:a9:96:2e:bc:2a:25:57:2b:cb:77:ce:78:
                    03:cb:ee:23:22:20:35:dd:f2:eb:19:d1:39:cb:c2:
                    73:01:9d:d2:30:7c:34:ba:bb:dd:04:38:93:87:40:
                    fe:4c:c5:83:a7:ab:f3:21:73:70:5f:b1:5d:cd:1f:
                    03:5a:7e:d3:6e:e4:70:7d:cd:42:b4:46:7b:30:5d:
                    91:c6:b0:44:fa:91:83:69:6b:f9:3f:32:2c:76:b3:
                    b8:d0:a4:4a:a4:b7:6e:5f:dd:76:45:92:3f:7d:96:
                    eb:1f:f7:70:fc:84:7a:7c:1f:2d:93:b9:62:f5:82:
                    77:9b:d7:98:28:b6:bc:8b:79:df:db:b0:5c:e8:a3:
                    85:b2:02:9b:86:ed:e6:38:70:aa:31:eb:87:fa:2d:
                    ff:71:8e:a3:34:5c:c5:fa:3b:62:69:a1:f2:db:c7:
                    67:d3:3d:89:18:75:66:e2:69:2e:61:d4:21:7f:0d:
                    6b:56:5b:0f:37:15:1e:36:d3:e1:ba:a1:59:c2:fb:
                    aa:68:60:14:d2:3b:87:d8:63:0e:1a:86:2e:9f:4b:
                    08:f5:c0:e7:fa:35:b8:48:c1:a7:63:bf:27:ba:17:
                    66:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:19:9B:61:07:1E:04:D9:0C:E4:A7:90:A0:8C:F3:4E:34:08:05:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/362ee3ed-39d3-3a24-8491-74fd9d22f4fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.134.0/24
                  74.221.136.0/24
                  74.221.138.0/24
                  74.221.140.0/24
                  74.221.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:5d:33:c4:69:b8:73:18:9e:f2:ca:e5:27:c5:d3:76:b6:e7:
         b5:79:75:a2:b6:b1:b1:ef:a7:a1:af:83:f2:b5:8b:7c:b1:21:
         f8:b1:f7:4d:47:f9:25:84:ed:52:f7:4a:64:bb:ee:32:34:9c:
         3d:a2:3e:ee:58:ed:8f:12:d5:5d:94:fb:44:4b:95:b1:5a:64:
         f4:32:b7:cb:be:b2:41:86:eb:0a:50:3f:a3:a4:ae:d4:1a:d0:
         51:87:20:c3:37:f4:27:7d:fe:cf:54:ef:af:df:09:5b:6b:f5:
         72:af:9f:1f:25:18:aa:f9:68:d5:20:5e:fc:07:08:68:e8:43:
         56:65:cb:63:88:b4:27:cb:3f:d8:9c:bb:41:f7:ad:50:ff:76:
         b2:77:51:87:db:f8:94:c4:cc:db:54:d8:e9:33:af:85:78:f7:
         2e:f7:4c:4a:75:34:dc:b5:ed:96:b6:1e:99:ef:df:21:92:0e:
         a5:10:d2:a4:f7:87:0e:c9:c9:fd:f2:59:15:07:f4:d3:23:29:
         7a:f2:d6:6a:88:52:72:db:a9:12:0c:72:70:b5:ed:d3:dc:41:
         f1:d6:f4:84:a5:19:4c:c4:2a:60:b2:fd:9a:f6:30:24:34:b5:
         35:bb:26:ce:c3:c9:2a:95:ec:5b:19:97:f8:0a:db:ec:c2:b2:
         ce:38:f5:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:13:14 2025 by rpki-client