Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6969d83a-31bb-35e5-9f96-dfe76f1eb349.roa
File:                     6969d83a-31bb-35e5-9f96-dfe76f1eb349.roa (raw, json)
Hash identifier:          MPC1Y5u8nukoCqhSoeQnlOKNdMcUhrT/kM39kiRYxbc=
Subject key identifier:   96:77:A3:A5:C7:CE:D9:E5:D7:70:45:6A:86:07:C7:79:A1:2A:2A:E2
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584B9E07C0221014322CB0B1D900
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6969d83a-31bb-35e5-9f96-dfe76f1eb349.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     396982
IP address blocks:        74.221.138.0/24 maxlen: 24
                          74.221.140.0/24 maxlen: 24
                          74.221.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:c0:22:10:14:32:2c:b0:b1:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=938303e0-1820-4300-8740-64317580e6ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:7f:7a:d5:33:65:4e:bd:b8:c4:83:77:8b:
                    c6:ea:b4:d8:01:19:45:ae:47:48:04:61:6d:ec:4a:
                    84:ac:39:21:ab:28:58:d5:16:5a:14:62:17:78:5d:
                    69:38:87:61:30:34:7c:47:d2:40:3d:78:1e:34:26:
                    f6:a0:c2:7c:bf:f3:e5:bb:c6:1c:3d:83:f2:c9:ef:
                    ad:86:0c:b3:a1:f9:d0:33:db:1a:0f:57:00:36:ab:
                    fc:29:93:25:cb:42:16:5b:b7:7f:8a:c7:f2:96:3e:
                    ba:37:00:8c:dc:01:26:6a:3d:1b:4d:e0:fb:88:c1:
                    f2:c1:02:1b:22:69:98:b1:ee:14:13:16:0a:f4:fe:
                    d7:bd:fa:7b:d7:ca:2e:7a:9f:2b:50:4c:63:1f:72:
                    bd:4e:96:89:83:d7:c4:71:65:a8:ff:6f:ca:cf:a1:
                    95:06:be:00:f9:0a:c4:01:81:3d:96:07:6b:08:44:
                    fa:42:37:98:14:75:84:94:71:37:87:ac:64:a7:bb:
                    c4:de:70:1a:5c:7f:c8:a0:42:bf:f5:a2:ad:a9:0b:
                    9d:f2:08:09:91:19:98:1a:9b:04:02:d8:95:4e:27:
                    d0:89:10:60:ca:65:ae:54:d2:27:a9:5a:86:7a:fc:
                    52:48:76:8e:08:c6:57:87:3a:ee:45:a4:82:02:a6:
                    ad:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:77:A3:A5:C7:CE:D9:E5:D7:70:45:6A:86:07:C7:79:A1:2A:2A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6969d83a-31bb-35e5-9f96-dfe76f1eb349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.138.0/24
                  74.221.140.0/24
                  74.221.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:95:7b:4a:b7:f8:99:6c:af:83:36:5e:99:11:76:83:d8:4c:
         86:6e:3e:68:b1:9b:dd:83:24:4e:c7:4a:5d:f4:d0:f9:74:44:
         c5:d8:f6:8b:e6:81:bf:c8:4c:6b:2c:72:c0:75:d4:eb:d7:1f:
         88:8a:40:56:7a:d0:85:5a:73:ed:2b:ac:75:ea:4a:6b:08:ac:
         8d:b3:d3:21:d7:2b:ba:22:ca:36:47:de:48:cb:0f:16:d9:b3:
         c5:eb:d0:d4:13:10:c2:2b:6d:6b:92:8f:67:31:6f:29:d0:45:
         da:e9:33:da:c2:93:65:0d:90:e4:60:e8:b9:3d:0d:32:8b:97:
         be:88:96:e1:3c:44:95:08:20:28:71:3a:4e:16:d5:64:3f:da:
         73:14:54:d0:ab:80:66:93:9f:8a:23:57:86:60:7d:bf:2f:a8:
         8e:96:95:b8:e6:2e:32:af:70:44:e8:8c:b9:cf:b6:46:81:37:
         23:5f:98:4c:ef:b6:22:40:fb:af:3f:2e:9e:2d:72:fa:aa:01:
         5f:51:61:73:e5:04:0e:46:1f:af:1b:82:5f:81:17:43:cd:27:
         44:1a:b9:d4:83:26:d8:15:bf:56:0f:33:e5:03:c9:fd:14:5b:
         39:fe:d0:15:8b:e1:f5:2a:b9:46:ef:65:a5:68:ac:ca:78:a3:
         1d:58:0a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:29:25 2025 by rpki-client