Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6a964164-f72b-3ea5-bfd2-88e463db0077.roa
File:                     6a964164-f72b-3ea5-bfd2-88e463db0077.roa (raw, json)
Hash identifier:          mO+eKw6vj2+Ayj3Ykv8MF3d9FOAtj0p9YXSvtd4beHY=
Subject key identifier:   DB:4B:10:71:31:A2:F3:3D:74:9A:B3:48:E3:30:B9:A2:79:78:3B:91
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285849C4D4B389C2AFBC41F049A180
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6a964164-f72b-3ea5-bfd2-88e463db0077.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     16509
IP address blocks:        74.221.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:b3:89:c2:af:bc:41:f0:49:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=9c7acefe-14da-40fd-bc10-eeb5f87a39ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d5:88:cf:77:d5:2e:c0:08:75:25:bf:43:4f:
                    de:47:e2:f6:29:30:8c:81:3b:d1:2e:a2:5f:12:45:
                    a3:06:2d:e5:f3:29:b4:81:36:bd:79:df:b0:36:d8:
                    d9:16:77:ca:2a:88:12:61:e7:92:3a:0a:b0:33:70:
                    c2:9e:47:bb:41:96:85:ef:49:e5:4f:67:47:1a:2c:
                    85:77:53:26:a6:ff:2e:13:5c:2c:51:a2:21:7d:88:
                    2d:c7:fa:b2:ad:3b:66:5f:35:56:c3:70:72:d2:71:
                    df:67:35:74:95:e7:2c:3a:6b:1d:5c:a9:17:39:ed:
                    a2:03:67:61:6e:ae:01:13:01:9e:da:e5:59:9f:da:
                    69:22:be:97:85:3f:12:c8:ab:63:c9:cb:18:80:c0:
                    10:94:02:ac:25:a1:98:97:e8:eb:f1:30:0d:7b:6f:
                    de:53:25:ce:3c:ea:75:c0:32:51:ef:fe:88:e5:6d:
                    ff:0c:31:fa:1a:00:e1:df:bf:f4:d0:3e:57:6f:b9:
                    0c:d2:2e:0c:98:a7:7f:1e:ef:46:32:1d:25:5b:65:
                    1b:60:54:74:6f:17:8d:cd:d3:3b:09:64:57:f4:40:
                    65:83:02:e2:03:8a:79:58:99:ed:51:64:88:f4:58:
                    29:16:a7:5c:32:4c:13:40:a2:c2:74:30:c4:d4:24:
                    5a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4B:10:71:31:A2:F3:3D:74:9A:B3:48:E3:30:B9:A2:79:78:3B:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6a964164-f72b-3ea5-bfd2-88e463db0077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:60:37:d6:8d:08:e2:0b:b1:b6:5e:5e:cb:18:78:8b:c7:84:
         fb:fc:77:bb:6d:a0:1f:54:72:82:6f:15:d1:e0:c5:41:9c:77:
         29:14:99:1d:ec:8a:cf:67:7c:30:f1:0c:e2:c5:03:6d:59:90:
         01:67:d6:25:97:96:92:b7:6f:00:ae:18:ef:3b:c1:06:74:e2:
         bc:0c:b7:60:d6:be:59:76:6f:42:27:5f:15:c5:a5:ed:87:b1:
         31:04:4c:ad:3b:50:26:bc:09:86:24:11:ac:d5:3f:43:a0:bc:
         c9:86:a6:33:cd:f9:ca:b2:e5:37:4d:ac:63:61:44:b6:77:8e:
         b9:da:c3:5c:4f:55:80:0f:c6:45:85:a0:87:a7:aa:a2:4c:45:
         d6:09:7d:a7:7f:ea:82:1c:14:c6:ea:76:78:69:a6:b0:87:eb:
         bb:cc:1c:23:01:4b:36:ae:4b:25:f9:48:7f:fb:53:14:f9:e5:
         76:be:aa:2b:0c:36:55:a6:d5:ae:72:59:b4:8b:1e:5d:d1:6c:
         6b:f4:24:16:b0:66:f0:5f:ae:32:86:cf:b5:ef:c9:d9:45:c3:
         81:ec:6c:c5:28:d0:4e:b6:0c:1c:f7:a5:28:9c:af:56:20:4c:
         17:91:aa:67:9a:11:07:54:72:cf:4c:7f:94:29:d2:5a:88:d5:
         5c:e3:c2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:29:21 2025 by rpki-client