Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/bd89449d-0353-3c54-873d-1f0b04d7ddd6.roa
File:                     bd89449d-0353-3c54-873d-1f0b04d7ddd6.roa (raw, json)
Hash identifier:          VFal0Xq0cPEBSg1daSxpZBCKhD0pidKh3HOLla/GdKw=
Subject key identifier:   E5:EC:3B:29:3C:8E:8B:80:AE:B1:87:1B:24:89:A7:77:FB:2E:C2:30
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F432858498E64B2C7D648C6F2946A1480
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/bd89449d-0353-3c54-873d-1f0b04d7ddd6.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     396185
IP address blocks:        74.127.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:b2:c7:d6:48:c6:f2:94:6a:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=0ed8ff24-53ca-44ad-96ce-2881ee52cc7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:18:86:6c:23:d2:fe:93:c2:53:57:fa:35:23:
                    28:46:22:e4:46:ed:35:db:e5:4b:07:75:38:d0:33:
                    f1:e6:f9:bd:08:5e:bf:76:8a:f1:a0:93:23:01:a0:
                    f7:d0:aa:ca:76:7a:c1:a6:14:0f:a5:68:d5:79:c5:
                    9a:8b:5f:16:af:9f:86:c9:ea:39:8e:5b:6f:6e:72:
                    cb:a2:78:4c:d5:b9:05:72:3f:a3:ab:6c:15:15:a3:
                    d9:7a:f4:c9:19:fa:2d:87:11:74:6a:d2:f2:70:a5:
                    0d:81:e1:2c:46:9c:da:b7:d5:44:08:35:87:3c:ce:
                    0d:13:12:28:d1:85:b7:43:7a:6f:b7:8b:53:01:cf:
                    8e:3e:bd:1c:c7:a7:d0:bc:8b:58:0b:1f:5d:bd:30:
                    8a:26:7b:d5:3d:e8:f7:83:01:f1:04:24:46:84:1c:
                    ea:f3:1c:07:33:bf:6d:b5:db:67:32:cb:1b:d9:89:
                    73:1b:b6:7e:fe:7b:0d:f4:8a:f3:a7:de:6d:bb:95:
                    11:dc:31:0a:98:e3:49:dc:36:35:d6:76:31:67:7e:
                    22:07:2d:ea:c5:d0:1d:f2:7e:89:4c:58:11:c8:e0:
                    91:d4:2d:0f:45:79:61:06:e2:47:d9:a1:05:e5:53:
                    81:21:92:d9:8a:f8:9b:15:87:04:99:04:5a:49:c2:
                    02:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EC:3B:29:3C:8E:8B:80:AE:B1:87:1B:24:89:A7:77:FB:2E:C2:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/bd89449d-0353-3c54-873d-1f0b04d7ddd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.127.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:3e:91:25:9e:fc:ae:01:e0:36:fe:07:85:f1:2e:b9:1c:af:
         6a:68:37:60:d8:ae:61:ad:cd:d1:a1:c9:56:8d:57:56:5b:56:
         d4:a6:b6:bb:a7:92:c0:73:a9:34:74:ef:0f:24:23:3a:44:81:
         59:0b:f9:57:74:f7:1f:87:3b:bf:0c:c3:d5:7a:07:8e:0a:80:
         ae:c9:bb:71:1f:d0:b4:d7:8a:f1:25:3d:b5:61:32:33:d4:30:
         41:fa:71:81:21:09:00:3e:0c:ba:54:9b:48:24:a4:85:bd:6b:
         cd:fc:3e:05:2d:64:20:d6:da:c6:b0:e4:7d:19:66:65:8a:0d:
         10:f8:dd:97:a2:f5:e2:89:87:f8:4d:dc:49:83:13:84:fc:77:
         3c:8b:61:59:94:a6:fd:30:c3:0f:70:ec:bd:3f:6e:8f:37:30:
         a7:24:61:40:0f:2b:0c:51:e4:7f:b6:da:ff:07:fc:64:a2:95:
         5a:9d:49:db:35:fa:57:07:dc:c5:df:df:54:46:0a:f4:58:db:
         95:29:41:c8:c6:98:94:bf:6a:c9:dd:13:28:c9:18:09:58:b6:
         d8:87:e8:86:85:e8:5d:c2:14:2d:02:7b:c9:9d:86:6b:e2:60:
         d6:29:06:fb:8b:82:77:46:19:3e:55:b3:95:aa:ac:3f:6c:d8:
         21:5e:43:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:41:37 2025 by rpki-client