Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c259acc6-a52d-3e30-96d6-a0b5cdf3178f.roa
File:                     c259acc6-a52d-3e30-96d6-a0b5cdf3178f.roa (raw, json)
Hash identifier:          nZ0EVp9CXGSQsIF+6rfa0NAhu9ku+E9HlaO1BwKlQiM=
Subject key identifier:   3E:E3:FD:CA:B0:70:02:8F:EB:AC:D9:88:85:17:D0:41:4D:1B:DB:19
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A96367CB698D1A397125B7400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c259acc6-a52d-3e30-96d6-a0b5cdf3178f.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        174.65.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:7c:b6:98:d1:a3:97:12:5b:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=de317400-2877-4c9e-9af4-9c184d9549f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8d:cf:0a:59:f2:a8:84:d3:b4:81:08:1b:a3:
                    3d:93:64:f6:76:52:1e:e8:0b:37:56:01:73:90:20:
                    5a:c0:73:16:c1:47:17:24:38:e4:c4:e8:44:04:ed:
                    f3:c4:57:10:0d:a8:de:23:3f:37:94:cd:f8:0f:58:
                    5e:05:2f:f1:70:cd:a7:ae:1b:a6:8f:18:92:44:9b:
                    9f:10:2e:91:72:40:b4:00:c7:60:47:10:0a:02:a8:
                    46:b6:5a:ff:61:ef:59:c0:0d:43:12:84:04:db:92:
                    12:29:f6:c3:a2:31:8e:6f:2d:94:88:2f:b2:ad:d7:
                    08:f9:27:7d:a0:a6:b7:1b:05:f6:e6:28:c9:a3:e8:
                    12:eb:e9:04:ae:60:31:54:6c:cc:56:51:d9:88:fc:
                    73:02:16:fd:f7:fe:a5:f6:70:17:ae:ba:d8:0f:8d:
                    71:21:34:0f:ff:d7:28:75:05:3d:c5:af:1d:2a:1d:
                    88:de:70:56:09:8e:14:33:3c:ce:3f:86:c9:4c:13:
                    8f:0d:6f:bc:f5:44:6f:25:d7:5f:17:fb:c9:2c:60:
                    cb:5d:97:2f:f1:dc:16:ec:6e:5a:c8:fc:3e:72:95:
                    e5:ab:75:0d:a1:b8:2a:29:69:e3:59:41:d4:c4:a0:
                    82:4e:73:a0:4a:29:4f:07:52:6f:13:ad:7b:53:e4:
                    94:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E3:FD:CA:B0:70:02:8F:EB:AC:D9:88:85:17:D0:41:4D:1B:DB:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c259acc6-a52d-3e30-96d6-a0b5cdf3178f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.65.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:77:a8:5c:be:74:97:a9:ca:9e:b3:46:c6:56:18:f5:af:47:
         2c:c0:6b:6e:7e:80:9b:18:fc:ae:4e:94:44:53:cb:ad:b1:e8:
         55:06:d3:da:51:b7:c2:40:bf:f8:57:eb:6c:41:f2:9e:e6:51:
         bb:81:39:bd:43:c8:31:69:62:ab:5c:d8:04:0b:99:64:d9:7f:
         ea:62:43:74:d4:62:03:f2:fe:23:0a:5b:19:b5:02:16:40:26:
         e0:90:c6:3c:c5:31:c7:25:10:47:c7:4f:7c:d7:d5:30:39:01:
         43:d7:6d:d7:bf:24:1b:15:9d:ff:9c:88:18:d7:08:4d:45:f6:
         9e:fa:2a:9e:38:3f:b4:60:87:53:c2:40:37:69:79:d0:1b:cb:
         2e:81:b5:ab:0f:cd:58:74:6a:40:28:ad:a0:7b:85:e6:0b:14:
         13:99:d3:25:24:ce:53:73:4b:12:97:04:20:17:3d:47:89:5e:
         7b:df:a4:fa:7c:88:6f:11:1d:44:40:5a:a4:62:e1:1d:58:01:
         ba:47:33:8b:7a:51:d9:74:65:33:3c:d7:d6:71:7d:4d:6a:a6:
         66:14:fc:cb:09:6a:7a:c1:6d:35:c2:22:6a:6d:89:75:fc:66:
         8c:01:aa:a1:92:fc:f3:94:5e:62:70:b8:0f:3f:4f:8f:a9:68:
         9c:cc:6d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:07:34 2025 by rpki-client