Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/b236c1d5-c527-3f4f-a337-aab9a45eda0e.roa
File:                     b236c1d5-c527-3f4f-a337-aab9a45eda0e.roa (raw, json)
Hash identifier:          8DbTFRiiwXt2WaGf690lC0pyAuFBZZdJBoo3LqRi27c=
Subject key identifier:   97:41:BF:06:B1:52:0C:7F:ED:9D:EF:C8:89:F5:67:E3:F6:1F:19:EA
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584A9A6632EECD54FD59B0AABC00
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/b236c1d5-c527-3f4f-a337-aab9a45eda0e.roa
Signing time:             Tue 22 Jul 2025 13:01:03 +0000
ROA not before:           Tue 22 Jul 2025 13:01:03 +0000
ROA not after:            Mon 20 Oct 2025 13:01:03 +0000
asID:                     1239
IP address blocks:        74.91.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:66:32:ee:cd:54:fd:59:b0:aa:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Jul 22 13:01:03 2025 GMT
            Not After : Oct 20 13:01:03 2025 GMT
        Subject: CN=e6c2c47e-8acf-4928-8dc5-0f615137fbdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c9:2a:e6:f3:c9:24:39:e3:8c:a3:71:29:c4:
                    2c:2b:4b:68:cc:10:ae:17:a2:69:1d:b4:f2:25:d6:
                    98:af:45:0f:db:02:fb:21:54:ea:dd:33:c9:80:e6:
                    5c:66:86:32:27:b8:e1:8b:bc:04:92:dc:88:4f:06:
                    d1:3d:b1:2b:23:fc:87:10:8c:23:40:c9:38:0a:b1:
                    c7:65:e1:a0:ad:c9:35:9c:e9:f8:a8:51:1d:47:65:
                    71:25:1c:14:99:44:36:55:5a:8e:1c:72:cd:3c:ff:
                    45:39:bf:0b:ac:1f:4f:f6:6a:79:dc:bf:68:43:46:
                    31:4f:2d:65:fe:ab:81:21:e8:d0:f5:87:c0:2d:8c:
                    b6:1d:a1:fe:9c:cd:82:e3:df:cb:42:a1:0a:22:eb:
                    95:ef:24:b1:0b:97:c9:8d:97:81:05:22:65:06:63:
                    fb:3d:17:b1:14:be:2c:0d:57:8c:d1:0f:42:f2:c1:
                    97:93:77:43:31:17:a4:1b:cf:28:01:7d:74:b5:e1:
                    dc:52:de:7c:25:da:49:5f:97:f2:f0:54:42:d3:a8:
                    26:a4:3d:44:4a:26:00:75:bc:ff:7d:1b:04:4c:c9:
                    0f:bb:21:2a:b2:e8:d7:c1:e5:f4:9e:b3:cc:d7:f9:
                    f8:3b:c2:00:3d:19:f1:23:f8:8b:e6:20:ec:fc:a8:
                    78:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:41:BF:06:B1:52:0C:7F:ED:9D:EF:C8:89:F5:67:E3:F6:1F:19:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/b236c1d5-c527-3f4f-a337-aab9a45eda0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:37:59:ab:cd:7d:2b:1e:17:a1:ef:b3:d2:16:f6:3c:03:96:
         b3:d8:cc:e4:5c:11:97:1c:57:7a:7c:08:82:00:c5:8f:64:1e:
         f5:b3:9b:4c:66:cf:f6:c3:3f:38:1d:8d:7e:1d:0a:cf:be:48:
         46:92:93:4a:05:a8:55:0a:65:b5:df:b6:31:2a:5e:70:1e:9f:
         74:07:d3:25:2e:11:08:89:57:41:eb:f8:7b:a8:9b:5f:db:1d:
         72:bd:dd:a9:20:cc:0f:fc:22:60:86:38:fb:a4:44:62:3d:b5:
         38:31:61:e8:fa:cd:e3:e9:a4:73:ef:6b:99:37:3c:67:e0:1b:
         b3:2f:f0:7c:a5:5b:62:93:4f:7b:09:d8:0a:f6:b6:03:e9:fa:
         1e:42:54:ce:f7:90:c2:4c:a2:12:f6:98:5e:e5:02:e1:bb:e5:
         87:e9:1b:b5:1b:66:82:9a:8b:db:01:db:c8:8e:63:cf:f7:6a:
         cd:60:9f:24:a2:c6:d6:27:34:cb:65:76:67:20:48:13:fa:86:
         14:dd:cc:5d:b8:48:fb:97:9a:35:84:37:7a:9a:8f:c4:4a:9d:
         72:54:45:a0:6f:f3:4e:72:28:0c:63:63:ca:3e:8a:e1:e5:16:
         54:b3:e5:c7:d9:73:fe:4b:0f:02:44:d2:42:8a:09:b2:e9:8c:
         9c:ca:e5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:08:41 2025 by rpki-client