Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1cbe8b39-258d-3871-85a7-9938398c95b0.roa
File:                     1cbe8b39-258d-3871-85a7-9938398c95b0.roa (raw, json)
Hash identifier:          kp1cGKlTXNKcdX40+OImmEdhT64cO7+8XdX34lmE8+4=
Subject key identifier:   E1:E5:45:8A:95:8C:86:D8:0D:31:11:4D:AD:31:35:EA:88:AA:5B:D7
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1970CCBF5C60D8EBD82FA00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1cbe8b39-258d-3871-85a7-9938398c95b0.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     577
IP address blocks:        174.91.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:0c:cb:f5:c6:0d:8e:bd:82:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=87c46f0a-0cbe-4353-bc62-6e33f3224528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:11:ef:60:3f:0d:d2:c9:d7:5b:1c:b6:ef:cc:
                    56:a3:48:45:3b:88:37:24:48:03:8c:95:dc:c7:39:
                    e4:4b:99:c2:ff:94:5d:60:de:a3:a2:22:09:60:43:
                    d2:c1:6e:d5:b1:0c:74:ee:ca:fd:a6:62:00:46:5f:
                    7f:7d:5f:6f:5b:d2:f5:e4:30:a5:52:a9:49:ca:f6:
                    a5:b4:2f:93:3e:f8:f8:68:c5:b6:4f:48:58:8b:34:
                    c0:2f:e1:ee:df:fe:bb:ee:c9:f0:30:5f:69:60:e3:
                    1b:39:65:7f:c3:15:92:77:84:64:81:d3:32:95:55:
                    46:fb:f1:ac:f4:ed:26:c1:3c:d4:da:51:b7:79:ed:
                    75:ae:f2:ef:17:73:5a:a9:46:f3:f8:bd:2c:50:31:
                    d9:c1:6a:12:09:c4:4d:09:3a:a6:cb:08:f5:3d:ad:
                    97:e4:9f:d3:cc:92:79:9f:b8:ae:28:78:4a:0a:9c:
                    b9:d5:08:d3:47:bb:ad:d9:e6:1f:c0:be:02:92:9c:
                    1e:98:10:17:e6:03:a0:7d:9b:a2:9e:00:9c:2c:73:
                    68:55:29:56:be:a0:e5:ed:8a:b8:50:58:d8:2e:e9:
                    a5:ed:ca:fa:55:dc:56:61:63:45:23:40:e6:35:21:
                    93:6d:8b:40:d1:b7:e3:15:37:59:45:96:4b:85:0f:
                    20:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E5:45:8A:95:8C:86:D8:0D:31:11:4D:AD:31:35:EA:88:AA:5B:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1cbe8b39-258d-3871-85a7-9938398c95b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.91.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f2:1a:bf:d3:1f:74:60:04:88:c3:03:4c:23:a8:f5:6e:3a:
         28:b4:ea:c1:56:f8:e4:65:d8:0e:e6:b7:8b:77:ac:86:6c:d1:
         5a:55:98:4d:17:cd:48:d4:d6:64:d9:28:c9:16:d7:37:60:12:
         83:1e:45:6e:70:ee:93:4c:f5:b0:28:8a:07:0f:ec:b3:09:d4:
         6e:8e:19:9f:1a:9c:3a:5e:30:cd:23:fa:25:ae:fc:a2:ce:36:
         43:72:d2:a2:bc:2c:b0:e0:fd:9c:b6:bf:27:ef:60:0f:54:18:
         64:8d:76:8e:7d:72:68:0b:a1:3d:18:d3:33:2b:4c:e6:5d:17:
         c7:22:3e:8c:67:1f:9c:1e:ca:b2:e2:15:e4:70:04:cd:21:e3:
         01:7e:4f:b0:20:c1:c0:b0:34:4b:d2:06:65:7d:94:b8:c9:02:
         01:f6:3d:da:50:d5:0e:6c:34:15:b3:71:fe:c9:77:78:0b:64:
         d3:74:c8:54:7b:3b:58:5d:47:47:35:08:fd:e7:98:36:45:93:
         bb:08:03:07:9c:8e:e4:d3:bc:c8:2a:60:e3:0f:34:45:f8:1f:
         82:e8:10:c6:6c:3d:f3:a7:41:26:32:88:82:28:b9:65:37:f8:
         da:b7:9a:01:9b:a3:ee:dd:1e:14:fd:fa:e7:eb:ee:7f:8a:92:
         71:3b:3b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:52:00 2025 by rpki-client