Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b58a680d-a56f-33ef-9b5d-c1e0ba8c10d3.roa
File:                     b58a680d-a56f-33ef-9b5d-c1e0ba8c10d3.roa (raw, json)
Hash identifier:          0yeLeCutOhcxU0wxMXN3xVVw4oOpDlmHoZNjneyd5m4=
Subject key identifier:   69:5B:5F:4E:14:42:5D:7D:74:74:B1:50:60:D4:33:FE:6A:E1:C1:4D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06722515100A1326AC4BCA00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b58a680d-a56f-33ef-9b5d-c1e0ba8c10d3.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     577
IP address blocks:        174.90.220.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:25:15:10:0a:13:26:ac:4b:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=bd39d407-a503-4d83-a54d-f893bb058273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:c4:0d:0f:b7:86:c8:80:7e:db:ce:ff:45:
                    6d:aa:9b:05:b1:9c:03:42:eb:01:6c:94:f3:f9:6b:
                    93:62:06:89:75:a4:ab:3d:a0:49:67:6c:ef:8a:56:
                    17:4d:35:3a:d2:3a:e5:89:ec:0a:6d:eb:7b:18:21:
                    76:ea:36:5f:92:13:2f:42:e1:1b:7f:09:0a:7e:ab:
                    49:ca:81:88:ef:40:ef:d1:c1:c9:d5:5d:71:9a:a8:
                    c6:83:3d:21:fd:f8:af:cc:17:b5:9c:32:e4:12:d3:
                    c1:d4:b4:35:8b:aa:f7:5f:53:ae:23:d4:c4:62:9a:
                    95:f2:fb:2c:dd:1c:3e:ac:de:d1:04:dc:70:1b:23:
                    00:af:65:d8:3e:bb:25:2a:75:8f:13:be:d5:07:c2:
                    8a:ab:12:9a:77:33:58:d8:7d:ca:5f:2f:d2:ef:47:
                    aa:01:43:cb:3f:62:ad:9d:73:d1:96:5f:df:c9:fa:
                    42:46:bb:fc:83:c6:9e:c6:ca:66:b9:da:df:58:30:
                    ea:89:ab:51:fa:6c:09:0d:4a:4a:7a:97:c2:80:44:
                    04:b0:f2:c7:c8:c0:98:a3:2f:14:b7:11:b2:9d:f9:
                    1d:f6:86:d9:bf:af:d8:fb:50:5d:25:69:c6:fc:6f:
                    39:e7:52:fc:bd:bc:33:64:04:f7:7a:d0:24:38:60:
                    c8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5B:5F:4E:14:42:5D:7D:74:74:B1:50:60:D4:33:FE:6A:E1:C1:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b58a680d-a56f-33ef-9b5d-c1e0ba8c10d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.90.220.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e8:f2:cf:33:1f:a8:d7:45:a6:ec:c7:dc:cc:8a:35:ee:e6:
         0b:64:6a:04:21:d0:79:7e:4b:3b:eb:1b:e6:40:37:3c:b8:71:
         a1:43:4d:3c:7e:86:f9:3c:b3:e2:f5:08:c1:ff:7a:26:21:1d:
         7b:b7:de:d9:02:de:aa:a6:aa:b7:55:ad:ff:1d:3e:12:0a:0d:
         46:2a:82:86:73:51:b6:e9:ad:b0:69:0c:1f:54:58:dc:38:b9:
         ad:3b:74:92:d2:09:e2:ad:ee:54:1d:0c:86:17:62:da:79:aa:
         2f:36:a5:9b:ec:88:30:cf:0d:9b:db:0d:72:01:8a:c3:f3:5b:
         83:41:c7:b9:04:0c:6d:b7:0c:aa:37:68:4b:e0:49:c3:56:10:
         f9:5a:86:c5:84:c3:1f:a5:06:fd:19:6c:f6:47:cd:e9:dd:37:
         e4:5e:95:9e:38:38:87:ab:c2:03:b4:65:97:cb:dc:ab:21:1f:
         0b:4d:55:ae:97:69:f5:95:15:2f:e7:0d:40:c1:36:92:cd:49:
         2b:1c:73:93:11:fc:55:66:91:7e:11:14:a7:89:30:6d:f4:03:
         10:10:7e:c4:91:a7:12:98:ec:23:5d:f9:a6:0a:ee:fe:53:6f:
         cf:84:4e:d7:78:62:c0:66:71:1a:0d:a9:2d:64:f9:34:91:04:
         2d:51:65:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:46:22 2026 by rpki-client