Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/6957f461-2ef4-3cb6-9e86-0f7882d19953.roa
File:                     6957f461-2ef4-3cb6-9e86-0f7882d19953.roa (raw, json)
Hash identifier:          yURuAllqP7G5rtSw/Cam6Boy2OBttMGbYQEbIzlONLA=
Subject key identifier:   3D:87:45:DF:AC:69:91:13:6F:17:17:A2:EF:DC:9A:9D:E5:50:E6:8F
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584A4DA05138F3AF72EB48159D00
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/6957f461-2ef4-3cb6-9e86-0f7882d19953.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     26337
IP address blocks:        74.91.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:51:38:f3:af:72:eb:48:15:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=6482900e-2c8f-4cbd-a184-2bf27c0ccec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c8:5a:25:23:f4:72:83:10:e1:1e:85:8e:e9:
                    9a:43:62:15:29:27:3b:ee:c6:16:12:2f:83:0d:19:
                    1c:91:2f:83:82:e2:05:72:0a:c3:d0:80:d0:ca:27:
                    91:62:88:9c:5f:7c:5a:a2:85:f2:0a:5f:52:1e:9d:
                    14:4b:f2:e7:72:3e:7d:96:f0:01:82:21:88:4d:17:
                    d4:8c:53:d7:93:dc:b5:c0:ba:e2:01:5c:b8:0a:3e:
                    7c:a1:f9:48:28:0f:b1:09:b2:d8:e9:78:94:d3:a1:
                    e2:0e:3d:1c:09:bf:d1:c9:b6:dc:7d:c0:b8:c5:b5:
                    97:33:1b:fa:a8:02:51:25:63:78:b7:38:f6:d5:9a:
                    ed:ca:44:23:ab:27:47:47:1c:b5:8a:9f:0b:8c:f3:
                    8f:b9:0b:59:89:22:28:ee:f6:1b:79:8d:5e:a6:84:
                    a2:81:f5:f4:71:af:4d:de:b8:a6:65:8a:3d:0d:c6:
                    6a:cb:3c:86:34:ae:4f:86:db:56:e7:41:98:02:19:
                    14:4e:f0:bb:1d:ec:d0:e6:da:54:e6:24:cc:67:2f:
                    c1:01:2b:0f:43:e5:6f:17:28:3f:d3:b4:9b:98:30:
                    f1:14:40:9a:a0:42:73:70:1a:3d:d0:40:83:9f:50:
                    28:40:ba:d9:8b:55:45:ce:07:e0:64:5b:c7:20:e7:
                    c1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:87:45:DF:AC:69:91:13:6F:17:17:A2:EF:DC:9A:9D:E5:50:E6:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/6957f461-2ef4-3cb6-9e86-0f7882d19953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:aa:45:b0:d1:4a:f0:31:77:46:8c:70:22:f9:3e:7d:e9:b5:
         8d:f6:52:bc:7f:b3:e8:51:41:0a:4c:d1:c2:cc:ab:a2:98:0c:
         36:e8:0c:48:97:3c:34:78:45:fb:29:0d:84:f6:77:55:8c:dc:
         01:05:be:d0:c7:78:24:8e:a5:3f:1d:fc:53:d8:da:c8:99:25:
         ec:bc:a2:0f:52:da:94:bb:fb:31:b3:48:2f:3c:ef:56:cb:a5:
         a7:d1:4b:81:aa:ac:ca:e7:04:d3:f2:3f:9b:0c:8e:9f:0d:52:
         0e:e6:12:58:1e:17:e1:28:fa:94:42:17:6e:a3:21:6c:39:89:
         21:89:f8:54:99:ca:5a:b2:6a:34:b2:a5:f6:19:a5:ec:8e:13:
         a2:5d:4a:9e:c6:15:8b:6d:18:57:41:f5:da:a7:36:d6:3b:6d:
         fc:07:ef:e0:ca:c5:db:b1:a6:f8:5c:71:e9:52:66:b8:44:92:
         70:a2:0f:c6:c4:81:30:6b:d6:e6:68:ad:38:31:7e:09:ff:51:
         67:18:b6:71:c1:25:e0:a7:20:dc:71:06:13:0b:a7:ea:8b:2a:
         11:52:e0:7f:83:d1:60:f5:77:f4:12:6f:2d:53:5f:71:0e:07:
         ba:72:c0:52:f6:80:c9:ad:07:74:41:56:ae:89:df:1a:82:ef:
         61:90:1f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:07:40 2025 by rpki-client