Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/1f285f6c-d687-3140-8ca1-f1ce785e0d48.roa
File:                     1f285f6c-d687-3140-8ca1-f1ce785e0d48.roa (raw, json)
Hash identifier:          b1dLa2c4enPruHYPotlU5UUBVJNCxGQW7AOj1ZHGD/0=
Subject key identifier:   69:1D:B9:AD:90:84:7D:53:4D:38:9D:4F:FB:2E:2C:CB:8F:84:3D:A4
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584AC2E10CA15A92B3FEA6080E40
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/1f285f6c-d687-3140-8ca1-f1ce785e0d48.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     394089
IP address blocks:        74.221.128.0/24 maxlen: 24
                          130.41.132.0/23 maxlen: 24
                          165.85.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:0c:a1:5a:92:b3:fe:a6:08:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=b0b08ac2-c4ac-4352-a8ad-6a299971cf34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:32:a6:46:05:39:76:9b:b9:2f:7a:8d:ac:
                    c1:84:09:d0:8b:7e:1e:a7:b7:e7:96:92:b2:d3:7a:
                    65:5b:80:16:78:ae:b3:0a:09:1a:d7:f7:34:59:bd:
                    aa:19:cc:7c:d3:de:a1:ef:1d:2a:8d:3b:d8:56:6e:
                    51:fd:ca:26:32:ae:41:ed:da:b3:37:eb:5b:19:78:
                    00:04:b7:63:da:03:2d:4a:e8:1d:8c:8c:69:ff:5d:
                    69:a4:b4:14:0d:8f:76:1f:9c:ef:9c:5e:45:17:2d:
                    de:e2:71:70:04:55:fa:6b:7b:ea:a7:27:e4:03:44:
                    3a:8a:d7:7b:40:a8:2b:23:99:67:c0:9f:86:6e:6f:
                    3b:34:71:c9:81:57:30:ec:a5:97:a3:d5:0c:e7:0f:
                    70:fc:57:46:d7:35:34:37:cf:1f:ec:aa:6e:c2:ef:
                    61:9a:7a:e3:0d:94:84:14:76:13:5f:55:df:a8:69:
                    ea:a3:8a:39:88:51:1e:d3:ae:22:67:73:69:02:ad:
                    c3:23:26:22:a9:2c:9a:8a:27:b1:d3:95:0a:29:58:
                    7e:81:51:f9:f7:80:82:24:dd:ff:b8:a8:23:da:20:
                    1e:21:37:5a:e6:8e:8b:1d:e6:82:93:ce:0a:c4:54:
                    b5:81:6e:ad:6e:e5:08:4e:8b:e8:a9:33:2e:a1:88:
                    9d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1D:B9:AD:90:84:7D:53:4D:38:9D:4F:FB:2E:2C:CB:8F:84:3D:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/1f285f6c-d687-3140-8ca1-f1ce785e0d48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.128.0/24
                  130.41.132.0/23
                  165.85.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e2:ae:8f:a1:65:fb:9a:81:bc:d4:00:60:1e:fe:97:21:11:3e:
         17:35:03:42:ac:92:9e:78:34:c6:fa:5d:3a:61:46:97:76:8f:
         bf:37:55:b0:39:90:31:40:28:02:0f:e4:ba:f3:0a:ed:09:30:
         2b:0d:a2:a3:ff:70:8f:30:75:9f:d0:69:03:aa:0a:c5:9a:23:
         2b:6a:60:5d:33:c0:1a:5f:0b:3d:5f:87:c1:83:29:f9:fc:73:
         ce:db:fa:bd:3f:e4:54:e6:06:37:b9:6c:20:33:81:26:83:ab:
         bb:dd:22:bb:eb:30:0e:bc:b4:63:80:e1:8b:72:bc:64:64:6b:
         a0:3e:4a:17:7d:6c:2d:b4:70:95:11:c9:7f:2e:a6:83:f6:ce:
         37:ff:18:54:60:ae:50:cd:9c:59:5f:98:5f:52:8b:86:fc:33:
         99:67:c9:92:5f:16:7e:69:db:38:09:18:4f:9c:30:cd:f6:02:
         66:37:26:50:6f:7d:4b:32:80:84:67:7f:82:af:92:7a:8e:70:
         6f:63:26:82:13:38:41:56:de:da:a3:a6:35:bf:b3:20:8f:ac:
         b1:33:1b:f3:aa:e6:02:52:77:0f:71:9e:d9:4d:ee:b0:0b:8b:
         d2:70:7d:d6:98:40:ff:a8:8e:16:06:b3:5f:9e:16:85:1c:9c:
         dd:ce:9a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:04:32 2025 by rpki-client