Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/bd89449d-0353-3c54-873d-1f0b04d7ddd6.roa
File:                     bd89449d-0353-3c54-873d-1f0b04d7ddd6.roa (raw, json)
Hash identifier:          RVRDVkx4jNDuT5KtDKuHl/wLWNwIifPHSGozay50VS0=
Subject key identifier:   D0:E8:E8:CB:F8:EC:B4:B7:B4:8E:C0:6C:1C:76:06:3B:DD:42:D4:FA
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F4328584B4E77423276FCE3FD3A4BD100
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/bd89449d-0353-3c54-873d-1f0b04d7ddd6.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     396185
IP address blocks:        74.127.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:42:32:76:fc:e3:fd:3a:4b:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=87f56911-f0f1-4b86-a324-b5c494e695ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:79:a5:9a:50:4e:4b:5e:d7:83:22:69:b2:f2:
                    13:de:75:4c:a6:07:08:34:b8:82:40:ae:2f:a9:a5:
                    3d:d4:e4:a0:51:49:2c:1b:ab:54:53:e4:c8:83:93:
                    bb:7f:03:98:65:e4:ca:b8:93:0a:6b:8a:9c:f0:59:
                    02:69:ff:8e:aa:37:78:fc:0a:c9:3c:7c:40:54:92:
                    ba:0b:9f:64:60:9b:d8:1f:e7:35:42:f1:44:dc:da:
                    7a:2c:15:c0:ff:aa:2d:cc:d5:e9:d4:77:2e:ad:cc:
                    d4:c4:5d:d1:29:86:7f:2a:d9:32:89:59:c4:50:2d:
                    e4:c6:ce:1e:e5:16:c5:c8:db:d9:04:6d:40:53:b1:
                    c5:52:24:6c:b2:bb:07:f2:3d:58:d2:a3:2e:4e:84:
                    ae:af:99:8b:57:f8:fa:1f:b6:0e:4a:96:af:f1:6b:
                    67:ce:62:32:dc:33:53:a8:77:15:6b:94:66:98:15:
                    a7:4a:3f:61:d7:e7:99:99:46:24:96:21:d9:d8:2f:
                    bd:8a:01:a0:86:23:8c:1e:55:90:7a:2e:15:85:ef:
                    2d:8a:d2:f7:0e:9a:f7:c8:c0:f5:e9:82:6c:c2:dd:
                    a8:6b:98:54:ea:81:9f:c6:70:42:c2:2c:ce:81:5e:
                    e0:51:48:4c:a5:ba:d7:79:e0:09:65:87:3a:ef:c5:
                    62:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E8:E8:CB:F8:EC:B4:B7:B4:8E:C0:6C:1C:76:06:3B:DD:42:D4:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/bd89449d-0353-3c54-873d-1f0b04d7ddd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.127.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:69:73:59:8f:cc:61:16:a2:3e:ee:4e:38:9b:28:99:f4:d8:
         31:09:dd:93:53:81:c1:e2:73:bd:80:50:a1:a4:86:ec:3f:cc:
         74:fd:a3:11:c2:7f:3b:43:64:61:c9:7b:50:36:68:8e:1a:c8:
         59:c9:da:cf:ea:71:c1:84:3e:70:4f:6d:dc:fb:0e:19:5e:c8:
         24:7f:bf:24:94:fc:f9:1d:a2:e8:23:07:c7:88:75:7f:52:69:
         63:41:01:38:61:42:ea:15:3f:13:1d:8d:b1:d2:ee:f6:db:88:
         02:43:70:e7:b0:e3:20:75:25:f5:6b:7b:39:e6:68:e5:0b:d3:
         16:dc:27:17:26:5b:f7:1a:6f:46:02:e2:42:b7:0a:67:57:e6:
         66:55:1d:8f:9f:06:cf:11:bf:0a:ca:b3:58:15:c8:b6:45:37:
         09:bf:89:e7:7e:38:ed:bd:d6:a9:94:60:63:70:9c:95:2d:1c:
         af:2e:21:3e:97:e1:a5:77:92:92:d0:8c:e7:d9:0f:d5:97:ea:
         0d:96:9f:13:5f:01:63:ef:f0:b8:7d:e6:2f:72:18:91:cf:d0:
         75:88:67:71:74:c1:51:f7:4d:a7:21:c4:47:c5:cb:ea:8e:ba:
         db:fe:80:3c:9c:5a:06:da:d8:62:c9:c1:a7:ff:77:41:2f:de:
         03:98:ac:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:44:50 2025 by rpki-client