Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e2dfd88d-0f54-3c46-b0b1-714a3f4af677.roa
File:                     e2dfd88d-0f54-3c46-b0b1-714a3f4af677.roa (raw, json)
Hash identifier:          gIi4WMtpR+NNKEOb7oSAKoMnmsqq7WbpDPbR08dnmY8=
Subject key identifier:   08:88:79:39:27:51:5D:93:6D:8A:1F:F4:E1:1F:22:76:4F:9F:BC:2E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3DFE5C9E0583BA315C38C280
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e2dfd88d-0f54-3c46-b0b1-714a3f4af677.roa
Signing time:             Thu 19 Jun 2025 10:37:35 +0000
ROA not before:           Thu 19 Jun 2025 10:37:35 +0000
ROA not after:            Wed 17 Sep 2025 10:37:35 +0000
asID:                     22773
IP address blocks:        174.74.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:fe:5c:9e:05:83:ba:31:5c:38:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 10:37:35 2025 GMT
            Not After : Sep 17 10:37:35 2025 GMT
        Subject: CN=06bedb42-c5d1-4b5d-aa7b-7eac0e0cfa05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7f:38:1c:ee:50:11:97:79:a9:7b:94:5b:09:
                    dc:42:d0:00:f6:ff:cb:1a:39:0a:1e:29:2a:cf:24:
                    27:06:18:e2:0b:3b:50:9f:8d:2b:f8:fb:30:1d:6d:
                    ac:cf:33:ad:8d:ae:88:8d:8c:5a:7d:42:60:5d:f3:
                    42:1a:49:4c:58:1b:4a:5a:68:19:2d:e6:3c:bc:b9:
                    c2:51:c3:08:53:e5:6d:19:2c:02:cd:6a:a8:d0:af:
                    6a:cb:1c:2c:ba:0b:d1:6a:b2:db:57:c0:66:7b:72:
                    4b:f0:be:90:38:26:08:86:02:9b:fb:ae:dd:7b:50:
                    98:9a:ce:22:34:d7:c4:ae:6c:20:6c:69:8c:55:7b:
                    91:aa:9c:a7:cd:16:d8:c4:02:6d:c7:c2:45:1e:93:
                    95:b0:63:dd:e4:20:25:e8:df:e4:81:c3:40:a5:81:
                    77:40:1a:27:4a:1c:03:55:f7:81:7e:13:c4:76:c8:
                    30:4d:66:c7:b7:16:04:44:ad:82:f2:fd:27:8e:1e:
                    a6:61:bc:5b:36:4f:44:14:08:83:48:7e:36:95:9f:
                    6b:86:93:ad:49:82:12:77:9c:9f:93:83:bf:e8:2c:
                    bb:8a:80:55:b8:96:b0:ec:3c:82:50:b0:8a:1f:2c:
                    ae:d1:a6:fb:67:2c:d6:5f:bd:2b:1c:e6:16:ee:15:
                    95:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:88:79:39:27:51:5D:93:6D:8A:1F:F4:E1:1F:22:76:4F:9F:BC:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e2dfd88d-0f54-3c46-b0b1-714a3f4af677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.74.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:7f:ad:40:c4:77:64:53:2a:79:ab:65:2f:f6:19:8d:e3:0b:
         2e:92:02:c5:07:88:b7:ad:05:84:59:f5:78:2e:55:8f:d1:e7:
         bd:c3:40:2d:3e:d5:c6:6a:f2:35:ec:72:9f:ed:8b:b6:45:02:
         75:13:f7:96:4f:07:08:e7:54:28:f2:6d:7a:6d:42:05:43:a7:
         9f:4d:d8:2a:61:9c:d9:22:a2:2c:45:f6:b7:54:d5:77:97:5e:
         0e:c0:0f:99:99:c6:56:c0:7c:fe:c8:3f:20:ce:50:38:5a:7b:
         5c:5b:98:b3:73:99:ba:c9:d2:71:49:62:a9:2c:79:c7:f4:77:
         29:82:ed:8a:ac:78:2d:d3:fe:8e:31:bf:e1:df:bd:06:25:b8:
         94:93:7c:54:6c:df:a2:32:7e:78:6f:e6:7c:33:0b:b6:a9:2f:
         6c:f9:5b:c9:ec:a0:f4:74:03:7e:23:fb:6c:db:fc:40:e6:7f:
         fe:8e:f5:ab:59:81:8a:84:fc:af:7c:f5:d8:3d:44:f0:0d:f5:
         72:86:ed:cf:81:49:6c:f0:24:cf:b7:04:94:be:30:b0:85:84:
         78:9c:f9:f7:1d:10:a9:8d:31:cd:cf:61:2d:02:de:59:a7:24:
         73:40:f6:ee:61:a1:21:f4:cf:6a:bf:81:21:05:0f:c3:5d:8f:
         59:6f:c9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:19:14 2025 by rpki-client