Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/f91ff171-78e4-3670-b494-44f38288d589.roa
File:                     f91ff171-78e4-3670-b494-44f38288d589.roa (raw, json)
Hash identifier:          okuylGk13eoYpV4LALWB2Hz83cdBAw242PGygfiY8Fw=
Subject key identifier:   56:F3:2F:A6:F6:9A:86:E5:53:A8:21:2E:88:51:10:56:45:FA:47:A9
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584A549B1D59AE85F75198C7DB00
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/f91ff171-78e4-3670-b494-44f38288d589.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     18526
IP address blocks:        74.113.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:1d:59:ae:85:f7:51:98:c7:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=ec8eb7d2-c222-4ce4-8bb6-f6b4adb40323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bf:9a:e4:bc:05:0a:f0:61:3b:1a:6d:9b:50:
                    a5:26:ba:80:16:11:7b:4c:c3:d0:ab:4b:7b:ab:d9:
                    62:75:9a:a5:62:23:f6:46:8d:3e:71:77:55:9b:1b:
                    15:66:5e:87:e6:59:2e:f0:58:88:b3:87:c1:fa:90:
                    60:bc:ff:b2:5c:69:0f:c4:2c:28:b7:86:b6:85:8c:
                    2e:e2:3b:a7:e9:a8:c6:81:f5:98:8e:54:78:e2:9e:
                    31:7f:b3:7b:3c:6a:9e:32:c9:64:dd:a0:e2:3b:b7:
                    38:d1:ee:f2:6a:34:46:61:35:a0:c9:28:ed:8f:91:
                    a7:e1:96:16:ab:46:69:fd:bf:57:8d:c1:b7:0c:f1:
                    4a:d3:2e:ac:32:a4:db:9e:ec:dd:3e:83:a6:d2:64:
                    b8:49:a8:20:59:eb:ab:a1:88:18:82:35:4e:7b:9f:
                    92:44:9f:b0:af:b2:4b:b8:96:6d:6e:83:9a:f5:37:
                    c0:9a:c0:a3:31:4b:22:fb:a5:08:37:16:91:98:82:
                    23:7f:89:00:3f:f8:38:0d:d4:b9:17:5a:d6:10:e5:
                    02:e4:6f:3a:d8:0e:4f:75:d3:36:3a:f1:a0:fa:4e:
                    34:5a:fd:eb:8e:ce:19:b5:02:d8:ef:52:51:42:e4:
                    83:79:ad:95:86:d1:4e:c4:a2:fb:0e:e2:8d:58:38:
                    dc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F3:2F:A6:F6:9A:86:E5:53:A8:21:2E:88:51:10:56:45:FA:47:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/f91ff171-78e4-3670-b494-44f38288d589.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:af:3b:6d:5a:a7:4e:ad:ff:98:bc:a2:8b:b1:71:d3:87:a4:
         18:93:1f:4d:ef:19:08:28:48:55:8e:36:14:20:a8:6e:33:27:
         49:2a:c0:2a:1e:67:6c:a6:2f:08:73:a6:26:27:a2:bb:42:10:
         4f:f3:bf:46:36:f5:54:f8:d2:20:ab:98:49:9c:3c:b4:95:e3:
         c6:b7:3c:56:97:a4:81:28:78:e7:37:25:35:d2:7d:d0:bc:3f:
         8e:7b:f9:50:b7:6a:db:0e:e9:18:43:c4:f8:31:d7:4f:78:fa:
         d8:9f:33:a7:5c:9c:ae:56:1d:91:fd:f6:47:86:22:94:69:19:
         3f:0e:92:b1:fc:3e:85:ae:47:18:da:a5:7d:15:88:72:11:79:
         e0:ee:b1:41:90:79:29:3b:3f:b5:bf:03:76:d0:4e:31:8d:bb:
         fc:16:90:48:5e:d2:fc:04:43:5e:64:d9:46:d1:2e:b8:92:20:
         c7:92:23:6f:d7:b7:7c:08:3b:6b:fa:26:8e:94:24:ad:a7:dc:
         86:d1:62:ba:ec:20:ee:90:3a:61:17:d0:b5:5b:9b:f0:2d:0f:
         fc:e8:8a:87:5d:39:59:da:f4:85:b1:27:1e:1c:29:c9:28:07:
         c2:55:f7:64:65:4f:5c:91:3b:d2:3f:1c:08:8e:4b:e5:67:32:
         8e:4f:4c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:40:27 2025 by rpki-client