Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/36fd83c7-aef6-3a63-8be8-94e29621115d.roa
File:                     36fd83c7-aef6-3a63-8be8-94e29621115d.roa (raw, json)
Hash identifier:          erzuq+HtfMO1HW5/FStjj27/d0TG4FQzmDpb5Gl7fcg=
Subject key identifier:   BC:A7:B6:1A:89:43:32:4D:86:34:F6:92:91:D8:EE:79:1C:B1:9B:B5
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584A8410F5456D8A95F091D9C100
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/36fd83c7-aef6-3a63-8be8-94e29621115d.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     394089
IP address blocks:        74.221.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f5:45:6d:8a:95:f0:91:d9:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=74ffda29-b33a-4b09-8aab-c4275e336c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f4:0b:7e:31:1e:8f:aa:4f:5f:9f:e0:8c:32:
                    e9:f3:18:8c:31:af:c0:8e:04:fa:8c:84:7f:5b:1a:
                    c2:ee:b2:c3:4f:fb:6a:a5:6d:c9:02:76:a7:89:70:
                    8f:08:38:4d:da:a0:7e:a4:b8:77:8f:76:03:b2:04:
                    4e:08:33:7e:86:0e:a3:7e:a5:3b:16:85:81:13:42:
                    d8:e7:62:7b:b4:b7:be:ed:70:d8:64:7a:f9:9f:22:
                    13:0b:bb:83:65:28:ce:21:af:83:38:9e:03:ee:26:
                    7e:42:a1:8b:d6:c6:cc:af:91:39:ad:d3:17:22:9a:
                    ad:87:eb:a4:8c:0d:df:40:63:fb:f6:f6:16:7d:d8:
                    e6:01:00:be:80:93:f6:5d:bb:3a:a6:b4:5f:1e:4a:
                    64:3d:56:9a:c5:d2:1e:2b:0e:d6:b3:ee:60:33:37:
                    cd:1c:6b:54:2a:fb:56:11:4a:3e:7d:87:f9:3b:33:
                    c5:8c:00:61:f2:91:48:cd:f1:a2:c3:2a:07:df:90:
                    3d:ed:33:82:a9:5d:ea:a0:9e:c0:96:23:89:64:c2:
                    3c:7f:69:1b:fa:00:6e:b4:97:1a:8a:0d:04:7f:66:
                    8e:71:24:15:c4:c5:d8:24:4a:e3:89:fe:db:4c:e4:
                    2f:11:53:57:e2:29:b5:97:d4:a3:f8:31:0f:87:13:
                    87:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A7:B6:1A:89:43:32:4D:86:34:F6:92:91:D8:EE:79:1C:B1:9B:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/36fd83c7-aef6-3a63-8be8-94e29621115d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d0:52:ab:ea:49:c8:04:4f:b7:2d:5e:da:18:87:48:73:ae:
         17:cd:af:54:35:74:ec:25:fa:94:07:b2:fa:04:a9:51:13:8b:
         72:30:3a:91:64:62:34:8a:db:aa:d2:cb:7f:c7:51:8b:d2:84:
         39:91:89:2a:89:e5:6c:ea:c0:4c:89:d5:65:13:96:b4:f6:c5:
         1e:69:aa:19:a0:a1:c0:8a:ad:95:3a:46:dd:49:bb:c4:3a:5e:
         38:7d:60:3b:1f:dc:7b:e3:b4:97:24:ff:30:a0:a1:94:4b:4a:
         52:60:04:ec:50:ec:3b:3d:d0:80:a8:c4:d8:c3:8d:a0:b6:c9:
         7d:13:f6:50:a0:27:3e:d7:8b:5f:c3:db:39:15:3a:dd:2a:bc:
         ed:14:49:92:6c:a3:07:c8:6c:8f:11:a0:0e:bc:cc:b8:0b:b1:
         f9:1d:a7:81:af:91:63:ee:0a:ce:79:ae:c2:7f:4c:9a:7c:73:
         f5:0e:a0:a0:99:55:10:6c:40:7c:61:5c:dc:34:a0:72:06:0d:
         2b:02:c9:55:a9:61:66:ca:6f:f1:f2:95:b1:31:ad:c6:eb:52:
         66:f4:99:18:bc:50:2b:2d:11:a5:cb:d5:9a:9e:4a:f3:6b:25:
         1d:e2:04:f9:05:74:95:26:1a:4d:6c:b6:ba:1c:5e:65:07:ec:
         f3:d7:f9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:18:14 2025 by rpki-client