Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1cbe8b39-258d-3871-85a7-9938398c95b0.roa
File:                     1cbe8b39-258d-3871-85a7-9938398c95b0.roa (raw, json)
Hash identifier:          vgYdve3IWox2KtU+jzNDlgnWoYoKBh72l/VaZU6Qtl0=
Subject key identifier:   AC:2D:82:26:8B:B5:D0:9C:B0:BC:0A:52:FB:DF:69:F6:CA:BB:10:40
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285849213436A5D331D370443C3800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1cbe8b39-258d-3871-85a7-9938398c95b0.roa
Signing time:             Sun 09 Mar 2025 10:20:42 +0000
ROA not before:           Sun 09 Mar 2025 10:20:42 +0000
ROA not after:            Sat 07 Jun 2025 10:20:42 +0000
asID:                     577
IP address blocks:        174.91.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:36:a5:d3:31:d3:70:44:3c:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:42 2025 GMT
            Not After : Jun  7 10:20:42 2025 GMT
        Subject: CN=35ca9e2c-69d2-4d96-9d98-e481899a2f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:72:ad:51:ec:85:b2:5c:36:1a:96:dc:48:81:
                    f8:e5:0d:4a:6d:5f:bb:17:fe:bb:49:7a:94:08:5a:
                    db:80:bd:55:c5:59:d9:10:58:15:32:fe:3e:34:3c:
                    f3:39:55:b0:d1:db:39:ad:74:a4:56:25:a8:41:70:
                    27:a4:b7:54:91:8f:1f:44:39:22:18:8f:a1:83:93:
                    c6:1d:bf:e9:42:b4:79:06:b3:a0:f6:ab:09:4a:f3:
                    5b:22:4c:12:43:2f:66:84:98:ae:f1:e6:ea:b0:64:
                    7c:42:9a:a4:91:26:d2:0a:d6:f4:11:9c:94:97:14:
                    f2:0b:e8:a4:77:39:62:de:f2:b1:ae:e1:ee:e8:2c:
                    c8:0f:1d:0b:da:8d:b3:44:66:07:3c:fe:5a:12:2c:
                    40:48:0b:62:0c:6c:5e:2e:22:2e:4e:e4:e9:f1:25:
                    45:5d:a4:5c:25:e7:b4:d7:e1:d6:98:55:ae:70:d1:
                    98:19:75:8d:ad:10:44:aa:de:61:5b:12:49:26:d8:
                    df:a6:bc:79:61:05:a8:01:b6:df:fb:9c:4f:f0:e0:
                    dd:8e:46:3e:51:82:7c:61:c2:f3:5b:da:cf:50:ab:
                    af:60:b0:30:52:e9:e9:1a:95:47:c1:da:ec:95:c8:
                    81:4c:4a:47:6b:aa:de:45:0c:aa:7c:02:eb:90:26:
                    3e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2D:82:26:8B:B5:D0:9C:B0:BC:0A:52:FB:DF:69:F6:CA:BB:10:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1cbe8b39-258d-3871-85a7-9938398c95b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.91.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:03:0e:35:4f:1c:fd:cc:e4:46:a7:1d:ca:87:d0:a4:6b:11:
         9c:aa:c9:38:2a:aa:6a:14:3c:e2:60:fe:a5:f4:5c:26:1d:12:
         74:b6:c7:5d:1c:75:4e:cd:c9:0b:b9:7a:6b:5f:b9:bc:69:3b:
         e5:2d:e2:7c:d7:5d:97:dd:1d:b8:ea:b4:df:22:27:16:b6:ec:
         51:91:a7:6d:75:78:d3:2e:05:40:f8:8e:b3:69:0a:04:da:ae:
         54:f7:7e:02:b3:ef:1a:ef:e0:a9:08:bc:a2:1c:ef:d1:bd:1d:
         95:a2:aa:54:85:f7:80:da:72:c1:7a:b0:38:f4:81:aa:67:39:
         c9:c1:30:71:57:3a:26:f3:69:70:2a:fe:59:dc:e3:0b:78:94:
         5c:38:79:26:ab:1a:ee:67:ac:a5:dc:bd:59:63:39:3b:c8:f5:
         bd:b5:d4:f9:e4:30:83:59:1b:0d:4b:d4:d9:cc:59:bc:ef:d2:
         ee:e5:a0:b5:bf:08:b3:3d:b9:6d:41:ad:50:b5:cb:a2:29:61:
         e9:75:6f:a2:a1:28:de:22:84:2d:35:52:e6:d5:ad:f1:9f:00:
         68:e1:38:92:b6:c8:e7:91:71:e1:6f:23:e0:ff:45:1b:91:18:
         70:f8:29:31:c7:b4:cb:1f:71:29:60:fe:be:9f:3a:73:c1:23:
         8d:da:2b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:45 2025 by rpki-client