Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bf6a1a9e-0948-3fee-a9d2-44a7309b0b7c.roa
File:                     bf6a1a9e-0948-3fee-a9d2-44a7309b0b7c.roa (raw, json)
Hash identifier:          50DVzc64LwItqotR4SQ0HOKZSrFgHBDvcBpRerJ2bbk=
Subject key identifier:   ED:2D:BD:5E:0F:0B:F7:97:2F:36:C8:04:7D:D1:22:EB:B6:6E:46:6C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA1203C1AC93794A2FBE1C80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bf6a1a9e-0948-3fee-a9d2-44a7309b0b7c.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     36522
IP address blocks:        174.90.220.128/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:12:03:c1:ac:93:79:4a:2f:be:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=6a9f4471-be39-44e6-80ce-0e90bddb34cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:98:60:ce:cb:b4:27:a5:4a:63:c4:e3:0f:
                    2d:81:7c:03:52:06:f5:eb:8c:e0:87:93:1d:7a:99:
                    32:a4:da:ad:0a:01:e2:7b:26:b5:fd:53:1a:7f:79:
                    08:e0:dc:a9:7a:de:5d:01:5a:e0:5a:ce:76:89:ad:
                    6e:57:9f:ab:32:2b:23:1c:f5:04:c3:18:2a:1f:e4:
                    3e:4b:43:47:06:a2:99:b8:e8:7d:61:57:25:c0:8a:
                    a8:33:7e:4d:74:17:82:12:43:d2:8a:8d:57:6d:84:
                    21:ed:c5:a1:8a:2c:43:bc:9e:bc:01:90:75:29:67:
                    bf:ed:df:84:07:53:02:26:bb:46:3d:5e:1a:d3:00:
                    f1:a4:3d:94:81:ed:11:27:fe:86:a5:4c:32:b7:85:
                    6e:ad:39:e3:58:dd:6a:04:c7:45:74:ae:47:4e:7e:
                    0e:fc:40:86:22:1c:5a:f7:8a:29:06:0f:4b:c3:14:
                    b9:48:80:cb:b3:06:68:7f:8c:7c:43:6f:c2:df:73:
                    0b:23:75:b8:17:72:a0:8a:90:32:1a:c6:46:ea:8a:
                    22:83:30:98:b8:37:b0:b8:1b:37:a6:4e:f4:44:b8:
                    3f:a7:c3:19:0b:20:25:81:4c:80:99:f2:8f:9a:f4:
                    1f:35:b6:1a:6d:af:30:20:3b:38:e3:18:37:cd:db:
                    45:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2D:BD:5E:0F:0B:F7:97:2F:36:C8:04:7D:D1:22:EB:B6:6E:46:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bf6a1a9e-0948-3fee-a9d2-44a7309b0b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.90.220.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c9:cf:13:ab:2f:dc:2a:8a:c0:ce:45:29:44:4a:56:be:5c:
         68:8a:22:1e:f6:ce:26:78:2b:c9:74:91:3d:bb:81:fe:c1:09:
         28:82:83:06:f8:2d:18:b0:aa:cf:7e:33:cf:03:c3:0d:d0:68:
         ec:79:91:0a:67:11:10:05:1b:c6:7b:36:7d:12:eb:eb:2d:b8:
         7d:c3:ac:f4:5d:b1:bd:a9:a2:2b:54:34:df:24:02:8d:33:db:
         a5:c6:e9:86:53:ed:b0:c6:92:78:d8:e3:07:aa:63:4a:36:93:
         a5:bf:4c:f0:d8:00:04:17:f3:f7:a1:a4:4f:cc:63:eb:bd:54:
         7a:1d:98:56:ee:36:a9:60:45:19:70:f5:2c:7b:3c:55:9e:b9:
         8f:0a:2b:74:fc:29:8f:df:f2:58:88:90:b5:0b:31:10:19:fc:
         c8:ca:b1:32:13:8b:5d:33:f5:be:04:a1:2a:d4:89:ea:21:3e:
         53:84:57:28:17:05:b8:00:ab:04:22:65:13:cc:f5:df:24:c9:
         9f:bf:01:d4:5a:20:c1:92:8b:e3:b9:a0:fc:a1:bf:75:d8:e8:
         e8:74:14:4d:12:08:ec:08:d0:73:2f:ff:04:5b:73:ed:24:ac:
         92:32:f7:5d:ce:6e:fd:fb:da:18:4f:91:05:8e:cb:ae:9d:b5:
         07:d1:a7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:01 2023 by rpki-client on console-fra.rpki-client.org