Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/9a3837c1-ca21-39be-922b-e7adeab29c49.roa
File:                     9a3837c1-ca21-39be-922b-e7adeab29c49.roa (raw, json)
Hash identifier:          hUq0YNAJApiYF0q5PuAE5XeRJSnvTJq9NSvmiT86iGY=
Subject key identifier:   E3:81:3F:B5:B8:65:BF:D5:91:BB:01:76:2B:F8:22:53:1B:6A:2C:56
Certificate issuer:       /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial:       010D0C9F4328584AAB265F529F3AF7C3401E8040
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/9a3837c1-ca21-39be-922b-e7adeab29c49.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     397666
IP address blocks:        167.253.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:5f:52:9f:3a:f7:c3:40:1e:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=10d63038-59d9-4621-b2f0-a924145ca92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:10:95:a3:5f:e8:4a:b0:a8:fd:51:30:b0:
                    1f:2b:38:ae:a7:18:b5:b5:c2:64:3e:26:ad:c5:97:
                    b4:cf:63:9d:cf:dc:59:59:5e:1d:8d:91:44:8d:f3:
                    05:fb:ea:6d:03:b5:47:36:75:ef:46:a3:67:fd:5a:
                    08:59:b2:39:00:87:af:09:5b:5b:ef:f7:8e:4a:cc:
                    aa:9a:ce:af:e5:ca:ec:a7:58:36:b9:14:cd:e9:b9:
                    f5:3a:77:7d:d9:53:fb:8a:7a:27:2c:d0:d4:10:66:
                    83:5e:31:36:22:cd:55:94:c6:4a:5d:63:26:25:49:
                    bd:69:fc:f5:26:d5:4a:f8:9e:29:69:18:bd:41:4b:
                    77:c0:90:ff:c6:b1:67:ed:b5:c0:47:a5:a5:5f:d5:
                    91:d7:91:5c:82:08:ee:b5:0d:49:5b:6f:a7:3b:b9:
                    66:c9:41:31:1a:16:97:52:3d:7e:7f:f0:c0:4e:44:
                    e9:43:86:67:0c:32:87:9a:37:23:05:a7:00:b3:7e:
                    13:46:0e:02:99:f9:2f:5b:0f:42:ca:9b:1c:d6:29:
                    6e:03:60:2b:b4:1a:72:9e:fd:eb:ca:1c:d0:8d:ad:
                    74:a8:3a:c4:7d:bc:39:12:a2:13:0c:0e:36:87:a4:
                    dd:e1:b9:64:13:f3:1b:0f:e5:1a:ae:f3:6c:0d:46:
                    cb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:81:3F:B5:B8:65:BF:D5:91:BB:01:76:2B:F8:22:53:1B:6A:2C:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/9a3837c1-ca21-39be-922b-e7adeab29c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:ae:d8:b8:8d:88:25:46:1f:7f:df:a1:5a:44:40:69:c6:eb:
         04:69:e2:09:8f:7e:fd:18:ee:d8:de:34:aa:4b:6d:01:68:e8:
         6b:3a:b5:fc:6d:19:a7:d0:1f:ea:be:9f:f4:8f:c4:54:7f:7c:
         e1:f6:2a:a5:b4:7b:8b:ab:15:69:cf:e2:fd:fe:f4:38:9a:d5:
         ed:b3:e6:12:da:c8:9d:3e:02:44:87:d8:e0:54:ce:7c:e2:b9:
         7c:2b:eb:a0:fd:34:bd:3f:74:9c:22:a7:fc:9a:8f:04:90:12:
         50:01:08:6f:04:c2:f5:63:64:f9:95:09:32:e6:32:07:2b:4f:
         ac:1d:02:ea:d1:38:46:86:95:86:f3:99:b6:27:72:6f:00:b6:
         15:47:0d:dc:82:3d:bc:80:9e:41:fd:40:d5:a5:72:bd:e0:0c:
         15:21:a8:b4:a1:2f:b4:be:94:16:62:6a:8b:ce:bd:de:9b:ee:
         59:66:01:11:f8:6a:a2:c6:42:9c:e4:36:cc:ce:e2:e4:ba:b4:
         8d:e7:b9:d6:37:45:f2:1e:d8:67:1b:74:81:e9:88:89:d1:e1:
         d9:a8:9d:b8:32:b1:a2:d3:d3:53:8d:7e:46:ee:66:b9:23:7d:
         53:e9:9f:4f:48:ed:4f:a0:7e:3f:6b:a8:d2:8f:46:6c:4a:9c:
         76:01:a8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:39:45 2025 by rpki-client