Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/090d9968-e7a5-357c-baed-e1835a496f97.roa
File:                     090d9968-e7a5-357c-baed-e1835a496f97.roa (raw, json)
Hash identifier:          mSYx82sBz5QL0W5TOGlfOgMsNtbS3HG6W8Ko6h6zSKg=
Subject key identifier:   BE:EA:6D:00:7B:0F:15:98:A9:F4:B6:DD:02:6A:B8:22:86:EF:B6:F2
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584AB4EB7DF940D6552070D67E90
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/090d9968-e7a5-357c-baed-e1835a496f97.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     394089
IP address blocks:        130.41.144.0/20 maxlen: 24
                          130.41.224.0/20 maxlen: 24
                          130.41.253.0/24 maxlen: 24
                          165.1.176.0/20 maxlen: 24
                          165.1.192.0/18 maxlen: 24
                          165.85.0.0/18 maxlen: 24
                          165.85.128.0/20 maxlen: 24
                          165.85.146.0/23 maxlen: 24
                          165.85.160.0/19 maxlen: 24
                          165.85.192.0/20 maxlen: 24
                          165.85.208.0/20 maxlen: 24
                          165.85.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:7d:f9:40:d6:55:20:70:d6:7e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=98accff2-04c4-4b30-91e0-3a392f266533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:24:8e:cd:4a:f1:27:62:de:94:bd:77:54:e9:
                    df:16:3e:d2:30:8d:98:d2:5b:92:dd:33:1e:a3:4b:
                    31:29:7d:fc:64:37:50:d4:eb:a9:b7:e2:fc:0b:43:
                    92:2b:d5:f8:00:74:e5:fb:e4:9b:88:dd:c1:53:f8:
                    d3:29:5c:61:22:83:59:a5:4a:a5:63:c8:ff:4b:c5:
                    a4:fe:1b:59:ea:55:91:1f:79:2b:ee:e3:60:01:e1:
                    53:4c:9d:af:30:d8:bc:3e:7a:6c:04:fd:ee:c1:d9:
                    9b:07:dc:b1:10:a8:a8:2a:b2:33:78:fb:4b:f1:b4:
                    a0:55:da:f8:54:ff:58:ca:e6:f3:d3:f5:9c:9d:ff:
                    6c:52:45:67:b3:9a:8b:f5:30:ff:ca:12:f1:fe:a5:
                    ad:81:21:8e:58:19:b7:1a:a6:cf:64:a2:78:68:29:
                    f0:fa:8f:cd:0e:a5:08:cd:a1:35:e3:57:aa:84:86:
                    3d:71:83:70:4d:4c:ef:5e:84:c5:59:04:4e:5f:ed:
                    fe:68:63:40:a3:49:c3:61:2d:c3:77:35:60:61:70:
                    c3:7e:88:d3:27:21:bc:ef:58:ad:ed:7a:be:4e:44:
                    0d:db:f7:c0:de:3b:47:aa:bc:c0:ce:b5:d7:2e:77:
                    24:94:d3:74:86:9a:c3:61:fc:5d:93:62:7d:5a:d1:
                    e9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EA:6D:00:7B:0F:15:98:A9:F4:B6:DD:02:6A:B8:22:86:EF:B6:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/090d9968-e7a5-357c-baed-e1835a496f97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.41.144.0/20
                  130.41.224.0/20
                  130.41.253.0/24
                  165.1.176.0-165.1.255.255
                  165.85.0.0/18
                  165.85.128.0/20
                  165.85.146.0/23
                  165.85.160.0-165.85.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e5:52:23:0f:3b:ca:45:eb:3e:46:01:d8:b1:52:1c:29:fd:88:
         64:66:41:45:0b:b3:5a:07:11:52:83:f9:99:0e:21:ed:13:4a:
         e3:9c:bf:28:17:f3:44:83:eb:b0:ad:88:7f:4b:13:d9:a6:71:
         ec:ce:05:4f:23:7c:c0:80:16:56:29:ab:3c:99:fc:17:a7:d0:
         fc:19:ef:f5:ef:13:1f:36:aa:be:ab:75:30:99:f3:01:5a:f1:
         20:72:a7:4d:34:84:c1:fb:f7:c7:34:9b:99:52:59:07:3e:aa:
         62:8f:7d:42:41:89:94:59:31:6e:5c:ab:4f:6b:f9:4a:23:6a:
         59:99:e5:20:b8:90:73:10:78:6c:25:d6:94:dd:58:11:4f:03:
         af:72:40:17:7a:86:be:f9:c0:71:44:43:40:64:54:b0:10:3a:
         59:1d:12:90:b3:f5:43:12:77:08:12:49:80:5d:a0:51:59:2a:
         57:a9:91:0b:f6:e8:02:79:62:9e:64:f7:2b:ba:15:49:79:a1:
         dd:b8:a0:a1:5c:80:a6:41:b7:fa:1c:bc:df:c1:11:cd:a6:d2:
         29:b5:e2:d8:2c:9b:ab:94:94:7c:82:c8:bc:ee:ef:61:12:41:
         60:5a:d6:bc:f5:19:73:56:6b:49:67:02:fd:1c:fa:99:0a:91:
         30:c8:a0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:13:23 2025 by rpki-client