Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/19c2f3e6-d8fb-352e-a7d0-79b0373aa3f9.roa
File:                     19c2f3e6-d8fb-352e-a7d0-79b0373aa3f9.roa (raw, json)
Hash identifier:          hA0wCjYziNlKj+TIfOZ0lVFmm3sQ+Y8mp/KmRFp1v2k=
Subject key identifier:   F4:91:5E:C1:17:8F:90:8C:EE:ED:96:44:86:F1:A9:AF:5D:C9:6A:68
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584A2C2008FEE4C8C3EF7CCEF540
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/19c2f3e6-d8fb-352e-a7d0-79b0373aa3f9.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     31898
IP address blocks:        144.125.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:08:fe:e4:c8:c3:ef:7c:ce:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=689398fc-9379-4616-92e0-4098b7742e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bd:98:6f:93:6d:2c:34:f3:12:0c:73:76:02:
                    80:79:78:05:35:71:01:b7:a5:18:cf:a4:bb:a0:b0:
                    bb:f1:fd:15:a8:17:ce:97:fc:71:9d:36:63:e6:05:
                    b9:2d:2a:69:45:ac:3e:49:db:6a:e6:d2:97:40:4f:
                    50:2d:85:83:7f:41:15:f2:43:ee:53:a4:e4:3a:07:
                    23:dd:9b:44:05:e9:f8:94:e4:e9:38:31:b5:9b:4b:
                    15:df:4b:f5:09:51:b3:d1:fd:30:08:fe:c5:eb:52:
                    30:00:73:03:2e:df:35:9a:cf:c1:d9:0b:00:3c:ea:
                    22:44:ab:e7:5a:59:0d:d8:36:86:30:af:5a:2b:67:
                    ea:7d:98:8a:9c:59:28:59:3f:84:bf:19:47:4b:ff:
                    eb:4a:89:b4:b3:90:0d:72:d8:2f:ab:28:7f:67:c7:
                    a9:2d:c6:31:d6:c6:3b:a4:a0:c2:ad:51:4a:e5:6d:
                    52:88:6f:bb:c0:c4:d8:2d:13:5f:ab:12:13:33:ba:
                    fd:5c:95:c8:5d:c5:08:a5:44:09:da:d4:1c:2d:7f:
                    b3:05:3d:aa:de:86:fb:91:9a:e7:e6:6f:e1:88:1b:
                    60:34:56:5c:1c:f8:3c:ab:c9:74:87:bc:42:20:b3:
                    86:27:81:e7:eb:5c:25:83:22:1e:45:ed:df:cd:76:
                    35:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:91:5E:C1:17:8F:90:8C:EE:ED:96:44:86:F1:A9:AF:5D:C9:6A:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/19c2f3e6-d8fb-352e-a7d0-79b0373aa3f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a9:ce:29:52:46:26:c1:95:3e:d8:fc:98:a1:89:1c:6f:ba:
         ee:f3:ea:e6:22:b9:05:12:83:50:4d:2a:c8:87:7d:86:6b:cf:
         73:b9:6c:61:13:4b:3e:8e:2f:9a:b1:61:57:a8:76:ec:99:3a:
         c7:17:95:27:86:1f:b4:4e:1f:84:7b:25:49:a6:5e:4d:34:d7:
         a1:7a:59:0b:66:b4:5b:56:e1:a0:9a:94:df:fc:99:a2:b1:22:
         ad:b5:e2:33:cb:cc:0d:80:b5:cf:46:62:f6:57:21:27:c6:bd:
         d5:33:11:e0:1a:af:dd:47:93:95:57:4b:4b:57:7e:47:a9:59:
         08:99:e2:9c:b9:9b:69:a7:1b:42:a3:41:c1:78:48:8b:29:63:
         e6:53:63:8a:e2:bb:73:0b:47:80:66:de:21:12:22:ad:69:b9:
         32:2b:ef:84:4a:71:d6:ca:fd:81:f9:20:9a:53:ea:6d:45:96:
         fa:36:61:45:ba:9d:87:7d:e9:01:11:e7:cd:6d:4f:46:45:dd:
         da:10:8c:64:e2:86:0c:bc:d0:e4:54:ea:10:53:60:7a:2f:04:
         19:6b:6a:e3:ea:83:37:9a:af:f7:16:d6:db:e2:d4:63:0d:20:
         ae:bb:9a:1d:c2:a9:a3:83:f7:b3:88:46:6f:83:f1:ac:60:5b:
         86:51:11:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:37:41 2025 by rpki-client