Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/252db782-9372-33d7-9608-d50c53b0dfe6.roa
File:                     252db782-9372-33d7-9608-d50c53b0dfe6.roa (raw, json)
Hash identifier:          MQoU5RYF7f0S0o8oj85dgqblb/goJgsHTB2uvxFWJ0M=
Subject key identifier:   14:6F:16:2E:8D:3A:5D:E0:D8:E4:4C:8B:ED:C0:3F:B3:78:5F:1C:CB
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584AADF11D3FE7F9A904232E6EC8
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/252db782-9372-33d7-9608-d50c53b0dfe6.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     54538
IP address blocks:        66.232.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:1d:3f:e7:f9:a9:04:23:2e:6e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=d0aa3811-5cd7-457d-8527-0856f55e1858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:78:70:46:19:e9:d2:64:e9:7c:32:d3:e0:67:
                    08:6b:21:14:ff:71:8a:b1:3b:83:39:91:18:5e:c7:
                    eb:10:dd:9b:e3:ea:b6:3b:eb:f5:eb:d0:76:f9:c3:
                    c3:83:ff:21:4b:e0:fd:52:96:77:ba:c1:17:63:04:
                    d2:1a:ba:cb:15:49:85:ec:89:02:fb:d0:e4:93:63:
                    4e:b5:2a:4a:bc:18:7b:11:2d:64:f5:8b:10:49:a5:
                    e3:a2:98:5b:c5:c0:8f:07:46:b5:ea:ad:f9:86:cb:
                    37:3c:cf:bd:5a:95:51:71:f7:7f:5d:71:89:42:8b:
                    a8:13:10:56:f6:33:14:50:2e:3f:ce:37:b4:56:7e:
                    29:ae:71:40:aa:0f:87:89:d5:ed:3e:1e:28:45:82:
                    d3:38:87:32:ee:bf:35:ad:2c:33:9d:63:dd:69:cd:
                    38:99:88:dc:dd:7f:72:b9:0f:8d:2e:7e:66:d5:d9:
                    a7:f4:17:f8:eb:c8:2e:66:51:84:ba:0f:39:b8:ae:
                    65:d7:a6:70:9c:b9:9b:8c:b4:2a:d6:8f:47:43:15:
                    52:3f:ab:02:c7:dc:5f:b6:b5:4e:b7:bf:dc:3b:2f:
                    56:8f:e3:18:d8:d4:6c:bd:34:a3:ff:93:45:d7:52:
                    89:f5:76:8c:03:e1:6b:e4:de:91:ea:35:f1:64:63:
                    8e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6F:16:2E:8D:3A:5D:E0:D8:E4:4C:8B:ED:C0:3F:B3:78:5F:1C:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/252db782-9372-33d7-9608-d50c53b0dfe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.232.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:fa:d8:71:4d:21:c0:8f:bc:ed:43:01:b6:95:f6:f3:96:33:
         03:03:cc:64:76:03:3e:2c:0d:0e:ba:c1:0d:be:78:60:53:7d:
         45:56:88:12:e1:53:55:d3:3a:98:a7:7c:72:04:5e:00:83:ba:
         51:26:b5:98:c9:ff:24:7a:39:18:d4:e0:2e:25:36:49:d0:6d:
         d0:80:65:2b:ed:9c:75:49:88:ef:28:91:a0:40:af:d4:00:1e:
         62:ee:63:56:f0:b6:ce:58:2a:97:29:e9:d6:31:be:f0:82:3b:
         31:b4:a0:27:c1:97:1e:92:0c:1e:23:fb:17:26:26:6e:85:12:
         ca:61:9e:9b:fe:5e:9f:8b:89:98:ed:80:18:76:e2:2f:8e:c6:
         ed:1d:30:b7:c7:d5:a1:65:9a:67:c4:dd:b0:b1:a4:af:d9:a1:
         53:7e:0b:27:29:1e:a4:8a:f7:1d:36:01:cb:68:4d:ef:c9:61:
         41:1d:79:5d:1c:2e:26:ab:c8:36:af:6d:8a:c6:86:88:9e:9e:
         95:7f:89:e0:a8:bd:63:33:e0:be:65:72:e8:d2:da:48:53:d4:
         65:db:f4:5a:fd:aa:3f:70:b6:fc:88:40:97:15:fb:3f:09:7f:
         14:e5:af:98:c3:8e:7c:90:f4:26:54:b2:4a:c1:64:a8:a7:5a:
         1c:08:f7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:30:20 2025 by rpki-client