Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/391d27fa-5c61-36ba-b7e5-4200f69ee018.roa
File:                     391d27fa-5c61-36ba-b7e5-4200f69ee018.roa (raw, json)
Hash identifier:          l6cKJ/BiAl/FcUPQ/hbsSrC0UkHWJDKBRto/DoK1628=
Subject key identifier:   00:B5:06:FC:FD:3F:DF:CC:E6:67:9A:0D:17:E8:98:EF:27:56:90:5B
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584A8146464E0DC48233A4A54A80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/391d27fa-5c61-36ba-b7e5-4200f69ee018.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        165.85.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:46:4e:0d:c4:82:33:a4:a5:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=945fa055-8bac-47c6-86c0-4d5fc2146d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9d:b9:09:ee:a0:35:1a:7b:98:ff:80:47:c5:
                    18:ac:48:5b:01:c0:e3:98:82:00:8b:ff:06:3a:21:
                    93:25:ce:6f:5e:4c:e3:32:89:fa:09:bb:7c:f8:e8:
                    d0:f3:e2:e7:c0:ad:87:7d:fd:b7:8c:c8:4a:c0:14:
                    1b:14:e0:2c:78:98:af:1a:1b:1e:f2:2b:ba:cc:7a:
                    40:7e:8f:da:09:a2:47:19:e0:42:67:da:71:7f:d9:
                    78:bc:fe:51:a9:c9:eb:30:b9:3f:b1:49:43:80:f5:
                    ac:ab:93:e3:6f:52:91:bf:55:62:6e:3e:b2:a1:12:
                    94:67:80:78:d2:1f:67:82:9d:6f:78:35:84:98:c1:
                    11:8d:bf:5a:13:d6:50:22:d0:dd:dd:0d:3b:11:10:
                    6e:b3:77:01:2a:9c:c4:95:87:59:cc:aa:37:29:60:
                    d9:d1:aa:b6:fa:4e:7e:c8:14:87:f5:c2:74:cc:1b:
                    cf:e7:b9:0b:5f:ca:1f:c4:5b:ed:a8:e3:a4:2a:99:
                    6f:12:3c:66:fd:52:df:22:e5:51:f5:9e:fe:bd:16:
                    50:08:58:75:e8:a8:8d:e7:2a:41:7e:d5:71:10:66:
                    e6:34:ab:c8:92:46:fd:b2:f7:58:33:d1:b0:c0:1f:
                    31:2a:9f:f8:30:67:02:3e:d8:27:8f:18:53:7a:54:
                    9b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B5:06:FC:FD:3F:DF:CC:E6:67:9A:0D:17:E8:98:EF:27:56:90:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/391d27fa-5c61-36ba-b7e5-4200f69ee018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:f5:6f:85:77:42:78:73:00:26:85:ed:74:d5:d0:ea:f2:4b:
         ea:49:7b:3c:48:a0:02:61:19:6b:8f:f8:ae:51:19:3b:99:8d:
         d7:21:d2:8c:66:d1:e0:11:32:1c:c9:99:82:14:f2:3d:e7:09:
         08:61:ca:20:2b:32:54:08:86:57:ee:2e:6b:21:7f:f6:15:53:
         be:0e:b7:89:61:11:37:88:59:a9:86:5b:60:32:38:c8:e3:18:
         51:6a:c0:75:2c:8b:4e:26:b6:4d:cd:b8:b1:f6:f6:29:09:46:
         b6:0e:9a:ad:39:73:ce:10:52:35:f0:9a:2d:37:3c:0a:92:03:
         4e:fe:de:94:e7:e8:d0:f3:19:e3:e5:43:7e:7d:a9:3a:d2:a3:
         02:8f:d6:0f:de:51:e8:20:5d:32:db:97:bd:11:11:02:a5:0b:
         73:59:32:f2:39:cc:1c:ec:a6:a7:bd:59:55:9d:cc:d7:67:19:
         8d:7e:b8:42:67:97:ff:6c:0b:76:55:c0:c5:ca:ea:fa:38:ec:
         07:6b:eb:5c:b3:fd:29:a6:3d:44:a4:11:44:4f:6e:03:51:1e:
         d6:d2:c6:f2:ec:c7:e6:93:6b:59:18:bd:2c:d4:eb:46:85:ab:
         ed:8f:0c:5d:28:b6:f9:49:da:04:c4:6d:ce:4c:82:e7:e4:3d:
         81:72:8d:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRkZODcSCM6SlSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
OTQ1ZmEwNTUtOGJhYy00N2M2LTg2YzAtNGQ1ZmMyMTQ2ZDAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ25Ce6gNRp7mP+AR8UYrEhbAcDjmIIAi/8G
OiGTJc5vXkzjMon6Cbt8+OjQ8+LnwK2Hff23jMhKwBQbFOAseJivGhse8iu6zHpA
fo/aCaJHGeBCZ9pxf9l4vP5RqcnrMLk/sUlDgPWsq5Pjb1KRv1Vibj6yoRKUZ4B4
0h9ngp1veDWEmMERjb9aE9ZQItDd3Q07ERBus3cBKpzElYdZzKo3KWDZ0aq2+k5+
yBSH9cJ0zBvP57kLX8ofxFvtqOOkKplvEjxm/VLfIuVR9Z7+vRZQCFh16KiN5ypB
ftVxEGbmNKvIkkb9svdYM9GwwB8xKp/4MGcCPtgnjxhTelSbQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAC1Bvz9P9/M5meaDRfomO8nVpBbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMzkxZDI3ZmEtNWM2MS0z
NmJhLWI3ZTUtNDIwMGY2OWVlMDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFpVVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAML1b4V3QnhzACaF7XTV0OryS+pJezxIoAJhGWuP+K5RGTuZjdch0oxm
0eARMhzJmYIU8j3nCQhhyiArMlQIhlfuLmshf/YVU74Ot4lhETeIWamGW2AyOMjj
GFFqwHUsi04mtk3NuLH29ikJRrYOmq05c84QUjXwmi03PAqSA07+3pTn6NDzGePl
Q359qTrSowKP1g/eUeggXTLbl70REQKlC3NZMvI5zBzspqe9WVWdzNdnGY1+uEJn
l/9sC3ZVwMXK6vo47Adr61yz/SmmPUSkEURPbgNRHtbSxvLsx+aTa1kYvSzU60aF
q+2PDF0otvlJ2gTEbc5MgufkPYFyjTs=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:30:16 2025 by rpki-client