Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/67b30145-3947-3e20-824d-141c13f806de.roa
File:                     67b30145-3947-3e20-824d-141c13f806de.roa (raw, json)
Hash identifier:          W0hAnBPWueM9Mky03VpJKWb3f0iBTLiMVXtRJyyPLbU=
Subject key identifier:   64:8B:3F:05:3C:78:C3:A0:17:13:4B:39:3C:6E:3C:03:DC:6E:4B:25
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584ABBE62C85EE1BCBF9D5627800
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/67b30145-3947-3e20-824d-141c13f806de.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     394089
IP address blocks:        134.231.240.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:2c:85:ee:1b:cb:f9:d5:62:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=abe20a24-f583-4f87-9f10-2e223186b000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:47:cd:f9:f5:97:3f:53:d3:96:22:cf:e0:bf:
                    8e:6a:40:a1:fb:e0:c1:33:8a:b6:e1:a6:d6:b1:35:
                    ef:d7:dc:66:df:e9:cd:ae:01:95:c8:49:bd:b9:08:
                    1b:c3:b8:01:4b:11:25:f9:3e:44:84:c3:a6:e1:b4:
                    94:91:78:2e:41:05:83:1e:0d:65:3b:24:4a:14:b3:
                    fa:61:1b:7d:20:ac:bc:02:c2:46:fb:e8:2f:46:19:
                    98:6e:27:33:0e:e7:74:fb:ea:ee:1c:69:6d:2a:b6:
                    b7:c8:0a:dc:be:3d:3c:9c:7e:fe:e5:9c:fc:ff:5f:
                    39:02:8e:c5:54:ad:d7:df:b3:ac:d2:46:68:86:d6:
                    b5:19:20:54:8a:80:86:87:bf:99:09:db:b9:26:5e:
                    0d:38:6e:4a:86:7e:93:99:3b:cc:f0:15:27:5c:57:
                    67:44:c3:26:47:0a:52:09:79:78:d2:bf:ee:0a:06:
                    6d:17:ba:47:be:b8:2b:7d:6d:4a:a0:a7:d5:54:9d:
                    0f:b1:a6:72:ee:c9:2c:50:cb:24:17:07:78:89:b7:
                    00:99:50:18:28:57:b9:87:c0:f6:95:74:ec:60:54:
                    7e:ee:82:28:b1:b5:d4:d1:27:5a:69:f5:05:b7:b8:
                    eb:1b:eb:cb:ba:ca:e1:24:4b:cf:38:2a:47:d3:33:
                    37:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8B:3F:05:3C:78:C3:A0:17:13:4B:39:3C:6E:3C:03:DC:6E:4B:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/67b30145-3947-3e20-824d-141c13f806de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.231.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:a0:b6:a2:17:43:89:4f:a3:11:06:35:8a:9d:bb:86:b1:d7:
         7a:c7:09:f3:22:a5:92:e5:49:44:e4:34:a1:0c:96:85:7b:f4:
         35:44:4a:47:df:cf:7c:7d:ec:78:25:63:2d:73:da:07:4d:18:
         91:db:c6:f2:8c:c4:89:59:7a:d0:38:2f:dc:f0:6e:19:1e:7e:
         28:55:b1:b4:c1:9b:28:2c:d7:84:0f:25:7e:3f:f8:54:c3:fc:
         1e:4f:c1:2a:c7:3f:66:76:0b:19:3a:45:a4:c1:92:a0:a9:b7:
         59:ec:de:08:02:1b:b6:b4:36:6f:86:8f:28:e7:64:cd:00:ea:
         cf:8d:1b:bf:38:35:f0:71:9f:e9:68:9a:37:98:bf:d0:3b:61:
         d1:65:0b:36:b8:bf:2c:be:c2:60:2a:02:82:59:45:53:2b:8d:
         84:1f:b9:64:e3:28:16:2d:f7:a0:71:c7:ca:99:d7:ea:75:72:
         2a:60:af:f1:a0:9a:11:30:86:99:f9:e0:a1:03:be:21:19:8c:
         b1:59:ec:88:26:c4:97:b1:5f:34:21:24:e5:50:cb:00:ce:0a:
         c5:be:60:d5:7a:77:b7:2e:70:81:20:31:bc:5c:f1:9e:06:c3:
         cd:27:00:44:59:46:c8:f8:f2:09:5f:cc:70:4a:84:e7:45:ca:
         cb:e8:c2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:15:31 2025 by rpki-client