Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7e20aedc-cecf-313d-b417-d44a44035c5e.roa
File:                     7e20aedc-cecf-313d-b417-d44a44035c5e.roa (raw, json)
Hash identifier:          Wh1hOa/4mgq9D708Qo0Q+Oa0KxV8lZqHJwZMJWLNSQg=
Subject key identifier:   C0:3C:CE:0D:4D:2A:8B:B0:C1:DF:3D:D2:90:BD:0A:C5:97:18:6D:5B
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285849D85F932AEC152BAE5BD5A780
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7e20aedc-cecf-313d-b417-d44a44035c5e.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     394089
IP address blocks:        165.85.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:93:2a:ec:15:2b:ae:5b:d5:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=d873aa1a-474c-4198-a2a4-ac29f0112961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:71:2d:ae:03:fb:e7:43:27:70:c2:0a:fa:d1:
                    6a:d0:ab:f8:f4:f6:5f:5c:b1:19:fe:6a:e5:b0:f0:
                    e4:7e:bd:df:ca:0f:d9:a3:1d:67:60:9b:35:c5:22:
                    24:41:c2:88:36:b0:95:74:8b:58:7b:ff:df:f2:c4:
                    60:ca:fc:30:1b:d6:23:32:3a:11:9a:49:04:d3:0a:
                    52:f9:56:7b:9e:70:aa:b5:56:bd:6b:48:55:56:de:
                    81:51:df:24:33:b6:16:d1:95:9a:55:f4:d2:ea:01:
                    ac:f6:b6:a5:f8:37:ea:80:78:c7:15:ab:5d:3a:c9:
                    ec:0c:ed:64:d1:ee:fc:0c:41:f0:83:f3:ed:0b:4c:
                    70:1c:65:39:79:cf:ba:4d:5d:fb:ab:d8:9e:fe:9a:
                    1a:3a:b1:31:2f:c4:23:5c:ab:43:03:3c:e5:c2:28:
                    5d:73:ce:31:57:e4:b1:4f:af:85:2d:c5:8a:58:85:
                    db:58:a5:bf:04:7b:49:cd:35:7e:b7:3f:b4:b6:1b:
                    ce:85:7f:c8:1c:46:3c:fb:ca:2c:86:4f:b8:01:af:
                    b6:fa:8e:66:b0:5a:85:71:08:66:64:f0:55:8b:f8:
                    17:d2:bd:f1:f1:27:0f:28:e7:c0:cc:16:57:6d:22:
                    5c:f3:8c:94:b1:49:f9:ff:49:05:b8:b0:d9:0f:f2:
                    05:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3C:CE:0D:4D:2A:8B:B0:C1:DF:3D:D2:90:BD:0A:C5:97:18:6D:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7e20aedc-cecf-313d-b417-d44a44035c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:62:d0:16:82:48:60:f5:0e:cc:77:67:74:f7:4a:87:24:47:
         2b:a3:b7:01:cb:d1:77:2e:de:a7:70:e1:85:ee:a9:7c:13:0c:
         5f:1e:d6:d0:8b:6c:59:14:d1:db:1b:ad:95:e5:2d:61:ea:f4:
         e5:9a:cc:3a:b6:65:76:bd:e3:18:c7:14:4d:fb:12:17:0d:a0:
         9f:10:89:31:83:2f:de:ae:0b:4e:d9:d9:e1:10:2c:b6:50:90:
         ff:47:c2:8b:d0:66:13:0e:b4:f4:95:47:1e:5a:2b:2d:a4:49:
         88:f5:c1:8e:5c:30:12:36:c8:87:a3:1d:3c:7e:51:91:4c:2a:
         d8:6e:21:9d:b9:05:15:e1:8c:e1:ca:fa:e9:30:8f:d1:ec:67:
         6c:b2:3b:de:f4:b1:0c:fc:8a:74:d5:b2:d4:b5:fb:a1:c2:da:
         47:27:a1:f3:d7:4f:17:17:0f:a3:82:45:77:6e:d2:48:c6:ed:
         bb:ef:7e:92:43:0b:5e:9e:05:d0:f7:10:b5:37:e6:0c:c1:23:
         a3:a7:09:fd:9f:e1:e9:d7:83:3e:7e:f5:06:5f:87:89:f6:6f:
         be:51:39:c9:f6:4b:7e:16:9f:b7:3d:b9:fd:fe:14:07:b7:35:
         9a:9a:73:02:21:65:9b:cf:1d:2a:62:59:94:62:d4:78:1b:9b:
         18:21:e6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:32:20 2025 by rpki-client