Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9d75e60f-fff2-353b-aa43-f653f361c6a9.roa
File:                     9d75e60f-fff2-353b-aa43-f653f361c6a9.roa (raw, json)
Hash identifier:          cuZIS0LwyApw8MDVplMESzwi9uENKzWpbjkJnPs1olQ=
Subject key identifier:   D3:9B:73:97:B2:F1:F2:B7:6A:F1:05:E0:EA:2E:18:95:21:42:1A:E9
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584A050A7242D545AC1D16818A00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9d75e60f-fff2-353b-aa43-f653f361c6a9.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     394089
IP address blocks:        134.231.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:72:42:d5:45:ac:1d:16:81:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=41ef8179-d7d4-4a1b-9944-7ff523b788bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8e:5b:dc:09:21:fa:e8:0b:61:cc:36:75:7e:
                    ef:5a:9f:df:9f:d6:78:1b:76:ee:ba:0d:75:8d:e4:
                    24:4e:c7:7e:c6:b1:09:a8:bd:cb:99:20:54:7f:ac:
                    e7:34:6a:fa:e2:e8:f2:e4:4c:93:a9:f6:4b:df:b1:
                    29:7b:f5:38:15:7c:7a:86:fc:e8:a0:ac:3a:26:fe:
                    42:b7:80:7d:dc:58:af:a0:5d:fc:39:d5:c8:23:32:
                    92:fc:2a:6a:b3:35:26:ba:13:b3:c7:c8:3b:2c:07:
                    35:5c:f2:b2:32:35:11:49:b1:b0:f8:e7:3c:18:09:
                    9f:b2:ef:94:2e:32:a0:7d:63:c6:c1:f3:96:50:56:
                    b1:77:1e:c5:f9:3f:14:13:63:ad:c2:74:0b:28:8d:
                    42:2b:ff:6e:93:b2:01:cb:c9:cf:6f:82:4a:ac:80:
                    56:83:b2:9a:99:f6:10:e7:53:dd:f0:bb:67:29:da:
                    a0:48:6c:e7:27:06:ae:53:d8:83:37:46:1c:65:9d:
                    1e:3d:7a:b2:88:36:1e:b5:8a:71:c9:5a:66:ab:d4:
                    44:38:52:e2:e2:b7:2f:b5:b8:1e:a8:eb:21:6e:43:
                    e6:8c:c1:b3:9d:a8:49:9e:02:36:52:df:ed:70:8b:
                    74:18:85:7a:ee:58:c3:e4:81:b9:ba:7b:f5:b8:22:
                    09:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9B:73:97:B2:F1:F2:B7:6A:F1:05:E0:EA:2E:18:95:21:42:1A:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9d75e60f-fff2-353b-aa43-f653f361c6a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.231.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:1a:e2:8d:7d:c4:22:f2:85:be:9f:ce:76:72:b1:d3:0d:1b:
         79:68:01:8b:e8:8b:d3:b9:06:5a:2d:cf:a6:3a:0a:05:d4:b0:
         9a:74:4c:9d:60:1d:c3:15:da:d7:82:a4:b9:73:74:ba:03:60:
         fc:e5:da:4b:06:62:4e:b6:56:32:df:49:27:6a:12:74:7b:8e:
         0b:70:5c:5f:62:8e:67:5c:bf:0f:89:04:cd:d2:03:e4:3d:bf:
         ef:f8:91:c9:fe:ef:2d:f2:2c:10:3f:77:ee:de:f3:68:86:8a:
         71:ea:77:2a:11:96:67:51:f2:49:f3:08:6d:77:de:b1:07:e6:
         22:4d:5e:b9:26:8b:b0:24:99:e7:fa:91:d4:94:9b:12:7b:91:
         8e:69:94:98:19:b9:11:68:aa:0f:42:fd:d1:7b:45:63:8e:ad:
         57:02:b0:7c:62:42:0b:38:27:03:b4:5e:7c:15:d6:75:b6:d3:
         2a:24:e9:0e:10:59:bd:7c:9e:d6:26:ca:c3:97:ba:42:ef:6b:
         11:4c:5c:42:cc:30:f7:a3:2d:78:92:a3:13:97:7a:5e:39:33:
         36:26:09:c4:e2:ff:51:78:d5:32:54:36:21:ab:e7:a6:50:11:
         a8:c8:c3:fd:2b:21:e0:3a:3d:dd:c5:b0:02:f3:4f:ac:c0:0d:
         2b:e1:1a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:48:25 2025 by rpki-client