Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d32d7af4-53ca-37a8-be70-cb3e353be5e8.roa
File:                     d32d7af4-53ca-37a8-be70-cb3e353be5e8.roa (raw, json)
Hash identifier:          zHzxyT0jTV2flRNB/Wm/AjO4dziM/7GRMKJMIIbjwzA=
Subject key identifier:   A6:F6:EF:F5:EB:65:3C:01:94:E8:CB:59:EB:11:75:0C:B3:7D:8E:7A
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584A9E9618D3D51763C7928F60A0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d32d7af4-53ca-37a8-be70-cb3e353be5e8.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     396982
IP address blocks:        169.224.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:18:d3:d5:17:63:c7:92:8f:60:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=af24e6ab-cdda-4b3e-8afb-99428eacef44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:4b:d4:8b:d7:2c:85:4d:91:5e:0a:89:a1:
                    f0:a6:e1:4b:14:33:d5:c2:8e:2c:63:55:2c:9f:b1:
                    7c:2c:89:c6:02:fd:b8:cd:e0:58:12:0f:b2:a3:ef:
                    30:73:50:ff:ae:49:69:98:d8:84:15:e6:85:73:89:
                    67:8a:d8:21:72:8d:ba:f2:19:c3:6c:81:bb:90:fe:
                    f7:cb:3a:2c:8a:a2:eb:6b:61:b1:6d:c0:f6:4a:10:
                    57:13:52:60:67:ae:89:7c:dd:a5:ec:c9:4c:64:d2:
                    7d:31:3c:30:37:c2:d5:43:f8:93:ec:80:4c:2e:c4:
                    60:f6:4d:3d:0e:fd:e1:65:32:e7:9a:38:d1:3a:79:
                    07:32:c9:71:19:7a:2c:46:bc:af:f9:b6:1e:06:1f:
                    a2:a5:f8:f7:cd:c2:2f:a6:b1:92:b2:51:0c:d3:0f:
                    da:20:80:a1:98:8d:2a:ae:f0:c7:12:57:db:ed:c7:
                    22:db:f4:5e:1b:a1:ac:c6:c8:1b:35:3a:72:28:33:
                    1d:b5:63:02:61:6a:8a:4f:89:20:19:2d:82:34:21:
                    9d:60:80:38:35:b7:10:dc:7d:bd:37:f6:97:e0:30:
                    16:b4:e1:63:82:db:7c:93:30:b7:58:fb:a5:7e:da:
                    fd:4e:0f:53:cd:b0:df:77:78:0a:45:f6:a9:16:56:
                    8e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F6:EF:F5:EB:65:3C:01:94:E8:CB:59:EB:11:75:0C:B3:7D:8E:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d32d7af4-53ca-37a8-be70-cb3e353be5e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.224.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ef:3e:ba:8e:9b:a8:53:80:2f:2e:cf:61:69:ef:7c:48:0f:8f:
         6c:89:4e:d2:66:98:f7:45:3d:6a:16:6b:15:60:98:49:f8:1e:
         cf:ed:9c:f6:f0:29:c5:81:7b:bf:09:13:09:a6:8e:8b:b2:28:
         1e:57:72:14:9b:d3:b7:4b:a8:f7:99:03:ce:90:23:47:06:0d:
         eb:37:16:f9:1c:8d:16:f8:37:58:2f:50:43:b9:5a:9b:09:01:
         ac:b4:fd:8d:3e:12:81:7f:1c:1e:a0:42:89:6a:4a:ec:33:b6:
         70:2b:54:6f:c8:f3:af:80:11:c6:c1:92:4d:9b:71:b2:da:28:
         5c:0f:f0:94:00:40:39:62:08:de:ab:52:97:cf:b9:74:ca:01:
         16:d4:36:d9:fe:ae:9e:ca:4a:2c:a9:82:66:3c:58:98:58:5b:
         b0:f4:c6:52:a8:e9:b9:58:61:c9:25:50:60:f4:02:0c:a9:fe:
         f5:be:29:56:8e:bd:54:29:af:22:2f:ff:05:c0:67:07:fe:b3:
         48:f6:e4:0c:3a:5c:3c:6b:02:44:bf:0a:ec:6f:a8:bf:2a:d6:
         4b:be:ac:e6:30:57:f4:4a:68:9d:35:88:82:1a:49:83:93:e9:
         1f:a8:d5:5c:58:91:e9:50:53:c3:dd:16:90:c3:de:df:68:80:
         91:3a:32:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:17:55 2025 by rpki-client