Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ef0db988-5844-36ad-81c0-bc0c8b2bc09a.roa
File:                     ef0db988-5844-36ad-81c0-bc0c8b2bc09a.roa (raw, json)
Hash identifier:          CEoB9iTnHyo2KxYdB0DigxBJxsikx7GkHjMEG0qQGpA=
Subject key identifier:   01:7E:CC:4F:8B:64:8F:73:1B:A5:39:21:2E:AA:3B:AA:C0:F9:34:5F
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584AA42B7DC3D323183669B306A0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ef0db988-5844-36ad-81c0-bc0c8b2bc09a.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        139.180.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:7d:c3:d3:23:18:36:69:b3:06:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=663b5e22-663a-43ed-b682-7fabe5ee1f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:95:02:9a:a0:64:8e:a3:c3:63:1f:77:e6:35:
                    ea:ed:5c:b4:89:c3:22:00:4a:93:45:7e:f4:c2:11:
                    6c:04:dc:71:ea:db:2f:89:3e:87:56:71:fa:25:d4:
                    de:37:4f:20:00:68:ae:36:91:80:39:45:42:e6:73:
                    c7:eb:32:ec:90:df:72:fe:3e:42:d4:a9:44:ac:03:
                    e4:7b:be:78:d9:a0:97:17:55:2a:c2:01:30:61:82:
                    4e:6a:a3:ca:4f:bc:3e:9b:71:76:cd:b7:83:ed:53:
                    ef:23:c2:f7:7b:fa:5e:0d:86:d4:76:5b:de:b4:e1:
                    bd:86:65:9d:48:fa:3b:80:9e:ad:1c:d1:a4:0e:fe:
                    05:69:2e:7e:c3:29:f8:78:7c:3d:5f:c0:fe:70:ef:
                    78:35:21:54:72:36:ff:86:e3:9e:df:a0:c8:25:75:
                    48:d9:b3:5b:18:cc:a7:96:a6:0f:75:99:20:f0:0d:
                    67:4b:e3:aa:bc:44:3c:c6:e1:f1:c9:71:3a:f9:95:
                    d5:23:84:82:f2:bd:84:36:25:ae:4c:6b:96:76:52:
                    b2:af:bb:93:96:4d:3e:1e:cd:94:9a:18:7d:44:33:
                    a1:b3:9d:96:a2:16:e1:2e:fb:06:fa:8e:38:d5:59:
                    68:35:8f:2d:8a:94:77:b7:bc:79:9e:f8:d1:df:78:
                    0d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7E:CC:4F:8B:64:8F:73:1B:A5:39:21:2E:AA:3B:AA:C0:F9:34:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ef0db988-5844-36ad-81c0-bc0c8b2bc09a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.180.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:e2:c9:d0:6f:69:27:06:c5:27:86:b4:ba:fb:7c:f9:5d:6a:
         73:09:da:39:bc:4e:3a:58:ae:e5:cd:f4:6a:e2:82:9e:82:00:
         88:db:fb:6d:70:8f:af:de:80:4b:d2:c5:f3:b4:af:f4:7b:3e:
         c1:0e:de:a9:c6:a5:64:df:9c:3f:f9:31:30:f1:37:69:29:c0:
         6b:6d:88:05:73:74:73:81:93:26:a3:9b:22:c1:53:d2:ef:d8:
         83:fb:b4:94:a3:1b:85:b7:39:f6:bc:39:62:f5:01:ec:62:45:
         b5:47:40:c3:b3:b8:b9:45:eb:b0:e9:c0:e7:b5:6b:3f:cf:c6:
         db:9b:6c:47:3b:ad:c9:02:c2:d8:70:c5:f3:62:36:5a:dd:af:
         d0:c4:79:e5:08:43:bb:fd:f4:5b:3f:27:14:2e:2f:fd:52:e3:
         51:67:a5:69:a2:ef:b4:cd:b7:14:c9:06:2d:e9:25:9a:fe:df:
         26:bb:31:c0:80:87:61:23:31:39:af:34:2e:42:d1:7b:e1:e6:
         4f:2c:78:69:cd:81:2e:d5:96:f1:4d:7e:ae:f5:cc:cb:1a:d1:
         7d:80:8f:bc:0c:9f:5b:c0:91:33:a1:e0:8a:40:4a:92:23:32:
         87:f1:16:6a:89:9e:f1:44:89:7a:8d:26:ba:70:ec:93:7e:43:
         14:14:19:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:11:29 2025 by rpki-client