Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38db520e-9821-3640-9009-8718d2c1c92e.roa
File:                     38db520e-9821-3640-9009-8718d2c1c92e.roa (raw, json)
Hash identifier:          dn730ioGmKI0I4YvmbaJv6AwMiDR5RZXsiZDl3xGhqI=
Subject key identifier:   A8:E3:0A:E1:44:A5:C5:10:4D:11:C3:04:70:17:BB:08:5F:79:23:B8
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584ACCA6895084D92485F9D0D100
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38db520e-9821-3640-9009-8718d2c1c92e.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        184.186.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:89:50:84:d9:24:85:f9:d0:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=be9a77dd-74eb-44f2-b20d-abe21c3d3b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:f6:19:46:5f:77:8e:d4:50:98:ff:ab:64:
                    a0:dd:e1:8b:b3:a5:dc:08:0f:c6:ff:11:c4:e6:4c:
                    0b:74:0a:b7:3a:99:16:94:e7:87:cd:97:a4:2f:df:
                    07:88:02:08:81:47:02:dd:0a:a3:7f:68:8c:e6:3c:
                    78:52:fc:1b:d5:fe:67:d2:ac:c9:bc:ec:93:ba:28:
                    50:c1:77:24:fd:5e:36:3f:65:72:49:eb:d1:19:34:
                    a3:60:24:7f:e7:7d:83:98:79:e3:33:94:4d:3d:a7:
                    d1:d0:26:ec:7b:ed:25:65:a1:68:2b:af:13:27:86:
                    7f:9a:7d:cc:46:08:18:61:27:79:71:7f:9d:83:c6:
                    2b:27:f8:47:dc:e6:36:ed:e2:56:5b:53:b2:b7:69:
                    6d:dd:f8:2f:a2:cc:a3:5c:3d:91:b1:b1:56:b0:a1:
                    54:8d:c2:83:a3:9e:13:de:ff:59:c7:dc:df:78:52:
                    bb:38:89:da:b7:c5:79:ed:2a:55:b4:42:8a:3f:11:
                    58:42:01:7d:3b:a8:9f:5e:7a:3b:c5:55:0e:d2:03:
                    8b:ff:f1:7a:c9:fc:e4:5e:f6:97:74:8b:04:8e:4a:
                    9f:f5:06:45:f7:68:24:e0:a9:a7:22:4c:03:b0:35:
                    a3:d1:0a:8b:6d:c4:ae:db:f2:d1:43:a2:36:5d:a6:
                    6f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E3:0A:E1:44:A5:C5:10:4D:11:C3:04:70:17:BB:08:5F:79:23:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38db520e-9821-3640-9009-8718d2c1c92e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.186.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:46:c4:ec:3b:00:75:23:67:93:d8:85:b3:41:cf:af:e4:7e:
         26:16:66:7f:f8:14:f0:15:32:60:3b:6f:89:eb:e7:d1:dc:cd:
         da:f4:1b:a5:b9:27:4a:e5:9a:4b:27:1f:1e:9a:46:64:72:8d:
         72:9e:3c:25:46:b6:1c:43:27:60:f7:bd:23:3d:1c:dd:f7:4c:
         0a:0c:65:c0:ed:cb:35:33:8d:17:be:0f:a3:13:be:8b:c9:4b:
         56:c4:38:48:ca:09:25:d1:fb:ed:84:49:3f:e0:a3:08:eb:d4:
         8e:87:92:66:0b:b1:5a:b6:27:0d:91:9e:19:bd:17:38:89:08:
         6d:f9:5d:21:b2:62:8c:a2:28:49:47:e3:56:e5:5e:22:22:54:
         e6:fd:59:33:6d:8f:81:d1:dd:d6:76:15:11:a6:af:2a:7a:96:
         72:c9:93:a0:73:4f:b6:3e:c9:89:57:67:dc:30:5d:b4:73:ad:
         c1:58:85:c1:8b:31:81:96:fa:af:4b:a2:7e:11:c3:3d:93:2b:
         e2:7c:e5:05:75:ca:a6:8f:ba:cc:c5:58:41:bd:12:5e:7e:ee:
         0c:ff:c8:1b:75:9c:4e:69:db:80:42:61:6c:04:26:61:e3:24:
         71:e6:4d:cf:69:cf:af:b9:05:65:7f:98:af:3a:a7:fa:69:ce:
         b0:24:ee:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:26:55 2025 by rpki-client