Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b90fbd97-8822-3745-b4a2-f3e544e9c78f.roa
File:                     b90fbd97-8822-3745-b4a2-f3e544e9c78f.roa (raw, json)
Hash identifier:          YEwADrb/xlYT9aiA/tSuGTyl4qduWP3fzqg58Hc52EM=
Subject key identifier:   0E:F3:32:C6:B9:68:66:B8:2D:18:E3:16:37:D4:98:94:97:50:AA:F0
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584AAB26692F2FAB5DF57D32AC40
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b90fbd97-8822-3745-b4a2-f3e544e9c78f.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     7181
IP address blocks:        208.69.108.0/22 maxlen: 24
                          208.88.240.0/22 maxlen: 24
                          209.59.0.0/19 maxlen: 24
                          209.92.7.0/24 maxlen: 24
                          209.92.39.0/24 maxlen: 24
                          209.92.44.0/24 maxlen: 24
                          209.92.53.0/24 maxlen: 24
                          209.92.56.0/24 maxlen: 24
                          209.92.62.0/24 maxlen: 24
                          209.92.68.0/24 maxlen: 24
                          209.92.70.0/23 maxlen: 24
                          209.92.74.0/23 maxlen: 24
                          209.92.79.0/24 maxlen: 24
                          209.92.88.0/24 maxlen: 24
                          209.92.90.0/23 maxlen: 24
                          209.92.137.0/24 maxlen: 24
                          209.92.224.0/21 maxlen: 24
                          209.177.16.0/22 maxlen: 24
                          216.27.0.0/18 maxlen: 24
                          216.27.64.0/19 maxlen: 24
                          216.46.48.0/20 maxlen: 24
                          216.48.112.0/20 maxlen: 24
                          216.58.224.0/19 maxlen: 24
                          216.150.128.0/19 maxlen: 24
                          216.182.80.0/20 maxlen: 24
                          216.211.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:69:2f:2f:ab:5d:f5:7d:32:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=18d823fb-6f37-4e15-8fdb-0dcc821d54c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:45:77:06:76:0e:c3:75:0c:5a:fd:ae:91:
                    03:39:7b:ec:82:aa:8b:f1:72:cb:3a:24:2b:01:96:
                    04:75:7e:a5:ce:85:b4:47:06:2b:84:c6:fd:53:9d:
                    6f:bd:60:e8:1c:14:d8:ee:b9:ff:c8:84:e7:a2:7f:
                    f4:01:99:6c:7d:ba:c4:e3:43:1b:3b:3d:6b:3b:05:
                    8d:ac:45:f3:4b:a1:ad:56:ea:62:2a:db:50:bb:73:
                    d2:f1:14:22:86:20:5e:e2:5a:26:9b:9d:4d:f5:1d:
                    8e:ca:9f:a5:8f:17:91:fa:fd:a5:e7:f8:62:d3:51:
                    05:c9:40:b6:6f:c6:0b:94:7b:71:99:31:42:ca:53:
                    b7:b5:0d:c1:d2:70:3e:a4:19:85:de:5f:34:6c:33:
                    40:61:10:95:82:d9:bc:84:76:75:47:15:94:f9:6f:
                    1a:5d:16:43:43:7b:4c:f6:6d:23:14:e8:68:cf:28:
                    e4:7e:80:ae:09:50:35:6c:6e:7d:88:ae:f0:3b:d9:
                    84:fe:70:ae:1f:5f:c1:98:e8:0b:6e:1a:fb:d5:50:
                    cb:88:84:7c:3f:19:9d:69:52:37:fc:43:c0:36:c1:
                    a1:15:2a:10:0b:92:c8:e0:91:22:fd:7d:90:c1:6e:
                    85:17:ee:9e:a6:ab:dd:7c:46:19:cb:92:96:dd:58:
                    3f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F3:32:C6:B9:68:66:B8:2D:18:E3:16:37:D4:98:94:97:50:AA:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b90fbd97-8822-3745-b4a2-f3e544e9c78f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.69.108.0/22
                  208.88.240.0/22
                  209.59.0.0/19
                  209.92.7.0/24
                  209.92.39.0/24
                  209.92.44.0/24
                  209.92.53.0/24
                  209.92.56.0/24
                  209.92.62.0/24
                  209.92.68.0/24
                  209.92.70.0/23
                  209.92.74.0/23
                  209.92.79.0/24
                  209.92.88.0/24
                  209.92.90.0/23
                  209.92.137.0/24
                  209.92.224.0/21
                  209.177.16.0/22
                  216.27.0.0-216.27.95.255
                  216.46.48.0/20
                  216.48.112.0/20
                  216.58.224.0/19
                  216.150.128.0/19
                  216.182.80.0/20
                  216.211.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:7d:ce:fd:00:f4:eb:7a:7d:59:cb:b3:a1:c6:55:db:40:8f:
         e4:05:6d:6a:e1:69:ac:a6:51:26:52:f3:9a:ad:a6:49:ea:19:
         1e:e7:3d:fe:5e:23:dc:8b:b9:fc:83:32:3e:38:b9:b1:ff:66:
         92:7f:53:27:c8:c6:d8:4d:c5:8c:f7:f2:63:40:7b:47:f6:86:
         55:e4:7d:82:51:50:18:30:61:c6:d1:5d:13:aa:25:ff:d4:ef:
         c1:10:94:c0:bc:73:6e:0b:2d:62:7e:aa:77:e3:c0:62:70:b6:
         81:cc:07:d1:d7:d2:c1:30:f3:e8:00:ec:2d:8e:92:0d:a5:d5:
         47:df:29:7c:cf:4f:92:87:5c:6c:d6:c6:58:4c:8d:0d:cb:fb:
         f2:3a:28:a5:7a:bd:ed:3a:2b:4d:6a:68:65:02:b1:e4:b3:f0:
         18:ea:8e:ab:fe:48:44:44:2c:36:fe:6a:4d:d7:d1:d9:f2:92:
         6c:9d:63:49:15:18:44:62:c7:51:10:71:90:a5:ca:2f:40:4a:
         22:17:78:3a:a4:77:46:88:a9:a4:70:4b:d5:15:e0:87:38:0c:
         26:42:71:d0:6d:9e:6e:a6:71:94:ae:6b:8f:77:2b:30:a8:3d:
         cc:db:ea:2f:b0:53:cc:cc:c6:fb:5b:da:a0:c1:49:25:40:8b:
         e2:d7:92:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:26:56 2025 by rpki-client