Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/237965a8-6421-3801-962f-f8d0e3a18681.roa
File:                     237965a8-6421-3801-962f-f8d0e3a18681.roa (raw, json)
Hash identifier:          WxZpN0y6anmParkB7CUSzC/dlhYpVv/nLuqUGzgPq1E=
Subject key identifier:   D8:92:1A:48:6B:6A:A4:24:DB:5E:D6:CB:91:F7:EB:A2:FC:50:A0:A7
Certificate issuer:       /CN=5ef47802-71c5-4583-b0cb-8a40855a7c8b
Certificate serial:       010D0C9F4328584AB4AB551F2DD18926B20D01A0
Authority key identifier: 84:C5:9C:97:A0:F3:86:4C:E8:E3:92:B4:78:80:B0:D2:08:F3:67:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/237965a8-6421-3801-962f-f8d0e3a18681.roa
Signing time:             Thu 31 Jul 2025 22:51:29 +0000
ROA not before:           Thu 31 Jul 2025 22:51:29 +0000
ROA not after:            Wed 29 Oct 2025 22:51:29 +0000
asID:                     26239
IP address blocks:        208.90.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/5ef47802-71c5-4583-b0cb-8a40855a7c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/5ef47802-71c5-4583-b0cb-8a40855a7c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ab:55:1f:2d:d1:89:26:b2:0d:01:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef47802-71c5-4583-b0cb-8a40855a7c8b
        Validity
            Not Before: Jul 31 22:51:29 2025 GMT
            Not After : Oct 29 22:51:29 2025 GMT
        Subject: CN=20265c65-6694-4fcf-9be8-e0d18f0d5d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c4:b7:c0:9c:52:80:91:4a:3f:12:39:69:2f:
                    24:20:ff:1d:32:a0:25:ff:9c:f4:3a:6b:8a:f9:38:
                    4f:9f:8e:57:d8:6d:c0:6f:62:e9:84:55:b8:23:de:
                    b7:09:8a:cf:b4:b1:41:a9:c8:99:56:52:08:d0:c9:
                    6d:1e:bf:5c:52:74:97:5f:23:74:bd:ac:4e:3f:83:
                    8f:04:fa:e3:7d:3e:3f:95:5a:c5:f7:f7:d2:ae:bf:
                    d5:74:0d:e6:ac:67:9b:e1:41:41:25:d9:a0:03:a9:
                    cc:31:e6:da:00:da:00:a4:08:4a:b0:07:9b:23:c0:
                    c8:03:3f:30:81:31:93:6e:69:b3:83:8c:4a:ac:3b:
                    77:a8:bd:23:67:f7:cf:2d:58:c5:18:94:0b:d5:10:
                    da:c8:a4:f8:f0:72:33:68:d5:96:fa:da:1d:4c:66:
                    98:f1:60:12:1d:b8:03:11:a1:75:cf:fa:ba:86:0f:
                    49:68:c8:b0:9b:30:cc:2e:c7:6d:b9:6b:de:0d:53:
                    bd:79:76:8a:2f:82:fb:1b:dc:de:82:ae:ea:45:51:
                    cf:24:92:b5:af:13:6e:97:9d:4c:10:0b:31:75:b7:
                    e8:ce:ec:f6:3d:43:56:9e:e2:36:27:e9:80:50:42:
                    3b:4a:ba:d2:6e:e3:2b:b6:85:fb:da:ce:92:3f:ca:
                    bc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:92:1A:48:6B:6A:A4:24:DB:5E:D6:CB:91:F7:EB:A2:FC:50:A0:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/237965a8-6421-3801-962f-f8d0e3a18681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/5ef47802-71c5-4583-b0cb-8a40855a7c8b.crl

            X509v3 Authority Key Identifier:
                keyid:84:C5:9C:97:A0:F3:86:4C:E8:E3:92:B4:78:80:B0:D2:08:F3:67:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:d6:d6:d5:74:3e:98:e7:46:d5:40:54:ef:31:c2:55:63:15:
         92:92:79:9e:b9:3b:69:6f:79:06:1d:c1:f6:0d:d4:92:08:06:
         9c:3b:95:b6:4b:1f:31:3d:44:b7:78:16:a5:01:de:1e:30:6f:
         4d:f1:a2:03:80:c5:42:8f:de:3a:04:d1:df:4c:f5:16:ef:15:
         cc:f5:b1:54:40:bc:fd:a7:2e:11:d6:0a:6d:15:10:91:b3:ae:
         3c:12:97:73:b4:94:ef:f9:86:b0:21:ed:33:43:76:2f:9e:ed:
         dd:9e:9e:35:0e:7b:be:67:b6:af:7e:4e:42:74:bf:eb:2c:48:
         1c:07:f2:51:c7:a6:56:52:5e:16:d2:d8:3b:1a:22:dd:f8:92:
         7f:0d:1d:59:c2:ff:a1:65:1d:74:1d:21:e1:6e:99:81:73:ee:
         db:92:b8:5e:4c:7c:9c:16:05:45:a6:82:ef:a5:4b:29:cb:d8:
         e9:17:ab:1a:6a:6f:8d:4f:8d:fa:5a:ea:e8:81:f7:db:cc:f6:
         da:91:c0:2b:33:d8:b9:a4:c9:ce:51:88:e0:35:29:05:d2:30:
         b3:bb:84:82:cf:f9:01:56:e6:14:9f:83:8c:9c:4f:fb:93:a7:
         89:f4:5a:5b:bf:d8:7b:c4:76:4f:91:da:39:95:4b:38:d8:ec:
         5c:7b:54:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:54 2025 by rpki-client