Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/92d252c3-d190-30bb-970c-723375fc2b2e.roa
File:                     92d252c3-d190-30bb-970c-723375fc2b2e.roa (raw, json)
Hash identifier:          6OX0Yi9toO9KBeRYFmLOqs7tmvegrrg94iXVexxGe58=
Subject key identifier:   4E:C6:38:76:03:33:D9:86:CE:E4:8C:9B:44:A7:06:0E:AD:DB:7E:80
Certificate issuer:       /CN=5ef47802-71c5-4583-b0cb-8a40855a7c8b
Certificate serial:       010D0C9F4328584AB494E8364ED67363583BAD80
Authority key identifier: 84:C5:9C:97:A0:F3:86:4C:E8:E3:92:B4:78:80:B0:D2:08:F3:67:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/92d252c3-d190-30bb-970c-723375fc2b2e.roa
Signing time:             Thu 31 Jul 2025 22:06:18 +0000
ROA not before:           Thu 31 Jul 2025 22:06:18 +0000
ROA not after:            Wed 29 Oct 2025 22:06:18 +0000
asID:                     26239
IP address blocks:        208.90.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/5ef47802-71c5-4583-b0cb-8a40855a7c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/5ef47802-71c5-4583-b0cb-8a40855a7c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:94:e8:36:4e:d6:73:63:58:3b:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef47802-71c5-4583-b0cb-8a40855a7c8b
        Validity
            Not Before: Jul 31 22:06:18 2025 GMT
            Not After : Oct 29 22:06:18 2025 GMT
        Subject: CN=bf7103d6-4147-4323-86ce-3bf4d77e6bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:98:79:10:ed:c9:87:a2:21:aa:1a:f1:40:06:
                    43:8c:de:3c:67:d6:81:68:9e:8a:86:38:88:f0:16:
                    ef:4e:fa:5a:3d:8e:94:3e:39:68:36:81:21:48:47:
                    a8:22:a2:3e:c5:14:eb:e9:29:48:9c:85:09:cf:3f:
                    a0:48:e8:88:66:2c:0e:e3:cb:e2:20:e4:df:1c:c6:
                    8c:48:3d:e5:b1:69:30:ac:07:6d:bd:d7:67:f3:9d:
                    b5:91:0e:e8:b9:cc:6c:dc:a1:06:ab:af:38:9a:88:
                    e3:09:f1:f1:d6:65:ea:31:78:ad:85:75:9c:8f:62:
                    9c:8d:29:d6:e5:71:a1:8f:fd:d1:3d:ed:c7:b3:b1:
                    35:ef:a6:c1:4f:7c:60:0d:77:6c:aa:b7:b9:55:e2:
                    a3:a4:0d:a6:58:07:a7:2f:da:07:43:ab:14:ae:35:
                    08:21:f0:75:37:95:96:d5:fd:a2:5c:87:c2:b1:b8:
                    e1:b6:fc:c7:1e:45:bf:6e:dc:d3:b7:37:b2:49:ce:
                    b7:a7:f1:d0:0a:42:10:c8:a4:99:1f:8f:f5:f8:b3:
                    41:4b:01:1a:51:08:0b:e0:e6:7f:4e:9b:24:f5:70:
                    d5:98:40:0f:6c:d5:ff:75:d9:18:8a:f9:71:33:9e:
                    24:c1:fe:b7:d0:c0:59:9c:31:2f:c0:a8:c4:e0:82:
                    5d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C6:38:76:03:33:D9:86:CE:E4:8C:9B:44:A7:06:0E:AD:DB:7E:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/92d252c3-d190-30bb-970c-723375fc2b2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/5ef47802-71c5-4583-b0cb-8a40855a7c8b.crl

            X509v3 Authority Key Identifier:
                keyid:84:C5:9C:97:A0:F3:86:4C:E8:E3:92:B4:78:80:B0:D2:08:F3:67:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:9a:59:9f:0a:3d:9c:95:c9:19:41:3e:b5:17:c2:65:52:72:
         1a:77:93:40:1e:4f:f9:9b:8e:df:42:fa:e4:bc:85:34:bb:6d:
         8f:99:fc:de:eb:5d:49:15:70:56:fc:21:bf:c0:02:60:04:86:
         a7:27:d5:b9:45:ab:13:6c:39:8c:3a:bd:7b:e2:81:7f:85:b9:
         71:4f:7d:6b:58:7b:2f:c7:39:d3:66:d5:24:b4:ba:55:ac:aa:
         71:a9:bb:22:0f:11:a7:b2:8b:58:e9:99:c0:d1:37:cb:f3:15:
         bc:d9:34:96:a6:8f:92:28:c3:e4:b5:95:ec:88:16:fb:4d:22:
         d1:77:86:79:89:eb:88:1b:db:f6:70:bf:4f:90:ef:d0:a0:87:
         4b:ce:d6:32:3e:12:0f:85:1b:62:2e:de:8b:66:5a:e0:dd:44:
         85:f2:19:17:a4:3f:4c:01:10:3c:34:0c:50:a1:2e:65:c6:02:
         6a:4c:37:61:04:5d:73:f4:f9:cf:93:74:28:5d:ec:2a:54:47:
         14:c5:cd:ad:32:89:91:01:44:c9:16:5c:e2:88:3b:4c:3c:d8:
         07:7b:b5:70:e3:7c:73:a0:9b:da:32:68:ed:0b:84:64:e0:35:
         f1:58:c1:ca:c7:8b:49:9f:a1:e1:3e:25:e4:2e:d8:e8:7b:72:
         f2:f1:dc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:47 2025 by rpki-client