Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/7166c6dc-1bd4-3a39-b1c1-e4d0091604c5.roa
File:                     7166c6dc-1bd4-3a39-b1c1-e4d0091604c5.roa (raw, json)
Hash identifier:          efFYaASMEUeg9RAmVkn/sNe/1LRKTqN9ei1W/xLxpr8=
Subject key identifier:   90:90:69:7A:05:0B:DE:42:E7:AD:7C:CF:75:3E:1B:23:93:B9:4F:DD
Certificate issuer:       /CN=f6e6ee11-cd51-4809-bddc-1460c28a9121
Certificate serial:       010D0C9F4328584AB378AA867EF9D55E55A22800
Authority key identifier: 2F:64:D2:D2:30:94:F0:74:84:57:4C:F6:ED:28:61:F2:B1:E8:27:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/7166c6dc-1bd4-3a39-b1c1-e4d0091604c5.roa
Signing time:             Thu 31 Jul 2025 12:33:35 +0000
ROA not before:           Thu 31 Jul 2025 12:33:35 +0000
ROA not after:            Wed 29 Oct 2025 12:33:35 +0000
asID:                     30710
IP address blocks:        208.90.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:78:aa:86:7e:f9:d5:5e:55:a2:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6e6ee11-cd51-4809-bddc-1460c28a9121
        Validity
            Not Before: Jul 31 12:33:35 2025 GMT
            Not After : Oct 29 12:33:35 2025 GMT
        Subject: CN=c4c52263-a9ae-4b96-8a5a-111cc6e599d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:11:f0:67:2f:16:d1:c0:46:5e:85:af:65:
                    33:1f:a5:5f:b2:5e:a7:41:ce:0c:ef:ce:84:06:e0:
                    ee:1d:c9:0d:0c:87:ab:d1:89:92:68:5e:fd:4a:c2:
                    ab:de:17:f8:04:be:67:f1:e3:3b:f6:08:c7:12:9a:
                    8b:b6:e7:02:40:6c:83:0e:6f:2f:e8:7e:3f:55:74:
                    d0:2a:6e:42:6e:ba:ba:8d:a9:ea:d1:22:7e:61:14:
                    3d:3f:0a:35:7c:7f:53:b1:64:0e:87:4e:6a:ee:5b:
                    00:76:fc:fa:11:7d:39:f2:89:5e:16:7d:e0:bc:02:
                    30:17:6d:5b:59:f1:7b:a9:55:ee:4b:fb:a3:30:10:
                    66:00:99:cf:40:32:92:8e:10:75:32:80:ae:04:f6:
                    bb:75:1a:ea:c1:6b:b2:94:00:0f:5c:4f:39:c0:da:
                    48:b9:67:7a:9a:21:99:99:f0:34:7d:99:ba:07:8e:
                    12:74:5d:59:ec:3f:95:06:48:67:79:dc:f9:52:69:
                    09:2f:9d:3c:24:55:ba:d1:55:66:28:83:f5:64:40:
                    ac:5d:4f:75:cb:20:d9:91:a3:33:d9:c7:78:11:1a:
                    93:5a:7b:95:c9:e4:91:52:80:c0:32:24:b4:75:dd:
                    ea:99:82:9c:3f:fa:72:85:6e:0a:cd:71:c9:86:34:
                    29:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:90:69:7A:05:0B:DE:42:E7:AD:7C:CF:75:3E:1B:23:93:B9:4F:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/7166c6dc-1bd4-3a39-b1c1-e4d0091604c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.crl

            X509v3 Authority Key Identifier:
                keyid:2F:64:D2:D2:30:94:F0:74:84:57:4C:F6:ED:28:61:F2:B1:E8:27:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:96:1e:15:e4:83:14:71:7f:da:0d:a6:04:bc:0f:32:24:3f:
         30:6b:5b:e1:1e:f1:3e:22:ef:2c:55:98:2d:b9:47:fd:04:4e:
         1a:0c:f2:1b:84:f9:5f:a0:9a:d2:ac:81:9b:e0:45:73:7e:d3:
         a3:86:1b:a3:9c:f2:ca:71:f6:d6:de:fd:a1:cb:86:b1:b6:6a:
         9d:f5:2f:c9:8c:bb:74:00:b4:89:45:06:04:d7:29:57:b4:71:
         f7:ea:2e:82:65:06:96:1a:a1:b4:7c:a3:c9:db:0f:20:b3:d7:
         47:9e:e7:13:28:3e:eb:58:f3:15:27:e2:4d:0e:9b:35:b2:2c:
         29:a0:8b:72:9d:13:ba:62:64:c2:da:cb:56:c2:ea:67:4e:49:
         46:54:57:77:b9:45:f1:ff:af:60:85:d3:d8:24:5f:c3:2a:3d:
         d7:4e:73:bd:78:1a:cc:b2:50:0d:d5:fa:7b:e8:47:66:7d:41:
         22:63:2a:a7:37:32:60:6d:29:8a:88:e4:02:17:ea:cc:cf:42:
         6a:5e:fe:ac:a7:07:16:d2:0d:fa:cf:a1:1d:30:1a:70:86:e3:
         63:77:f2:8e:a8:df:e9:65:44:3a:31:fa:ce:10:56:8a:cd:98:
         75:d6:35:03:f0:d7:6c:59:62:3d:9a:e1:64:d8:d4:69:6d:64:
         1b:3b:d0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:05:06 2025 by rpki-client