Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/f38deae1-6a5d-3a92-a8b9-cd103457df05.roa
File:                     f38deae1-6a5d-3a92-a8b9-cd103457df05.roa (raw, json)
Hash identifier:          oxqfqKjdeB149d+xak85U8vrMppUgBXoywegaQH4O+U=
Subject key identifier:   F6:40:06:C6:14:BF:BF:6D:78:AF:3D:7D:8E:40:E3:BF:01:40:63:EE
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584BE12610D3C3839EAB64D11C80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/f38deae1-6a5d-3a92-a8b9-cd103457df05.roa
Signing time:             Sun 16 Nov 2025 14:00:39 +0000
ROA not before:           Sun 16 Nov 2025 14:00:39 +0000
ROA not after:            Sat 14 Feb 2026 14:00:39 +0000
asID:                     16509
IP address blocks:        144.125.106.0/23 maxlen: 24
                          144.125.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e1:26:10:d3:c3:83:9e:ab:64:d1:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Nov 16 14:00:39 2025 GMT
            Not After : Feb 14 14:00:39 2026 GMT
        Subject: CN=56b54874-e022-4102-9e15-19efac72c21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:db:ac:0a:93:ce:67:0f:a1:0c:26:fe:52:b0:
                    d5:29:6b:82:c5:18:e6:e1:21:b8:ae:f5:89:e9:f6:
                    be:73:ff:f4:ac:f3:1f:5f:fa:00:d5:c1:85:d2:38:
                    9c:c2:a8:f5:35:1f:0d:1e:7c:83:c5:83:f1:b2:0b:
                    69:9f:ed:dc:43:77:0a:aa:e3:3c:2d:7e:24:1a:fc:
                    5b:8b:91:84:56:70:8c:47:5d:19:5f:5b:cc:4a:df:
                    ab:2d:d8:d4:e2:45:af:3a:99:99:cf:00:da:13:55:
                    8f:46:fb:be:10:f5:db:23:84:41:c5:bb:8a:a7:42:
                    2e:7a:58:13:87:bc:f3:d7:5b:ff:43:74:23:e7:e2:
                    d8:fa:b8:28:a8:52:e0:a6:e6:b0:f5:b4:80:de:e1:
                    5a:02:4d:71:e0:ab:7e:63:0a:0f:3f:14:c7:ae:f2:
                    22:6f:c7:85:9a:98:75:51:db:f6:d4:8b:6c:c7:37:
                    55:ff:49:c7:93:48:f8:02:25:ec:1d:58:3c:9a:48:
                    cb:35:c9:9f:e5:66:40:89:5a:b8:55:93:32:2e:72:
                    de:f5:9f:d1:02:c6:2d:1c:0e:40:69:e5:80:26:b7:
                    31:a9:cf:38:63:e0:d3:45:fb:40:85:c7:8c:ad:55:
                    cf:6c:97:34:72:5e:e5:60:3c:20:c9:29:a5:a5:1e:
                    99:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:40:06:C6:14:BF:BF:6D:78:AF:3D:7D:8E:40:E3:BF:01:40:63:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/f38deae1-6a5d-3a92-a8b9-cd103457df05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.106.0-144.125.109.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:08:61:e6:54:52:44:1e:28:57:83:05:82:de:ee:7b:ab:b4:
         76:27:fa:06:9d:9f:2e:0b:b4:30:09:e9:4e:c3:38:ec:db:ef:
         6d:b8:6f:74:8a:cf:09:1f:c1:6e:ad:e4:d2:63:ef:b5:87:e0:
         a4:9f:48:98:19:0f:f2:92:f5:e3:3a:3f:f3:bd:5d:5d:c8:6b:
         16:7d:42:c0:61:e4:2e:ae:af:73:60:28:41:ea:59:c3:6f:4a:
         b6:2a:32:fe:2d:e9:6b:16:b1:7a:b3:ae:44:c1:2f:bd:55:d8:
         d8:06:04:c6:7c:91:56:98:4c:8d:fb:ec:0b:cd:0c:11:2c:d7:
         05:e1:da:ca:c5:57:3b:c8:7b:da:ba:9c:ef:5f:fd:55:69:67:
         50:5a:2b:05:58:ba:b7:12:37:06:a3:1c:f2:0c:7b:de:cc:81:
         6b:a4:46:1d:a3:cb:5e:93:24:f6:b1:c3:d3:02:cf:df:68:ae:
         96:83:bd:eb:36:5e:5e:d4:7b:cf:78:17:34:3a:59:b4:d6:df:
         83:29:35:dd:8d:3b:69:5e:9e:d4:a7:44:30:e4:3f:3c:4b:b5:
         1e:94:62:18:42:2c:c4:6c:77:17:d8:f6:c7:38:93:d0:72:64:
         17:fe:f0:e0:d6:ec:c4:8f:84:00:1b:06:30:46:ef:fd:fb:b5:
         1f:6b:6a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 10:39:27 2025 by rpki-client