Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/0b00fd4e-7cd2-35cd-92de-6c5aba3b8262.roa
File:                     0b00fd4e-7cd2-35cd-92de-6c5aba3b8262.roa (raw, json)
Hash identifier:          x0Dgg3YKNkwaXrwZWbb64Q6CbPPde3mHC2raAzRBonI=
Subject key identifier:   78:89:18:DB:FF:87:35:8A:D0:51:5B:24:70:5C:59:0D:FF:60:2B:AC
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584B36BC4B11849D877507903200
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/0b00fd4e-7cd2-35cd-92de-6c5aba3b8262.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     13768
IP address blocks:        69.90.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:4b:11:84:9d:87:75:07:90:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=6d3de350-b59d-47d2-bf59-855e2f05ce99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f4:8e:15:4e:91:90:92:79:97:57:16:bd:d6:
                    c0:ba:96:4c:74:ad:8d:23:6e:a7:39:80:c3:92:c7:
                    df:87:84:b2:a3:cd:d6:cd:8c:e0:a9:7b:d5:3f:b2:
                    62:f4:b4:6a:6b:9a:98:41:74:ab:d6:59:93:50:39:
                    26:a2:e2:da:be:d4:85:46:40:85:07:a1:35:9e:4d:
                    4c:36:1d:e2:05:a8:c8:bb:82:d9:53:45:e0:af:2e:
                    66:05:98:1d:fe:4e:48:be:24:cc:e8:b1:04:35:21:
                    23:20:f6:08:d8:e4:5d:c2:e4:fb:cd:9c:ba:64:78:
                    cb:49:fc:80:36:3e:c6:15:b8:24:c1:6c:43:95:44:
                    cd:ed:32:33:5c:20:7f:98:8d:f1:fc:e7:00:92:62:
                    86:6c:2a:9e:6f:9b:94:ba:af:3e:ab:22:78:41:ba:
                    0e:fa:3b:4e:ec:d4:7f:56:d4:92:d8:a2:2e:d5:20:
                    19:0c:7e:b2:db:f5:a0:41:57:93:8d:d0:12:23:17:
                    3f:2f:7e:67:48:82:6a:4a:b6:6b:ab:00:53:7f:bf:
                    38:df:4f:9a:ee:17:7a:87:80:fb:ae:f4:05:1b:bb:
                    0f:e6:4f:80:1e:51:b9:b4:14:ad:e7:5c:e1:e4:22:
                    02:9d:73:6b:e7:27:33:b0:aa:2b:bb:ec:f5:3f:32:
                    98:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:89:18:DB:FF:87:35:8A:D0:51:5B:24:70:5C:59:0D:FF:60:2B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/0b00fd4e-7cd2-35cd-92de-6c5aba3b8262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.90.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:65:2c:4b:c0:13:7d:2c:0f:f4:83:22:d4:d4:d5:55:a9:c5:
         ca:ba:41:0f:72:72:04:bf:47:58:02:2a:13:43:e2:bd:65:9c:
         6b:60:ec:d0:fe:35:46:4d:d4:31:bf:5b:65:56:5c:84:1e:0e:
         34:d2:01:94:49:e5:99:8e:31:72:db:9e:21:20:54:a2:88:76:
         74:4a:c2:97:e6:6a:28:76:65:61:83:a5:12:de:ec:07:a9:58:
         6c:c6:d4:0a:75:56:23:fc:72:33:ee:9d:d9:06:d4:fb:62:f3:
         d7:ed:5c:27:62:b4:82:66:e6:9d:bf:e0:2e:aa:2c:45:30:32:
         2e:11:c9:13:6f:81:95:30:5f:d0:56:9a:eb:b1:1f:ba:54:73:
         91:0f:a1:b8:96:d6:df:cf:ec:6b:76:e0:aa:b9:05:67:9b:e1:
         97:67:2d:f6:cd:30:d3:8d:7f:60:32:e0:26:f9:60:05:01:e0:
         93:e5:f2:0b:cf:fb:f0:01:b4:52:0c:8c:8a:63:45:b1:3e:47:
         7d:9d:95:3d:da:84:75:c9:8c:9b:c7:30:a0:60:fb:ff:46:64:
         1f:df:44:b5:22:8b:a1:8f:08:cf:a3:fb:34:9c:1b:29:a1:4b:
         2d:ce:2d:90:af:45:7e:5c:d2:5d:ba:42:48:1f:dc:41:47:43:
         53:8b:60:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:36:38 2025 by rpki-client