Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/22da5fa6-1890-33d3-9c95-f75bb55cd026.roa
File:                     22da5fa6-1890-33d3-9c95-f75bb55cd026.roa (raw, json)
Hash identifier:          sTbKoOrJeTdAQlKFbrA/VODJeURQQLC++eCThkETibM=
Subject key identifier:   4C:2C:EA:E9:BC:21:14:E7:B1:5D:B6:BE:71:4E:08:64:AA:7C:C5:F4
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B6388450E0544499FDD437680
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/22da5fa6-1890-33d3-9c95-f75bb55cd026.roa
Signing time:             Thu 02 Oct 2025 14:07:18 +0000
ROA not before:           Thu 02 Oct 2025 14:07:18 +0000
ROA not after:            Wed 31 Dec 2025 15:07:18 +0000
asID:                     23473
IP address blocks:        104.145.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:88:45:0e:05:44:49:9f:dd:43:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  2 14:07:18 2025 GMT
            Not After : Dec 31 15:07:18 2025 GMT
        Subject: CN=4a35da24-b820-4d3a-b7d0-922eb4269d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:92:a5:e4:4f:8a:77:b2:14:ae:0a:32:51:3c:
                    ce:94:3f:e2:c9:bd:b6:16:9a:4f:5a:3f:58:4a:3f:
                    9a:15:13:d6:19:c6:3b:4a:49:84:07:2d:34:f2:21:
                    1f:df:f3:b6:70:3a:8e:20:7e:40:b1:fc:c4:79:c7:
                    9b:f6:09:63:d9:66:47:7b:88:d7:a5:1b:b5:60:03:
                    28:e6:c8:03:45:53:6a:7e:91:bd:b7:4c:5b:ed:68:
                    f3:53:e9:6b:91:17:b8:0f:f6:89:b8:fc:78:92:bc:
                    d9:65:26:b6:27:e2:ee:5c:4a:7d:13:b8:ba:53:6d:
                    3e:2c:b7:e7:fb:6c:99:3e:79:4e:84:fe:eb:66:31:
                    24:ab:2a:92:47:2a:70:2b:d6:bc:25:3b:d3:02:53:
                    33:a1:ec:78:38:58:41:d7:d2:92:25:4d:f1:73:b4:
                    07:68:26:33:76:80:b3:32:c8:3b:15:1d:45:a3:ec:
                    22:dc:d9:0e:5c:09:ad:09:50:b7:72:95:08:37:e7:
                    1e:1b:57:6b:60:41:01:ad:8e:5c:69:44:23:11:99:
                    88:e8:df:60:c0:9f:82:4c:4e:5a:c0:fc:8a:57:20:
                    34:42:27:b8:c7:98:ba:7c:2e:d1:cc:25:10:0e:30:
                    58:6b:ba:10:6d:42:fb:43:1a:7a:61:a5:62:9e:a1:
                    30:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2C:EA:E9:BC:21:14:E7:B1:5D:B6:BE:71:4E:08:64:AA:7C:C5:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/22da5fa6-1890-33d3-9c95-f75bb55cd026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:63:39:f3:69:1b:a2:00:69:41:80:ba:6a:f4:ce:cc:7f:92:
         91:00:b1:38:8c:0d:8d:93:aa:27:18:e1:a4:ee:11:9a:4d:52:
         ed:86:8d:f7:3a:a7:7c:87:ec:3d:5c:c3:0f:98:bd:16:fb:d3:
         51:e3:0a:af:8d:4f:22:18:74:d7:40:7d:fe:e1:cd:d6:4b:52:
         b6:a2:2e:ff:47:5e:ab:d3:43:bd:dc:d6:7b:c5:67:0f:e0:09:
         0a:c9:65:e6:f8:82:19:12:55:0b:08:ed:e9:92:96:3a:cf:ab:
         9d:ce:dc:39:be:52:08:e0:78:8a:33:d3:71:06:57:67:a5:40:
         28:f2:f3:e9:99:0e:fb:ce:2f:53:dd:4e:1e:1a:43:ff:93:8e:
         1e:f4:34:b9:1b:49:b1:85:02:d3:18:96:3d:fc:62:45:dd:82:
         9a:01:18:de:77:c3:c1:66:81:83:30:9f:06:01:d1:25:ff:01:
         c2:7b:7e:6c:f4:78:c2:73:4b:1b:97:3f:27:f3:5e:19:15:f9:
         c4:c5:8c:45:cc:02:3c:9e:3a:35:01:5d:f1:c0:c7:e8:b8:3f:
         1c:ce:3e:30:ba:48:23:54:da:72:4d:b1:97:08:41:21:2e:3a:
         e7:41:32:2d:d7:b8:0b:3e:c9:b8:bf:a0:0b:e5:0d:1b:9c:8b:
         88:4b:a8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:49:27 2025 by rpki-client