Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/8151d89d-cfdc-388e-ae7d-78ca2d6a091f.roa
File:                     8151d89d-cfdc-388e-ae7d-78ca2d6a091f.roa (raw, json)
Hash identifier:          eHkngDgn5n2L6yZpohV83kMFkPOpH+NmQw9kip/Kd0I=
Subject key identifier:   4C:DA:ED:8A:A3:07:DD:F5:CA:35:6F:75:53:AD:98:57:31:41:08:AA
Certificate issuer:       /CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
Certificate serial:       010D0C9F4328584B3DB704AAE01BF8B402D67500
Authority key identifier: AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/8151d89d-cfdc-388e-ae7d-78ca2d6a091f.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     53620
IP address blocks:        141.193.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:04:aa:e0:1b:f8:b4:02:d6:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=58e65dcf-5fa1-4711-bcdb-5bdb04fb0029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:ae:d8:92:26:0f:3a:b8:15:23:14:83:af:
                    2f:88:4f:e9:aa:80:6b:c8:f7:46:d0:87:85:05:82:
                    da:8e:ab:25:fc:fc:15:a0:c1:61:92:ab:96:32:3e:
                    65:6f:0d:26:2b:54:d2:4f:62:a5:92:a5:9b:b2:d6:
                    d9:0e:47:d3:69:1a:51:ca:da:c5:ee:f4:3a:c4:01:
                    50:83:86:84:d4:fd:f2:a0:80:51:53:54:34:be:27:
                    d7:4e:be:12:4e:cc:77:e9:69:4e:04:52:f4:7c:58:
                    f7:08:e1:ac:6f:02:5a:71:ac:2f:37:f8:3d:4a:19:
                    c9:68:d9:b4:8c:49:c1:3e:b1:57:81:51:7d:54:c8:
                    d1:59:37:25:6e:3c:b2:86:57:89:bc:2b:af:97:de:
                    be:8c:34:a4:f7:88:b6:03:7b:ff:f8:78:d9:67:ac:
                    0a:a8:25:e7:ad:75:a4:fc:fc:91:ab:48:41:f4:dd:
                    0e:7a:ec:d9:34:8a:cd:91:71:55:b8:a9:53:4d:a7:
                    f9:63:10:a9:07:9a:3d:da:be:19:16:08:8b:85:05:
                    cd:bf:2c:9b:88:ac:96:50:b9:d4:9c:0b:5a:19:4d:
                    ce:ba:ed:76:b4:35:fe:da:42:c2:cb:a6:50:e6:80:
                    dd:0c:86:e6:22:c8:5b:36:f4:91:bd:b7:c8:e7:8c:
                    1d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DA:ED:8A:A3:07:DD:F5:CA:35:6F:75:53:AD:98:57:31:41:08:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/8151d89d-cfdc-388e-ae7d-78ca2d6a091f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:e9:7a:88:89:f7:1b:cb:07:b0:88:50:fe:57:64:67:aa:01:
         5f:81:53:db:30:1a:13:eb:f6:02:a2:d3:54:4b:b8:13:24:cf:
         7d:32:7d:a1:5f:7b:c7:5f:51:79:3c:d2:7b:ee:03:b7:6d:72:
         87:a9:b1:7f:40:45:f3:a6:31:6d:8f:5b:25:85:ca:20:02:40:
         81:f7:4e:ee:44:87:ef:3b:47:3b:cf:e8:2b:b8:7d:d5:12:a8:
         b4:21:31:63:dc:da:49:42:10:96:a6:ce:12:e4:cf:1b:7a:43:
         ae:7e:03:57:16:ba:ed:e3:3f:3b:a1:f4:18:9f:2c:55:01:33:
         65:12:49:fc:f5:6e:80:63:aa:15:9b:5d:df:13:c8:bb:a6:2f:
         af:4e:5c:db:48:7c:98:53:5e:26:79:09:c8:13:00:cd:c1:de:
         60:af:49:72:61:84:7a:8a:bf:bd:38:71:f1:9a:7f:1f:c8:b2:
         77:20:bc:97:f8:b7:86:bb:b9:69:ae:90:01:60:d5:26:65:0b:
         90:f6:82:8f:57:68:75:43:99:e9:70:39:eb:7a:14:c7:08:77:
         43:6c:0c:20:c1:1f:52:7b:5a:c6:05:5c:a7:6c:97:92:11:a2:
         30:ce:1d:86:06:e8:5b:68:c8:b0:36:27:51:38:e2:ae:d7:42:
         a5:76:36:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9twSq4Bv4tALWdQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA1ZDUzMGUtMDU4Yy00YWNkLWJlYjgtMDFhOGQwZmY0
MWViMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
NThlNjVkY2YtNWZhMS00NzExLWJjZGItNWJkYjA0ZmIwMDI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyeu2JImDzq4FSMUg68viE/pqoBryPdG0IeF
BYLajqsl/PwVoMFhkquWMj5lbw0mK1TST2KlkqWbstbZDkfTaRpRytrF7vQ6xAFQ
g4aE1P3yoIBRU1Q0vifXTr4STsx36WlOBFL0fFj3COGsbwJacawvN/g9ShnJaNm0
jEnBPrFXgVF9VMjRWTclbjyyhleJvCuvl96+jDSk94i2A3v/+HjZZ6wKqCXnrXWk
/PyRq0hB9N0OeuzZNIrNkXFVuKlTTaf5YxCpB5o92r4ZFgiLhQXNvyybiKyWULnU
nAtaGU3Ouu12tDX+2kLCy6ZQ5oDdDIbmIshbNvSRvbfI54wd1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEza7YqjB931yjVvdVOtmFcxQQiqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85MDVk
NTMwZS0wNThjLTRhY2QtYmViOC0wMWE4ZDBmZjQxZWIvODE1MWQ4OWQtY2ZkYy0z
ODhlLWFlN2QtNzhjYTJkNmEwOTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTA1ZDUzMGUtMDU4Yy00YWNkLWJl
YjgtMDFhOGQwZmY0MWViLzkwNWQ1MzBlLTA1OGMtNGFjZC1iZWI4LTAxYThkMGZm
NDFlYi5jcmwwHwYDVR0jBBgwFoAUrtmkdO5svJwRfW497MACbTVIj9owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85MDVkNTMwZS0wNThjLTRhY2QtYmViOC0wMWE4
ZDBmZjQxZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcFaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvpeoiJ9xvLB7CIUP5XZGeqAV+BU9swGhPr9gKi01RLuBMkz30yfaFf
e8dfUXk80nvuA7dtcoepsX9ARfOmMW2PWyWFyiACQIH3Tu5Eh+87RzvP6Cu4fdUS
qLQhMWPc2klCEJamzhLkzxt6Q65+A1cWuu3jPzuh9BifLFUBM2USSfz1boBjqhWb
Xd8TyLumL69OXNtIfJhTXiZ5CcgTAM3B3mCvSXJhhHqKv704cfGafx/IsncgvJf4
t4a7uWmukAFg1SZlC5D2go9XaHVDmelwOet6FMcId0NsDCDBH1J7WsYFXKdsl5IR
ojDOHYYG6FtoyLA2J1E44q7XQqV2Nr4=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:25:31 2025 by rpki-client