Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/93b5ec5c-4026-3b96-b54e-6e47612a8c88.roa
File:                     93b5ec5c-4026-3b96-b54e-6e47612a8c88.roa (raw, json)
Hash identifier:          23OJskC0juArwtHuFi+QC5DBVMkDCitGvkv8NAyS0B0=
Subject key identifier:   3A:E4:F4:7F:94:82:6C:42:0B:27:33:E7:8C:A5:B2:23:0A:2E:81:1F
Certificate issuer:       /CN=eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db
Certificate serial:       010D0C9F4328584B2496CFE061EB445BE8E17C00
Authority key identifier: C3:AC:70:BA:29:7A:37:17:8B:2F:8E:C0:BF:67:0F:AA:B9:0C:C9:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/93b5ec5c-4026-3b96-b54e-6e47612a8c88.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        204.90.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:cf:e0:61:eb:44:5b:e8:e1:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=fa03a95e-eeb4-4aba-b874-8c8e9814ca1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0f:fa:da:4b:44:4f:0d:64:3e:b3:92:ac:10:
                    ee:ab:ed:52:42:22:f1:4b:32:e2:6f:20:f6:9d:54:
                    7c:46:01:61:ff:8b:37:a9:20:06:54:90:a2:76:38:
                    67:59:5d:35:c0:0b:9f:fa:d7:70:07:a3:98:10:2e:
                    72:21:7f:81:d8:69:36:70:c5:83:19:24:3d:e1:a4:
                    e1:15:a1:1e:c7:79:f4:34:67:85:a7:f1:47:96:06:
                    a7:80:59:b6:40:55:39:26:9f:98:4b:b7:57:6a:a4:
                    e8:f9:18:25:a7:2b:5e:99:44:ff:47:de:05:ff:a6:
                    e2:d7:a9:8e:bc:dc:7a:74:6e:f0:3c:a2:03:9b:a4:
                    1a:d9:46:0e:90:f0:4d:7f:3b:9f:3b:4a:ad:7e:66:
                    c2:9b:e9:59:47:c8:d1:3a:d5:15:f3:b1:ea:cc:67:
                    e9:5c:d6:2a:11:8e:55:b6:21:83:9a:41:be:c3:e6:
                    40:4a:97:f2:33:f1:bd:cd:2b:0c:d4:00:90:30:95:
                    fe:e3:d3:88:dc:31:61:9b:a4:8b:33:77:a5:b7:46:
                    54:45:e2:d7:75:b9:c2:4c:ab:df:f0:6f:1d:b8:1a:
                    49:ce:b5:b1:77:b7:cb:5d:c3:c2:4f:3b:9b:b1:f4:
                    34:c2:cf:8c:41:ae:a6:f5:0e:ed:98:98:79:63:44:
                    aa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E4:F4:7F:94:82:6C:42:0B:27:33:E7:8C:A5:B2:23:0A:2E:81:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/93b5ec5c-4026-3b96-b54e-6e47612a8c88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.crl

            X509v3 Authority Key Identifier:
                keyid:C3:AC:70:BA:29:7A:37:17:8B:2F:8E:C0:BF:67:0F:AA:B9:0C:C9:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.90.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:26:ea:4a:87:ae:d5:32:83:7f:df:18:25:b2:c1:db:d0:79:
         cb:e8:1d:5a:c5:98:fb:9b:3e:83:3f:50:43:8d:06:e6:be:31:
         87:83:ce:9b:22:c6:36:3c:11:36:b9:96:37:a4:c5:a8:ab:be:
         ca:ed:bb:95:3c:f0:13:67:1b:28:d7:ff:16:9c:d5:87:1a:b2:
         8f:07:93:4a:7f:e1:49:c4:25:90:52:f6:0b:82:68:0e:eb:ac:
         0a:49:a6:c2:42:b6:59:30:7d:6c:1c:ec:c5:7f:fd:14:f7:46:
         a5:35:8c:80:34:0a:68:c8:ec:c7:8b:61:79:cd:93:18:f3:38:
         66:16:ad:c3:34:dd:3d:38:7a:75:72:f9:ae:0c:75:1e:b9:48:
         73:b1:8d:cf:bb:08:85:57:99:93:44:e2:c7:51:3b:d8:88:7a:
         68:09:4b:a9:6e:8b:d3:2a:1d:68:07:a3:e7:d1:e7:b6:cf:9c:
         05:90:e7:d8:74:f3:25:5a:3e:df:12:0a:27:7a:76:c5:ea:b0:
         33:57:43:e4:40:e3:92:e9:f9:88:c7:15:4b:a2:39:2d:5f:97:
         e9:c9:0e:fc:6d:42:c4:f6:1a:c8:e0:eb:26:a2:e2:28:f2:6c:
         e6:94:71:98:f4:fe:06:91:42:4f:ec:94:c4:db:d3:10:02:71:
         35:fb:cc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:19:39 2025 by rpki-client