Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b64a8cb1-0db3-3b19-b800-5fdb7dcb5109.roa
File:                     b64a8cb1-0db3-3b19-b800-5fdb7dcb5109.roa (raw, json)
Hash identifier:          MDuUEvM5C5oTfVd5zFVWaoiaVZQe6weCkp+FjCpWJ74=
Subject key identifier:   0C:82:7F:C0:B3:C7:09:CE:A4:79:24:99:24:73:9C:C3:FE:2C:0A:FB
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B51CA9D0959BF3C38ABF6A500
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b64a8cb1-0db3-3b19-b800-5fdb7dcb5109.roa
Signing time:             Fri 26 Sep 2025 05:36:25 +0000
ROA not before:           Fri 26 Sep 2025 05:36:25 +0000
ROA not after:            Thu 25 Dec 2025 06:36:25 +0000
asID:                     9304
IP address blocks:        72.244.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:ca:9d:09:59:bf:3c:38:ab:f6:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 26 05:36:25 2025 GMT
            Not After : Dec 25 06:36:25 2025 GMT
        Subject: CN=bb6f94c8-0696-4326-8cd5-2964c3682f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bb:77:b9:fc:fb:f3:6a:ad:c3:13:cc:13:9c:
                    a3:06:3c:d2:28:28:63:2c:bb:c0:34:0a:3f:9a:a5:
                    7e:c5:fd:93:ba:9e:64:09:42:3d:ed:57:63:66:f7:
                    1b:51:7c:96:23:75:cd:89:d8:00:d5:94:30:a5:36:
                    e9:47:b2:a7:14:f4:f2:26:cd:6d:1f:b2:47:f1:b7:
                    69:f2:ba:d6:4c:f7:69:71:9a:1e:91:5c:59:1c:3c:
                    8f:ae:45:59:45:be:3c:0d:af:4d:d4:88:08:44:03:
                    8b:95:ba:01:aa:54:d9:0a:d3:12:eb:f1:25:33:f5:
                    fc:4c:8b:27:7d:f6:46:d2:ed:24:3c:60:8f:2b:21:
                    94:fd:b5:ff:36:f5:d1:41:00:ae:10:c7:f8:e6:70:
                    22:fb:7a:f1:a0:f5:b3:e8:03:22:6d:c1:3f:9f:2d:
                    f1:f3:fb:9b:ce:94:52:a1:e5:6f:1d:07:9a:cb:b0:
                    af:83:47:6f:a4:7a:f8:f6:e4:ba:0f:1b:fe:32:e3:
                    25:3a:48:f2:47:96:8b:6c:e0:5e:fa:c7:d0:38:dc:
                    90:8f:2c:da:3a:51:1e:b9:98:7a:a2:a5:78:ce:7a:
                    72:1f:fb:d6:59:62:2d:e8:d1:b2:34:4e:27:db:a4:
                    ee:f6:95:ed:ec:68:03:63:8a:cf:ee:a7:b7:71:87:
                    8d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:82:7F:C0:B3:C7:09:CE:A4:79:24:99:24:73:9C:C3:FE:2C:0A:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b64a8cb1-0db3-3b19-b800-5fdb7dcb5109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:08:b2:d5:bb:8e:8e:93:8d:6a:41:86:ac:ba:1b:63:ca:ea:
         c7:f3:fe:23:46:b1:5e:88:68:67:49:b0:a0:2d:24:f6:cd:fd:
         16:e3:ac:f2:c9:30:14:31:99:07:ea:32:37:ac:d8:b4:be:3e:
         ba:b1:19:42:60:81:37:24:30:4b:3e:0f:0d:20:9f:53:af:92:
         16:fc:b2:19:5e:09:1e:f5:d6:a9:24:57:23:cb:11:9c:47:0c:
         e4:a4:57:f5:78:0c:81:1a:6f:f4:6f:b3:3c:8a:2c:4b:05:10:
         a3:bf:34:23:21:5b:25:61:0e:cc:d0:4a:9e:b1:70:5e:a0:0c:
         95:fd:3f:b2:69:6c:8a:40:ad:6f:d7:d3:03:83:21:a9:ca:19:
         f5:37:2d:7e:0f:ca:a9:09:29:dc:11:fe:47:28:ea:b7:d5:7c:
         46:69:f3:fc:5c:63:c7:d7:d7:8d:4b:64:26:d3:2f:b3:c5:4b:
         85:b9:96:c9:2c:60:e1:96:93:80:89:ed:b4:f1:f1:d3:40:bf:
         40:44:8b:80:3d:b4:e0:f0:e6:54:99:13:a2:4a:f3:03:f4:d3:
         ff:3b:f7:24:ce:1e:10:bc:9d:d8:aa:58:da:27:dc:fc:37:aa:
         fa:60:11:8d:a4:4d:c2:05:f6:c8:05:8e:88:12:63:eb:b8:06:
         b4:54:9e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:52:30 2025 by rpki-client