Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8c420754-b958-3810-aaf6-ad7773c12be9.roa
File:                     8c420754-b958-3810-aaf6-ad7773c12be9.roa (raw, json)
Hash identifier:          lsHurX7ByC4GYJ+udmQ1/fq/j5IuX2bj60vRI2d/PsA=
Subject key identifier:   91:CE:B1:1D:1D:2C:AB:6E:68:BA:51:7D:B6:2E:D1:78:4E:07:93:80
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584A63790CA36D24AC6D2A0DF440
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8c420754-b958-3810-aaf6-ad7773c12be9.roa
Signing time:             Wed 02 Jul 2025 20:49:41 +0000
ROA not before:           Wed 02 Jul 2025 20:49:41 +0000
ROA not after:            Tue 30 Sep 2025 20:49:41 +0000
asID:                     2763
IP address blocks:        144.125.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:79:0c:a3:6d:24:ac:6d:2a:0d:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jul  2 20:49:41 2025 GMT
            Not After : Sep 30 20:49:41 2025 GMT
        Subject: CN=c293a344-6c6f-4d82-9dbc-63c03a3a9a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4f:78:55:6a:aa:c6:c8:bb:55:e6:2d:d3:fa:
                    3c:87:ec:3c:e0:df:8a:ad:ce:0e:0f:b5:1e:e0:9b:
                    58:5f:80:b2:b8:1f:be:43:8a:47:15:bc:f0:7d:15:
                    ef:9d:b9:ad:e4:c8:50:5a:b7:31:43:be:e4:13:0c:
                    53:d5:36:6b:df:06:01:86:34:3a:86:6c:8f:15:45:
                    2a:96:3b:1b:69:7a:86:87:f2:9c:a5:25:ec:2f:ef:
                    08:62:a4:ff:74:a0:21:e6:e9:ea:ec:30:e5:57:7d:
                    12:29:a4:30:60:4f:78:60:5c:83:8a:7b:05:7d:7e:
                    f7:61:f8:08:80:66:a8:6e:be:77:ee:7d:ac:ce:36:
                    b3:65:5d:d9:8d:49:e6:e8:53:a9:b5:a2:af:2e:6a:
                    97:ce:35:af:ec:09:37:a1:ad:83:31:8c:03:19:9b:
                    12:04:a3:e3:76:0f:1d:c4:24:a6:97:c7:b7:46:48:
                    75:a8:cd:cc:42:31:b4:4d:ec:dd:f4:cf:17:b3:d6:
                    ac:c6:0a:9e:4f:2e:4b:e4:8b:a2:6e:75:3a:f8:2d:
                    4c:9c:a3:8c:c3:bc:e0:73:4e:2a:eb:41:b8:86:0e:
                    ff:77:17:d5:ce:d3:a5:95:0e:e7:b8:75:59:5d:33:
                    7d:20:c4:f9:8a:eb:be:fb:94:8d:12:42:75:b5:91:
                    87:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CE:B1:1D:1D:2C:AB:6E:68:BA:51:7D:B6:2E:D1:78:4E:07:93:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8c420754-b958-3810-aaf6-ad7773c12be9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:84:14:40:43:22:41:de:dd:75:af:11:ca:5d:6f:a7:0c:4c:
         75:ba:17:7b:e4:f7:6b:62:0b:f6:7d:fb:5a:99:a6:04:d8:13:
         da:22:93:9d:09:ae:88:50:f4:6e:17:fd:7a:fb:5b:6d:f3:d3:
         b5:13:7b:48:26:d5:0c:fa:cc:5a:75:57:25:22:10:96:6f:e1:
         37:e3:2a:12:ea:85:77:f3:f8:73:50:5f:d4:d4:d6:51:d0:ff:
         1c:c7:b9:b5:69:6b:db:a7:3f:f2:fc:14:f3:63:1e:65:0f:be:
         f5:75:6e:4c:38:7d:67:9f:5e:c3:4e:a5:13:39:4f:68:02:ba:
         0a:2f:ec:79:2d:1d:3a:d0:6e:8f:4c:2a:e4:98:9e:77:cc:21:
         25:b3:fb:1c:a2:d5:36:7a:5f:7a:35:1e:c3:47:6d:07:6d:ab:
         f7:6d:70:b6:28:6c:2d:09:bf:d5:29:b8:08:3c:df:8f:94:68:
         5b:7f:25:98:8e:cb:44:13:ef:94:2b:fe:90:c9:4a:8e:11:e4:
         9a:ec:12:df:c2:2c:c8:b4:96:75:71:f6:17:64:aa:56:b0:11:
         62:70:4f:a1:99:98:53:77:bf:a8:64:f9:3f:6b:67:9c:86:16:
         2a:79:14:f5:27:d5:33:4b:5e:be:ff:c5:68:69:68:32:fc:71:
         6a:9c:96:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:11:52 2025 by rpki-client