Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/90af9f0e-1dcc-3925-84e8-03ac0ea89524.roa
File:                     90af9f0e-1dcc-3925-84e8-03ac0ea89524.roa (raw, json)
Hash identifier:          eRB/SOaUijl+RFZZcCtCWp+PypRQoEELTto6YFV81uA=
Subject key identifier:   F0:8E:98:55:E6:8B:BE:21:69:64:F1:7C:AD:5D:38:30:A6:1F:3A:DF
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F43285849EBEA51E0032D413A0265E6C0
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/90af9f0e-1dcc-3925-84e8-03ac0ea89524.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     400989
IP address blocks:        192.111.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:51:e0:03:2d:41:3a:02:65:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=007e427d-e77b-41e7-8637-8a249bf93771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f8:e6:1a:0f:99:e1:bc:12:d6:1c:80:dd:05:
                    dc:51:d8:7a:9f:45:fa:7d:5d:49:29:47:6d:d0:7e:
                    22:bd:4b:6f:07:44:f3:95:32:f6:b5:2c:45:9f:33:
                    2c:a8:ab:dd:7c:12:2a:97:82:2c:fb:a3:f1:61:e6:
                    98:49:f2:1c:8b:74:dd:08:a4:db:cb:fa:28:f7:1b:
                    29:eb:78:78:f7:10:9f:08:00:50:3a:56:ce:d5:15:
                    5e:d1:68:28:90:48:1f:8a:fc:89:20:7e:07:1a:f5:
                    6a:3b:fd:58:2a:93:b2:2d:18:71:f4:86:7f:1e:be:
                    77:d3:14:e8:7a:57:19:15:36:2c:8d:0b:41:59:63:
                    06:5c:56:cf:63:b5:cf:dc:f2:38:2b:eb:51:f9:8d:
                    4c:84:0a:c2:0b:b2:df:d5:9e:70:83:60:fe:45:3d:
                    25:00:df:bb:4f:73:01:be:29:73:95:06:fd:1b:07:
                    a4:73:7a:5d:e6:47:1b:98:9a:76:a8:d1:17:54:c0:
                    7d:0c:8d:42:bb:97:8d:20:2c:c0:c3:c7:f9:dd:aa:
                    3d:ba:0d:aa:44:58:ab:43:0d:2f:46:82:47:81:22:
                    93:79:1c:36:72:0a:5f:4f:9a:34:92:2a:21:a6:35:
                    d5:47:ec:28:7b:f3:b4:c3:c3:e8:3e:b4:a4:76:7d:
                    70:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8E:98:55:E6:8B:BE:21:69:64:F1:7C:AD:5D:38:30:A6:1F:3A:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/90af9f0e-1dcc-3925-84e8-03ac0ea89524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:0b:01:c9:eb:17:48:09:9f:47:ac:8e:61:47:13:5f:ae:ef:
         c7:1b:4b:00:72:bf:cd:0b:d4:39:0b:bb:30:ed:d2:3a:59:7a:
         5e:74:13:87:fc:d9:4a:35:d1:5c:58:8c:4a:62:d9:67:43:ac:
         99:4b:4c:bd:ec:9c:3f:ae:a1:d6:e7:38:ae:ec:f9:0e:fa:e4:
         b5:de:5d:b2:d8:e2:33:67:e9:39:ca:4d:fa:d3:94:a4:0a:ed:
         f4:ea:b5:d6:03:3a:2a:ee:55:31:e2:8f:22:f8:94:b4:ab:26:
         cf:44:82:df:6f:c9:de:6c:6d:67:c2:f9:2a:db:56:35:6d:20:
         ec:a1:4d:fc:61:db:d2:17:4b:42:8e:d4:69:16:3f:cd:a2:11:
         1c:a3:f8:b6:c2:95:20:9b:19:6a:9e:62:11:ca:9b:ab:21:17:
         35:fe:99:65:c7:57:05:c6:43:c6:40:d8:37:bc:ab:22:d1:63:
         c6:62:c1:14:a6:09:b0:34:cf:4b:d2:88:65:d2:69:a4:6f:c6:
         ed:1b:b9:b5:68:6d:d9:ac:83:a4:af:fb:e0:0d:ff:30:d9:f6:
         31:1b:a9:4d:3c:d1:44:94:f3:98:11:49:d6:b4:ee:a4:87:67:
         ee:7a:46:f6:7a:9e:89:80:36:f5:a2:f5:ee:f9:76:90:f0:1c:
         00:67:a6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:48:25 2025 by rpki-client