Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/e788a976-e328-3e04-9384-78a335717e26.roa
File:                     e788a976-e328-3e04-9384-78a335717e26.roa (raw, json)
Hash identifier:          nUKnu5URdSEyPiUo3zIYVb0DgESRdyIEhAx2LOjy0/M=
Subject key identifier:   96:44:42:03:90:FB:76:B2:63:1C:B5:A7:74:C7:A1:B1:3E:91:52:96
Certificate issuer:       /CN=bf862f27-363f-42ce-ab7e-31739b3660a0
Certificate serial:       010D0C9F4328584A62908F130714677CB420F580
Authority key identifier: FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/e788a976-e328-3e04-9384-78a335717e26.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     42926
IP address blocks:        199.244.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:8f:13:07:14:67:7c:b4:20:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf862f27-363f-42ce-ab7e-31739b3660a0
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=ad46887d-dcb2-48f6-a861-a0481861e2a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f0:2f:c3:25:82:de:bf:5c:09:0a:c7:ec:9f:
                    57:38:59:a7:dd:60:db:f2:de:7a:74:6b:e4:59:eb:
                    4e:43:bd:4f:0b:6d:2e:f0:41:c5:a7:61:99:5a:ca:
                    8d:92:1b:28:9a:5e:1f:59:95:92:96:a0:c0:cb:9b:
                    7f:29:98:3b:54:88:3f:5f:db:61:70:0f:09:9e:b5:
                    da:17:48:30:f3:77:aa:c6:b7:2b:18:9c:c4:74:33:
                    14:24:24:91:5d:a5:7e:9c:7a:8b:01:d3:c5:51:42:
                    a0:cd:2f:fa:c5:10:62:0e:bb:83:14:6b:a1:e9:a1:
                    87:eb:42:26:dd:3f:f6:8d:fd:ad:eb:c6:91:ef:06:
                    4e:39:9a:df:de:b5:1c:d9:ab:c6:b5:61:7d:51:c3:
                    16:92:15:61:1e:39:a6:e2:7b:e7:45:82:db:c8:d7:
                    15:e6:c1:18:39:37:49:11:b7:99:98:c1:b8:f4:7e:
                    50:40:f1:62:64:b9:fb:ee:5b:63:15:aa:53:4f:9d:
                    89:d8:c4:22:a7:0c:10:89:10:81:ee:04:f3:ca:38:
                    18:ac:af:b3:d7:de:69:b1:44:2b:5a:50:b9:01:b4:
                    1f:8a:87:85:76:1d:d6:d7:c9:d8:41:14:2f:fe:05:
                    24:90:41:a8:a7:90:48:43:81:26:9e:ef:d0:c6:b3:
                    0a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:44:42:03:90:FB:76:B2:63:1C:B5:A7:74:C7:A1:B1:3E:91:52:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/e788a976-e328-3e04-9384-78a335717e26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.crl

            X509v3 Authority Key Identifier:
                keyid:FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.244.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:cd:5e:11:8e:85:9b:4e:d6:fd:23:38:1c:79:96:45:69:eb:
         d8:31:b0:02:a9:7a:8d:a4:1d:b1:ba:06:92:38:cc:8e:64:86:
         93:c0:a7:cb:0a:27:42:02:ca:66:84:56:e0:38:5a:66:79:8e:
         54:16:1a:23:ae:31:32:99:1e:21:02:4f:fb:9c:59:57:c4:7f:
         25:ce:4c:dd:bd:22:08:04:b4:00:b3:a6:be:32:64:35:9f:e5:
         42:e8:71:ac:46:23:4d:e6:bc:31:69:8b:c2:98:9f:34:35:b3:
         6a:82:a4:f5:59:3a:be:f3:66:6c:61:fa:c4:72:a4:5d:fa:91:
         bb:7f:2e:55:50:11:7e:91:63:7e:12:92:c5:9c:47:8f:d1:f7:
         fd:11:95:63:20:26:d0:71:d9:5b:dd:91:c6:b5:6c:e4:a8:28:
         61:4d:7e:01:92:5f:80:c1:16:64:18:41:57:20:84:00:57:dc:
         e9:50:fa:3e:4d:18:74:8c:f2:61:32:44:78:9a:f3:88:53:ac:
         bf:9c:d0:f3:a6:1e:f8:9b:79:c4:61:3b:e7:84:44:20:5b:ba:
         7a:c0:8f:a6:9f:3e:e1:7c:80:81:02:6e:f9:ab:2c:8a:27:54:
         2f:d2:14:9e:66:bf:f7:ee:2e:1a:a9:34:c3:a9:4a:d6:1b:68:
         3f:27:92:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:57:45 2025 by rpki-client