Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/090eba3d-725e-3b20-8875-24c2d606b0e1.roa
File:                     090eba3d-725e-3b20-8875-24c2d606b0e1.roa (raw, json)
Hash identifier:          uukb3GDwzMPV6DmJf6ctwQMHGprilI9RGlXRLLEyjkU=
Subject key identifier:   0A:D5:66:72:9C:32:76:65:9D:63:EC:CB:FC:FB:F9:ED:88:7D:B2:B0
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584A14656336D5802E43481FD080
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/090eba3d-725e-3b20-8875-24c2d606b0e1.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     18434
IP address blocks:        69.36.18.0/24 maxlen: 24
                          147.249.12.0/24 maxlen: 24
                          147.249.13.0/24 maxlen: 24
                          147.249.14.0/24 maxlen: 24
                          147.249.15.0/24 maxlen: 24
                          156.55.42.0/24 maxlen: 24
                          156.55.138.0/24 maxlen: 24
                          156.55.164.0/24 maxlen: 24
                          156.55.165.0/24 maxlen: 24
                          156.55.166.0/24 maxlen: 24
                          156.55.167.0/24 maxlen: 24
                          156.55.172.0/24 maxlen: 24
                          156.55.176.0/24 maxlen: 24
                          156.55.177.0/24 maxlen: 24
                          156.55.202.0/24 maxlen: 24
                          156.55.203.0/24 maxlen: 24
                          199.200.24.0/24 maxlen: 24
                          199.200.25.0/24 maxlen: 24
                          199.200.26.0/24 maxlen: 24
                          199.200.27.0/24 maxlen: 24
                          216.189.244.0/24 maxlen: 24
                          216.189.254.0/24 maxlen: 24
                          216.189.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:63:36:d5:80:2e:43:48:1f:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=294d1397-4da3-4f49-a2eb-cdfe2a19adfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:75:5c:93:26:b6:e8:02:d6:01:5b:78:ef:bb:
                    41:dd:f9:f4:f7:20:cb:13:81:b9:f8:be:5c:c7:14:
                    34:37:45:e6:ec:cc:a1:a1:56:97:b6:92:85:22:67:
                    49:7f:5e:cf:f5:17:1e:a5:49:c8:e4:d2:17:37:67:
                    b7:e4:6d:80:18:8c:f9:15:ae:81:8e:e8:3d:90:9e:
                    33:79:ad:3b:15:07:0e:06:cc:1c:7d:85:b5:b3:e7:
                    31:7a:a9:f9:f2:02:a3:f2:d4:97:bb:b1:46:23:9e:
                    34:23:2c:9a:96:94:13:6e:99:86:15:bf:49:30:43:
                    f7:28:2f:51:59:f3:65:01:98:45:da:ff:33:f7:1a:
                    ff:f8:82:32:35:ee:ab:e4:5e:48:58:be:bc:25:e2:
                    dc:61:70:44:41:fa:16:f1:b7:07:9c:5f:12:0e:9b:
                    69:7f:b8:95:2c:48:d9:c6:2a:73:e4:59:4b:b0:01:
                    ed:7f:3c:5e:ab:00:84:ee:7e:5f:90:a3:69:9d:f7:
                    19:c3:ba:99:6d:19:54:26:7f:aa:52:62:ea:a5:b9:
                    27:eb:70:3b:f4:e1:d9:ab:cf:b9:c1:d1:51:07:b1:
                    8f:1b:53:13:88:d8:ce:ad:fb:28:f7:93:94:4f:a9:
                    23:c3:7c:08:4d:ad:79:8a:85:6c:be:ae:5e:13:1b:
                    60:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D5:66:72:9C:32:76:65:9D:63:EC:CB:FC:FB:F9:ED:88:7D:B2:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/090eba3d-725e-3b20-8875-24c2d606b0e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.36.18.0/24
                  147.249.12.0/22
                  156.55.42.0/24
                  156.55.138.0/24
                  156.55.164.0/22
                  156.55.172.0/24
                  156.55.176.0/23
                  156.55.202.0/23
                  199.200.24.0/22
                  216.189.244.0/24
                  216.189.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:52:16:24:79:86:48:2b:4a:77:9c:d5:1d:18:02:72:fb:e8:
         52:61:18:2c:b5:8a:a2:0a:57:5f:73:dd:25:d0:06:22:ba:7c:
         75:1f:42:01:9c:dc:89:bc:70:33:34:5f:9e:8d:d3:d5:b6:ad:
         6f:9a:a6:1a:4e:3c:27:0c:55:f2:12:9d:b6:58:34:c8:d7:30:
         ae:2d:24:df:08:77:a8:7d:c5:94:29:43:54:b0:7d:c3:dc:e7:
         dc:01:ec:5b:86:8c:77:8d:7e:02:0f:43:15:fc:b8:14:71:42:
         6b:5c:2d:4c:42:df:12:b1:67:52:68:fa:b2:01:1a:91:db:42:
         2f:6a:73:02:43:8a:c6:01:77:59:26:2f:0f:54:fc:52:c1:0f:
         c2:1d:0f:c7:d4:50:8b:60:eb:43:32:b1:cd:6e:4c:7d:3f:80:
         72:fc:6e:18:fb:fd:4a:c7:d3:1c:76:4e:38:1a:f3:60:f8:4c:
         d6:bc:a4:fc:97:67:bc:c8:4c:d9:fd:95:d1:2c:e2:78:47:19:
         2c:46:1e:64:19:83:98:ef:ef:35:ae:33:0b:46:15:2d:ab:b8:
         94:8d:76:5d:88:3d:21:c2:a0:5b:17:31:cd:bb:63:72:5b:ad:
         97:39:a3:3b:bc:d9:60:ae:38:5d:21:74:78:bb:77:b8:1f:52:
         98:8f:25:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:14:19 2025 by rpki-client