Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b78283f-0e08-311f-8373-3d6f4cbca2b3.roa
File:                     5b78283f-0e08-311f-8373-3d6f4cbca2b3.roa (raw, json)
Hash identifier:          8BoZldLDoumFBah6AGA/+hzVqBfKMir3+HqDhMTLeRM=
Subject key identifier:   CE:FE:98:A4:74:71:D1:EF:57:F7:84:FD:34:93:B6:A8:78:2D:02:4B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1C3737681371D0A9B9902500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b78283f-0e08-311f-8373-3d6f4cbca2b3.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        24.255.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:37:68:13:71:d0:a9:b9:90:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=fe2f39ca-744e-4eb3-a595-a0739b4d2536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:67:62:c1:1e:88:df:79:46:8c:25:3c:5b:bf:
                    96:b6:ce:3c:e2:d2:3f:de:ad:6d:03:0d:ec:54:91:
                    45:a4:a6:65:16:80:02:31:d2:76:9e:b0:3c:08:5f:
                    5d:60:ab:69:2b:4e:3b:15:51:34:06:36:cd:e8:e4:
                    91:93:38:56:2d:15:03:8d:43:d4:f7:3e:dd:f9:ef:
                    10:59:25:c2:64:68:c4:8c:28:be:fc:36:53:bf:65:
                    60:c8:0d:c4:8e:93:d3:4d:3d:fb:85:7a:14:2d:c3:
                    88:20:35:04:eb:4a:97:e3:c2:20:2f:bc:48:c0:83:
                    2f:0d:86:65:a0:04:18:a0:ea:b0:5a:d9:a1:7c:86:
                    60:38:86:2b:16:2d:8a:94:59:de:de:f4:15:75:0b:
                    ee:d0:f9:8d:e4:f7:87:e1:a3:36:d3:b9:ae:6e:06:
                    7c:29:e2:89:f4:91:ce:39:a7:9d:91:9e:80:f7:d7:
                    3d:cc:df:7c:d8:2b:af:66:39:b4:9f:7d:ab:66:7d:
                    14:54:a2:ed:b5:34:39:9f:7f:91:68:05:eb:5e:99:
                    75:3c:13:7d:7b:0a:34:f2:5e:67:ea:63:2b:c8:fa:
                    eb:4a:46:f4:47:8b:0e:48:2d:86:be:a3:12:e2:43:
                    52:e8:09:80:fb:6b:e8:44:bc:52:3f:6f:fe:04:99:
                    ac:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FE:98:A4:74:71:D1:EF:57:F7:84:FD:34:93:B6:A8:78:2D:02:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b78283f-0e08-311f-8373-3d6f4cbca2b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.255.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:62:e2:10:61:26:a2:eb:67:35:af:6e:ea:fc:cd:11:d5:70:
         e4:cb:0f:d0:e6:3c:5e:a7:59:cf:18:1e:54:8a:84:68:2c:32:
         de:a0:99:f3:9d:0d:d3:bf:04:83:24:ca:c0:8b:4b:3f:3b:b6:
         15:48:51:4b:c0:46:c0:be:e3:f1:0c:2c:e4:bd:6d:80:be:6b:
         55:41:ea:8e:49:a1:ff:0d:22:27:8c:ae:08:cd:c0:53:72:d7:
         a0:d1:95:61:04:f4:ff:48:75:e9:db:95:96:3b:02:66:1d:5b:
         03:c9:fe:d2:6d:16:c2:dc:af:bf:1b:12:ff:fa:3c:d7:ad:2e:
         96:6e:44:38:02:6b:5c:2a:12:db:1f:b7:00:40:b5:69:9f:e6:
         6d:37:da:bb:4c:38:b9:1c:03:b6:e6:f1:87:99:9c:28:e0:95:
         d2:2a:83:17:b5:fb:cb:eb:75:bd:6f:85:9c:86:1c:46:45:19:
         49:a7:b6:e2:7e:1b:02:c4:d9:00:35:a4:0b:84:eb:4e:15:a9:
         b9:b1:15:ef:47:ab:e0:53:65:1a:79:bb:04:13:6e:cb:5c:1e:
         37:b8:63:1a:c2:e6:7f:37:00:49:4b:ea:5a:b6:43:c9:be:03:
         3b:75:a5:3b:ed:b9:45:88:22:23:62:30:fe:3f:e3:0c:fd:fb:
         f8:dc:5e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:35:33 2025 by rpki-client