Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7646ac20-cd53-31d4-8aef-4eeb68b88035.roa
File:                     7646ac20-cd53-31d4-8aef-4eeb68b88035.roa (raw, json)
Hash identifier:          MPghe0nV1fAjiK5iaQx+EiEnDcfvs+GoN4vY835sdEM=
Subject key identifier:   31:FF:39:98:61:EE:C2:25:51:25:31:57:39:17:88:FC:3F:75:8A:7C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F20F176D7226BA4FF44D00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7646ac20-cd53-31d4-8aef-4eeb68b88035.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        24.254.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:0f:17:6d:72:26:ba:4f:f4:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=80cf84ed-81e5-486a-a534-43ce54535cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ee:df:81:06:6d:8a:2d:11:45:9a:f6:6b:3e:
                    fc:13:8f:59:84:36:06:cd:0b:cf:c4:3d:7b:2f:d7:
                    30:6e:6a:77:59:55:c5:16:f6:bb:51:98:be:85:b9:
                    6b:66:ca:06:e1:ac:c0:70:c4:64:19:69:d3:8b:75:
                    f3:19:60:7d:28:f8:46:66:a7:f0:f8:bf:76:43:40:
                    eb:ab:31:e8:3e:bb:2a:5f:2d:b6:a0:57:c9:a2:9d:
                    ff:66:ad:fd:8b:2c:9a:15:31:38:96:0b:d0:48:ca:
                    20:48:81:1e:e4:8d:7b:d5:6f:e0:0f:02:a6:23:69:
                    0c:1c:a6:97:68:2c:31:bf:db:25:9e:36:db:90:d9:
                    07:c1:2e:a3:90:15:62:6d:0d:36:14:a9:15:94:70:
                    56:eb:99:09:2b:e4:ea:fa:5d:c9:e3:77:1f:30:e7:
                    da:13:84:f9:ba:74:a9:8d:0f:d6:59:a9:d3:38:73:
                    46:48:93:0d:4b:21:21:3d:ab:99:d7:a7:7e:42:5d:
                    5b:87:14:dd:86:ce:1e:cf:cc:63:67:e6:f4:47:2c:
                    27:ff:ad:51:df:2f:73:a0:30:2b:f9:77:df:72:56:
                    3f:6b:9a:f3:d1:01:5e:9c:65:99:5f:db:c8:29:55:
                    19:ac:3d:85:16:67:98:9e:d7:0d:37:81:69:f4:36:
                    8b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FF:39:98:61:EE:C2:25:51:25:31:57:39:17:88:FC:3F:75:8A:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7646ac20-cd53-31d4-8aef-4eeb68b88035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.254.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:29:c6:4d:1d:74:a4:fc:92:61:d8:da:ab:5d:d0:60:f8:1f:
         ab:f5:72:02:05:22:75:b9:7f:8c:0a:b6:9d:a9:97:22:fb:c0:
         d1:68:36:92:97:ee:44:ce:62:57:97:9f:a0:21:9c:98:8b:98:
         4a:4d:d0:33:e7:79:d5:2b:45:11:44:f5:2e:37:da:37:ee:6c:
         35:94:67:9e:02:74:53:ef:a7:dc:3d:fd:0b:46:bf:1b:95:79:
         02:9e:ef:44:ef:76:84:76:fc:fe:4f:73:57:11:1f:25:14:99:
         6b:da:75:cb:74:4a:89:9c:32:49:d4:7a:7e:0f:19:1b:06:81:
         40:d1:1d:f3:18:a7:60:e7:4a:53:d4:09:43:0a:d2:aa:a3:64:
         2d:b6:0c:63:d1:03:46:b0:37:a7:16:fc:10:cd:19:a1:0b:86:
         e7:c7:dc:a2:2c:17:29:43:dd:d4:e5:d6:69:6f:28:40:ed:f8:
         60:01:bf:0d:25:5d:41:a6:3d:96:cf:36:49:5a:98:1f:67:81:
         8d:f6:cd:bc:bd:1d:d4:63:54:6f:7d:47:ec:ff:bf:91:f9:5c:
         e9:8c:be:0e:9f:c7:8f:57:72:92:8a:fa:91:ad:c2:7a:40:80:
         37:3a:e3:9c:40:e2:23:8a:7b:7f:0c:7f:50:e3:44:6a:df:4e:
         20:4a:2b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:39:13 2025 by rpki-client