Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4c9221c-052e-3738-a1da-e605d08afed5.roa
File:                     c4c9221c-052e-3738-a1da-e605d08afed5.roa (raw, json)
Hash identifier:          nsb0iPypD4DlNwfbQttbHNbsdLGcAkoKf7xBjCi087w=
Subject key identifier:   93:B4:13:49:D8:49:3F:61:28:43:4A:DD:DF:40:9D:10:C6:D5:FE:D1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F26DD13C7754D2FE888D00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4c9221c-052e-3738-a1da-e605d08afed5.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        24.254.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:6d:d1:3c:77:54:d2:fe:88:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=96f4f3b1-343c-4d68-b4f4-34c49a5f15b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:61:89:c9:a4:54:0a:eb:74:16:3d:a5:ae:2b:
                    ea:4b:fc:17:2f:09:1e:ee:6a:b4:28:d9:90:7f:f7:
                    46:8f:7d:92:34:2a:69:03:fb:dc:84:d1:a3:66:52:
                    33:ec:fc:dd:aa:db:fa:30:88:85:f2:aa:58:9a:fa:
                    d9:da:bb:6e:b9:95:aa:c8:3d:f4:fe:da:d7:55:e3:
                    13:f0:5c:5e:38:65:88:e4:7e:81:ba:5d:f3:bb:87:
                    f0:a7:84:47:54:c0:5a:b4:6c:8d:8f:81:23:ea:8b:
                    b8:a5:72:81:ba:65:75:d1:45:d4:8b:b2:d7:89:6f:
                    b7:c7:83:46:53:c9:ff:b8:1f:13:08:47:ae:2f:71:
                    4f:cb:32:f2:9f:44:92:8a:71:1c:87:91:2a:fd:dc:
                    96:ed:84:a8:e1:4d:6b:17:a2:59:7f:70:3a:95:11:
                    bb:b5:c7:fd:30:7f:19:ad:15:54:3a:5c:11:f2:b5:
                    00:67:7d:83:ae:ce:74:9e:28:2e:f4:b0:42:cb:98:
                    2f:7a:69:de:08:a5:24:d0:d6:6a:80:24:f2:28:51:
                    20:bc:52:57:ac:90:d5:74:17:73:bc:ad:87:a7:21:
                    39:2e:0e:3f:72:56:d9:9e:a3:d2:5d:7b:47:9e:18:
                    16:ad:21:a1:9f:80:11:27:5e:97:86:a4:da:3a:bf:
                    20:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B4:13:49:D8:49:3F:61:28:43:4A:DD:DF:40:9D:10:C6:D5:FE:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4c9221c-052e-3738-a1da-e605d08afed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.254.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:eb:26:49:dd:d2:3d:08:34:e8:f4:78:f1:73:c7:c7:1f:d4:
         82:b8:9e:2a:e2:b5:d1:99:ca:71:9c:1f:b1:e3:32:9f:a8:ca:
         8f:65:79:15:34:72:46:0e:aa:22:ff:74:23:02:14:c0:ea:f3:
         26:cd:ec:29:3e:2b:e5:9b:48:72:96:0e:b7:b2:a6:4c:3c:86:
         46:d1:af:6c:40:ec:f2:74:b1:b7:ec:46:4a:02:53:ae:07:67:
         1a:89:97:a3:2b:64:58:de:15:95:6c:c1:03:64:39:ac:4d:f1:
         55:a6:5d:b4:03:68:b9:e8:19:7b:e6:c6:c3:ca:81:b9:64:6b:
         2f:04:6f:2c:6f:ed:2e:81:9e:3e:bb:77:9f:67:32:63:b4:f5:
         c4:84:59:29:e9:74:09:a3:85:97:8e:86:d8:19:7b:63:8a:f4:
         c3:31:8c:f3:fd:fb:18:9e:16:92:01:e1:cf:0e:85:92:bf:b6:
         7f:3e:36:ed:27:53:4f:f9:91:a0:11:d4:2e:35:07:4b:e6:02:
         f0:77:f6:8d:fe:ed:df:16:e3:fa:42:11:62:94:ed:ba:42:0f:
         58:05:6b:5b:34:50:19:3e:98:02:93:8b:ce:2c:65:26:bb:a3:
         f5:b1:26:78:65:be:f8:a6:c2:83:25:fd:6a:f4:94:03:5f:93:
         e2:ae:77:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:21:56 2025 by rpki-client