Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f311cdbc-450b-3d7f-9ce4-875a7b9c0ca5.roa
File:                     f311cdbc-450b-3d7f-9ce4-875a7b9c0ca5.roa (raw, json)
Hash identifier:          yy20GJhZiNpxATKH/dt/oAGY2UeEW83vV0AKsDGFnSg=
Subject key identifier:   CD:B3:C2:78:4F:0B:FA:50:CA:C4:99:93:96:9F:36:9D:69:20:38:6F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B2066E6F28084798959F39880
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f311cdbc-450b-3d7f-9ce4-875a7b9c0ca5.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        24.253.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:e6:f2:80:84:79:89:59:f3:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=c335d775-92a2-4f1d-b195-c3d6b0e15f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:96:83:27:df:83:68:69:f2:2b:af:58:ff:e1:
                    90:f2:de:1e:b9:08:39:ee:b0:c8:c1:f0:af:1d:9f:
                    8e:ac:92:d4:d7:d7:12:20:8c:5b:76:6c:c0:62:ec:
                    da:a9:e4:d2:ae:f3:82:73:4b:9c:60:70:5e:b0:69:
                    e5:58:21:87:4c:f0:55:c3:a5:b5:32:fa:2f:a6:47:
                    d4:b8:39:bc:ec:6f:67:7a:8e:56:dc:cb:6a:23:0d:
                    eb:37:93:3c:d3:ba:2f:3e:bd:c7:da:2a:1b:76:e4:
                    c6:3c:c5:13:a2:35:d2:10:45:cf:56:88:ab:0f:9a:
                    76:6b:05:80:1a:bc:09:b4:57:99:bc:34:b8:21:49:
                    bc:b7:8a:15:91:10:b1:7b:c5:79:39:49:a3:76:72:
                    40:79:61:9a:d6:1e:c4:cf:8d:98:90:36:6c:79:de:
                    75:e5:67:aa:30:ae:ff:15:76:27:ea:b0:97:fa:49:
                    25:36:e4:09:b9:b0:6b:4a:df:1a:ba:a4:7c:50:c8:
                    50:f1:83:40:89:13:67:e9:40:61:3d:a7:8b:1e:d3:
                    2f:29:84:bb:1d:0d:31:e8:1e:f6:8b:59:7a:ee:d4:
                    d9:f8:d1:a4:40:de:81:13:0f:f7:e6:74:2c:39:de:
                    22:e4:63:9e:40:89:4c:d8:4a:1f:25:eb:f2:51:df:
                    e4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B3:C2:78:4F:0B:FA:50:CA:C4:99:93:96:9F:36:9D:69:20:38:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f311cdbc-450b-3d7f-9ce4-875a7b9c0ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.253.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:1d:5e:73:fa:8f:48:06:61:a9:16:17:e7:d1:be:b4:d9:3c:
         c3:dd:f0:28:ec:5b:21:63:e3:a8:d6:b7:e6:a9:c6:b2:4b:48:
         3a:9d:21:a3:01:be:c8:8f:f4:57:fb:16:8b:69:44:9c:c0:38:
         a3:26:98:37:e5:27:bd:19:de:35:ae:5b:45:99:2f:f5:5a:ea:
         ad:ae:4f:41:34:36:f9:2d:8b:17:95:07:5a:df:f2:a3:27:f9:
         84:79:32:7a:df:3d:19:6c:9b:06:86:55:22:1e:43:ab:c1:81:
         60:47:b2:29:e6:64:3b:af:57:b9:58:29:4c:a9:a3:7a:e5:3f:
         01:00:b4:d6:05:c7:8b:cc:f7:c1:20:45:19:ba:ff:af:da:69:
         9a:2b:84:80:30:40:c8:f2:4c:02:91:9a:f6:d0:86:ce:c5:59:
         d2:e9:15:a0:f3:c9:ea:7b:8a:3d:87:a7:db:72:f2:16:35:6f:
         f5:b0:7b:62:8e:5b:2c:16:50:e6:ac:38:24:ef:16:58:9e:20:
         bd:b1:27:81:bc:ab:ce:a0:1e:dc:86:84:e7:a2:63:d6:c1:a0:
         77:32:ce:8d:d7:b8:51:97:0a:f5:5d:2f:b6:6b:16:11:ba:63:
         89:c5:9b:bc:41:bd:4d:26:ce:be:d8:0b:6a:82:f5:5d:52:42:
         2c:80:b8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 04:47:25 2025 by rpki-client