Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/0f2590a0-e1df-36f4-b25b-2f0c3597ed21.roa
File:                     0f2590a0-e1df-36f4-b25b-2f0c3597ed21.roa (raw, json)
Hash identifier:          0wln8lqiRFKVOqkADJjE0qVh3OTb+zh0JfQhsuRssao=
Subject key identifier:   C6:91:6B:76:3D:22:A6:DA:5B:A4:94:95:01:B9:AF:07:AE:87:4B:7F
Certificate issuer:       /CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
Certificate serial:       010D0C9F4328584A5CFB363D1966BD806A378F80
Authority key identifier: AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/0f2590a0-e1df-36f4-b25b-2f0c3597ed21.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        141.193.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:36:3d:19:66:bd:80:6a:37:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=4c93c172-ab72-44c0-b71d-62143204d5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:26:a0:e6:c1:6a:3d:ca:98:2b:3d:2c:5c:e5:
                    b6:33:bb:90:c8:40:df:2b:44:c3:04:23:53:c1:e4:
                    12:e0:c6:fe:1b:1b:93:ab:5e:d8:e3:f4:01:6b:28:
                    4a:be:fd:06:2a:aa:ba:06:22:31:09:d6:34:c5:36:
                    a5:99:65:90:c9:69:79:89:f6:b9:39:97:1a:e4:cb:
                    95:58:ce:9b:fb:da:5b:50:ad:9d:63:99:9f:35:23:
                    f4:fc:2c:f6:8c:ad:ad:7b:cd:b5:85:41:d4:01:16:
                    cf:7c:f9:0e:9e:3b:85:e7:54:19:b8:37:87:4a:62:
                    28:2b:06:77:2c:04:37:a9:93:aa:bf:c6:0f:8f:23:
                    af:90:eb:3c:bd:ca:4c:87:d0:46:f8:e8:dd:43:61:
                    31:95:26:29:26:b3:1f:24:0a:5e:0a:b4:a3:80:14:
                    60:d1:40:35:5c:b5:20:3d:d0:e4:b5:bd:b1:91:c7:
                    61:ac:21:93:87:87:40:1a:a6:41:d8:f1:90:fb:dd:
                    f6:dd:50:79:db:4c:6c:fb:46:3f:24:27:16:4d:28:
                    50:d2:8f:72:1e:2d:14:0c:02:cb:36:f6:ac:16:57:
                    87:b4:64:e4:aa:ad:58:35:51:12:39:13:9c:59:ae:
                    a5:18:c4:d2:dc:e0:bb:75:84:46:72:5e:2f:29:a3:
                    35:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:91:6B:76:3D:22:A6:DA:5B:A4:94:95:01:B9:AF:07:AE:87:4B:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/0f2590a0-e1df-36f4-b25b-2f0c3597ed21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:fa:83:57:78:04:f3:f5:d2:e4:d8:4a:a5:b2:4b:f1:be:15:
         c7:47:e1:07:2d:54:c6:f9:6c:4f:18:27:56:13:3d:34:cc:e0:
         22:e9:99:d8:a3:a9:a8:78:a0:d6:0b:a9:cf:87:3c:94:10:f3:
         d0:0b:04:aa:05:07:72:a1:85:f4:34:91:0b:8b:75:01:7f:c8:
         0a:ed:a0:ee:47:45:59:5a:3f:ea:c6:b0:f9:b3:2e:2b:82:10:
         e2:e3:8e:56:e3:3a:ab:09:2c:38:2b:d1:6b:37:ca:cc:a8:7a:
         02:e2:ed:4a:35:d7:7f:d9:0d:61:3d:62:7b:22:87:10:15:a2:
         53:73:43:0f:a3:f8:a4:52:63:18:29:56:51:db:59:52:da:93:
         5c:2b:62:fe:d6:a8:8d:1b:93:fa:80:c0:b2:f3:ee:e3:a6:33:
         31:d1:8e:56:23:e1:81:a9:c4:b8:2c:0c:3f:bc:11:68:b5:02:
         e4:95:c2:60:22:7f:52:17:8b:2b:9a:71:b2:12:b1:d2:be:4d:
         c6:c1:8d:93:a6:5b:0d:c3:88:ff:73:e6:a1:0b:80:06:2f:8f:
         53:3d:b5:d3:16:49:fd:f1:7a:97:91:45:03:8d:e2:8d:fc:2f:
         d0:c2:68:2b:5a:17:5f:6f:39:d6:d0:89:af:c2:81:8d:76:77:
         34:ef:51:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+zY9GWa9gGo3j4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA1ZDUzMGUtMDU4Yy00YWNkLWJlYjgtMDFhOGQwZmY0
MWViMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
NGM5M2MxNzItYWI3Mi00NGMwLWI3MWQtNjIxNDMyMDRkNWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSag5sFqPcqYKz0sXOW2M7uQyEDfK0TDBCNT
weQS4Mb+GxuTq17Y4/QBayhKvv0GKqq6BiIxCdY0xTalmWWQyWl5ifa5OZca5MuV
WM6b+9pbUK2dY5mfNSP0/Cz2jK2te821hUHUARbPfPkOnjuF51QZuDeHSmIoKwZ3
LAQ3qZOqv8YPjyOvkOs8vcpMh9BG+OjdQ2ExlSYpJrMfJApeCrSjgBRg0UA1XLUg
PdDktb2xkcdhrCGTh4dAGqZB2PGQ+9323VB520xs+0Y/JCcWTShQ0o9yHi0UDALL
NvasFleHtGTkqq1YNVESOROcWa6lGMTS3OC7dYRGcl4vKaM1WQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMaRa3Y9IqbaW6SUlQG5rweuh0t/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85MDVk
NTMwZS0wNThjLTRhY2QtYmViOC0wMWE4ZDBmZjQxZWIvMGYyNTkwYTAtZTFkZi0z
NmY0LWIyNWItMmYwYzM1OTdlZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTA1ZDUzMGUtMDU4Yy00YWNkLWJl
YjgtMDFhOGQwZmY0MWViLzkwNWQ1MzBlLTA1OGMtNGFjZC1iZWI4LTAxYThkMGZm
NDFlYi5jcmwwHwYDVR0jBBgwFoAUrtmkdO5svJwRfW497MACbTVIj9owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85MDVkNTMwZS0wNThjLTRhY2QtYmViOC0wMWE4
ZDBmZjQxZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcFaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKz6g1d4BPP10uTYSqWyS/G+FcdH4QctVMb5bE8YJ1YTPTTM4CLpmdij
qah4oNYLqc+HPJQQ89ALBKoFB3KhhfQ0kQuLdQF/yArtoO5HRVlaP+rGsPmzLiuC
EOLjjlbjOqsJLDgr0Ws3ysyoegLi7Uo113/ZDWE9YnsihxAVolNzQw+j+KRSYxgp
VlHbWVLak1wrYv7WqI0bk/qAwLLz7uOmMzHRjlYj4YGpxLgsDD+8EWi1AuSVwmAi
f1IXiyuacbISsdK+TcbBjZOmWw3DiP9z5qELgAYvj1M9tdMWSf3xepeRRQON4o38
L9DCaCtaF19vOdbQia/CgY12dzTvUak=
-----END CERTIFICATE-----
Generated at Wed Jul 9 20:04:34 2025 by rpki-client