Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/ba153ac6-43d8-33de-a7d2-95b590eb4ada.roa
File:                     ba153ac6-43d8-33de-a7d2-95b590eb4ada.roa (raw, json)
Hash identifier:          IWDSPYXXsEkSUSdFjhSK7FgEoV/zgj7n5GpDIzd1tM0=
Subject key identifier:   15:10:A1:05:05:03:64:29:97:F3:B9:2F:09:78:7A:2D:ED:43:B3:3B
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F4328584B9B3CE439AF6A6430CB9AAA00
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/ba153ac6-43d8-33de-a7d2-95b590eb4ada.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     26383
IP address blocks:        207.90.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:e4:39:af:6a:64:30:cb:9a:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=a7b70a9e-45a9-4fe3-88d3-a2f5f87b3e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b0:9e:5d:a6:a3:66:25:e9:73:21:5b:f8:bb:
                    7f:68:b9:85:94:4e:c0:99:f5:6a:83:29:18:e6:2d:
                    2b:39:a6:1c:43:9f:d1:58:ff:e9:8e:90:7d:48:5c:
                    be:90:09:a5:3d:09:fe:13:83:17:2c:9e:fb:e5:e3:
                    6e:7d:df:fe:5a:90:96:27:1a:d2:96:19:cb:a7:eb:
                    19:e2:ae:2f:cf:f0:aa:13:20:1e:8e:01:11:72:3b:
                    93:3c:85:10:8c:21:e6:13:8e:11:96:a9:91:9d:d1:
                    d3:ea:8a:52:82:c8:5b:35:b8:91:cb:45:a2:d0:64:
                    00:58:bc:67:47:76:d7:cd:51:58:f3:54:5c:fd:01:
                    b4:bc:35:b2:36:2d:e7:cf:dd:87:1b:56:c7:d3:c4:
                    02:28:31:59:7b:97:f3:f9:ef:d0:d5:84:e1:67:fb:
                    49:03:dd:a0:ff:5f:40:d6:9c:fa:99:dc:96:aa:da:
                    2c:a9:9a:f9:bc:79:1b:7d:7f:9e:52:d8:a7:5a:14:
                    98:6d:5f:91:7b:f0:bc:05:75:22:27:9b:be:7b:a0:
                    98:17:44:ae:53:ff:02:66:54:9d:c9:89:5f:ea:b0:
                    ff:77:a5:a0:4e:0a:68:ef:61:6c:79:44:7f:22:68:
                    13:06:87:6d:e8:b8:6c:d6:54:84:37:38:56:1e:7a:
                    ad:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:10:A1:05:05:03:64:29:97:F3:B9:2F:09:78:7A:2D:ED:43:B3:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/ba153ac6-43d8-33de-a7d2-95b590eb4ada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:31:5c:a2:8b:a6:07:63:d9:b4:f6:ce:5e:d2:53:c3:60:bd:
         2a:26:16:f4:3a:58:75:99:b7:42:cf:09:cf:fa:5a:0e:2a:ee:
         72:6a:cd:bc:81:79:eb:76:1e:0f:dc:8a:a1:de:9d:95:df:3c:
         64:da:e5:0a:f4:76:f8:a6:7e:39:9c:e2:c5:f2:4e:15:f1:57:
         f4:0d:83:49:f0:2d:47:c0:14:ed:ef:51:34:8e:f3:45:69:a3:
         dc:c3:fa:d1:96:a1:f1:47:6a:ef:f7:c0:59:70:ee:bf:20:3a:
         ec:3d:bd:e1:05:cb:63:5a:b7:40:fc:87:2f:78:6b:6d:2c:fa:
         98:05:c3:8d:6f:e5:e5:50:5b:d8:91:ac:2e:64:6d:a5:9d:4f:
         58:fc:38:c3:97:fa:ab:df:eb:7b:3e:fe:02:b9:64:2b:96:d9:
         0e:7c:7e:90:94:03:37:97:9a:33:55:93:5a:78:85:63:16:83:
         ea:f2:e0:be:4e:ff:ff:a0:f7:6a:34:2d:12:cc:f2:4b:f7:18:
         c2:3b:19:d2:3b:7d:da:ef:7b:5c:9a:7e:d6:21:d2:6c:09:7a:
         09:62:eb:e5:ff:e4:d9:2c:91:b3:11:07:28:4a:96:b5:59:c1:
         e7:67:ab:b9:ec:b9:ad:87:af:a7:32:e6:5e:51:5d:15:b2:4b:
         4b:09:87:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 23:03:31 2025 by rpki-client