Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/90a855f2-1f22-34c5-b252-7d586cd3caa6.roa
File:                     90a855f2-1f22-34c5-b252-7d586cd3caa6.roa (raw, json)
Hash identifier:          w07DRokkU6GkmVqYcENQUnpWY5xlzZ/g2XLyiMWdBqI=
Subject key identifier:   EE:3F:D5:F9:0E:71:05:C8:A4:99:42:EA:2C:1F:6A:C9:08:6C:3E:E2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1968239FA15135D11673600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/90a855f2-1f22-34c5-b252-7d586cd3caa6.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     12132
IP address blocks:        216.208.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:82:39:fa:15:13:5d:11:67:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=59f21987-878c-4e15-bc9f-9567bc836583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:04:4d:31:0f:93:1a:d2:9f:95:c7:92:15:e2:
                    98:fb:ef:f7:95:fb:df:6e:af:29:f8:82:db:43:3c:
                    b7:ee:69:2a:57:7e:4e:2c:d8:f6:7a:23:c5:93:0b:
                    ad:ef:2b:e6:35:e9:a0:d4:8a:cf:93:de:ed:04:d9:
                    57:82:c2:12:b6:4d:7f:4a:6b:dc:32:fd:8a:4f:86:
                    5a:2b:5c:a2:e1:d4:b6:b6:6f:05:19:29:e7:ce:27:
                    de:06:6c:fb:4b:37:25:ce:8f:fc:13:b9:69:44:d4:
                    1e:c1:ed:f6:a5:50:1b:a3:32:d4:a1:fa:a0:ef:68:
                    84:e5:d1:ee:21:dc:34:1d:58:93:e4:05:37:e4:ba:
                    57:e1:ff:ea:52:0d:d0:a6:8c:82:99:82:39:eb:2f:
                    ab:a0:de:5f:25:ff:0f:4a:eb:4c:e1:a9:c4:b5:04:
                    6c:42:aa:3c:28:37:93:00:c6:b1:53:ef:cc:5d:05:
                    33:b6:df:c3:8b:83:83:8c:d5:a8:22:e1:00:ed:9a:
                    97:2b:30:40:5f:61:3c:d9:45:e5:f4:d3:ca:ba:ae:
                    35:be:b1:15:d5:06:84:36:ea:21:d1:37:d1:3e:4b:
                    90:b1:be:a4:e5:df:6d:85:81:25:d0:72:29:f8:06:
                    28:14:d3:75:6b:55:33:21:51:0d:f6:2c:0d:c3:60:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3F:D5:F9:0E:71:05:C8:A4:99:42:EA:2C:1F:6A:C9:08:6C:3E:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/90a855f2-1f22-34c5-b252-7d586cd3caa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:87:ff:d1:58:18:92:52:d6:2f:d6:55:9e:cf:ae:28:04:54:
         52:04:cf:e7:25:66:c1:54:f9:a8:bc:ad:e5:05:6e:9a:a9:de:
         68:26:35:3c:f9:15:fd:37:d4:36:38:b9:16:a1:4b:10:43:a1:
         de:54:97:a0:05:35:b4:b4:42:98:b4:b6:b6:c3:1a:ba:9c:ce:
         f2:2f:eb:d7:39:41:e1:e6:c0:e0:09:ee:88:a7:30:9c:08:81:
         de:85:d1:a5:92:03:c4:e8:10:92:0b:34:3c:a0:59:b9:62:d8:
         03:98:04:0c:d3:a6:4a:a3:e3:70:18:9f:f9:10:93:09:93:12:
         55:ab:1c:ef:db:66:d0:f2:9f:95:56:cc:f1:8f:a7:fa:38:5e:
         bf:19:a4:bb:c6:22:00:39:52:74:f4:89:f5:b0:fe:fb:3d:7c:
         47:d7:6c:0e:f2:3e:20:3e:b6:a6:8f:14:b4:62:31:27:f0:f1:
         88:99:c2:9d:78:cd:b9:e8:b6:9f:a2:25:87:a0:1d:e7:25:15:
         fb:dc:a8:8a:9a:fd:d2:d0:bc:95:db:93:9e:bb:9a:fe:56:64:
         1b:40:02:16:48:84:e7:b7:f2:22:60:44:2d:57:9b:ee:2e:7c:
         a2:59:db:49:e9:40:d1:07:af:17:1d:19:a9:0a:b2:1d:0b:4d:
         da:cc:02:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:01:27 2025 by rpki-client