Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0631ab6f-ebed-3f82-b0a7-2d804f867d28.roa
File:                     0631ab6f-ebed-3f82-b0a7-2d804f867d28.roa (raw, json)
Hash identifier:          no2KgyRvx97YG+kc8mo7/0RmjchOTvzxlp6ON3tbKsg=
Subject key identifier:   F8:F3:2F:33:7F:D4:1E:46:60:CB:02:E1:84:27:92:03:4B:CB:7F:13
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584ADA9BCBD9B7736C5108599F80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0631ab6f-ebed-3f82-b0a7-2d804f867d28.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     394089
IP address blocks:        66.159.192.0/19 maxlen: 24
                          130.41.252.0/24 maxlen: 24
                          134.238.0.0/16 maxlen: 24
                          165.1.128.0/19 maxlen: 24
                          165.85.96.0/19 maxlen: 24
                          208.127.128.0/18 maxlen: 24
                          208.127.192.0/21 maxlen: 24
                          208.127.208.0/20 maxlen: 24
                          208.127.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:cb:d9:b7:73:6c:51:08:59:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=4b10d52d-179b-4fb8-982c-47807acc775c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d5:02:6b:23:13:60:c7:62:42:15:32:aa:2f:
                    51:cc:a7:26:b3:3f:87:b2:a5:2a:b0:8c:4b:a2:20:
                    7f:01:ca:4b:b7:ef:e7:16:28:ee:60:54:9b:27:09:
                    35:5c:4b:77:90:df:f2:04:39:70:73:21:52:ea:e4:
                    f3:8f:cf:20:26:d8:13:09:95:c4:aa:03:92:b1:70:
                    0b:37:5d:2d:66:7e:5a:04:37:9d:d6:ab:15:66:eb:
                    c6:68:5c:b8:e1:b9:79:95:00:f2:07:b1:d9:fb:b7:
                    19:f0:15:e6:17:51:e2:9d:4c:1d:8c:77:5b:c3:b1:
                    09:71:c7:ec:12:9b:44:75:f0:93:89:c4:b5:c5:69:
                    92:1e:df:cd:82:f7:ba:f2:2c:5d:a8:b6:39:04:15:
                    9e:55:13:55:8f:c0:9d:c4:a5:c1:d6:73:92:19:8e:
                    f0:5f:2f:88:fc:4a:3a:2d:15:79:f3:95:78:ea:86:
                    c6:05:b2:1c:fa:ee:66:c8:86:4b:f7:a0:c9:32:72:
                    8d:0f:ff:91:23:b9:a8:37:41:2c:bb:6b:66:9a:9a:
                    13:31:ee:b6:a0:f8:f9:95:71:77:61:4d:b4:fe:cb:
                    a1:68:bf:bb:cc:39:25:70:ba:d1:84:4b:3f:39:01:
                    63:28:a6:7d:1c:75:98:67:0d:1e:11:30:74:6b:ee:
                    9c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F3:2F:33:7F:D4:1E:46:60:CB:02:E1:84:27:92:03:4B:CB:7F:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0631ab6f-ebed-3f82-b0a7-2d804f867d28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.192.0/19
                  130.41.252.0/24
                  134.238.0.0/16
                  165.1.128.0/19
                  165.85.96.0/19
                  208.127.128.0-208.127.199.255
                  208.127.208.0/20
                  208.127.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:58:b4:e1:7e:ab:c8:78:d1:e7:bd:3b:42:78:c8:b9:ac:76:
         a0:d9:ce:79:2d:db:73:af:58:e3:d0:62:75:9c:3f:1d:93:89:
         80:16:3a:48:91:65:11:b1:90:b1:7c:d6:c5:cb:a9:86:38:52:
         5b:68:e0:e3:70:8b:d7:8f:cb:6e:78:de:91:89:0a:a3:02:07:
         06:ba:6d:1a:66:b4:1f:f7:eb:2d:15:39:ee:bd:e5:c2:e3:da:
         4a:c7:7f:9d:99:49:7e:e9:f5:e6:b7:dc:c8:bc:6d:1f:a4:7a:
         d9:c9:5e:cd:68:0e:a1:2e:a6:cf:90:c8:18:c6:da:be:2f:ea:
         5f:60:ba:81:de:65:32:70:f0:5d:e6:6f:b5:7a:f7:fb:91:d8:
         62:29:34:0d:8a:ed:df:ab:e8:c8:63:1a:4c:9e:d6:fe:7b:19:
         ea:fc:2b:65:31:44:d7:67:fe:0f:06:a8:ac:f3:27:a5:1e:9f:
         a1:79:ae:be:fa:32:8c:38:dc:46:d9:05:67:b3:2a:fe:47:6d:
         4f:16:56:44:f3:28:af:3c:ef:90:36:32:af:e5:69:3f:c0:2f:
         4d:94:39:7f:54:17:bc:ec:45:39:ab:73:32:fd:9a:80:36:ed:
         c6:32:57:dc:cd:04:9e:b9:84:cd:cd:91:6b:08:98:6e:b8:0f:
         5a:d4:75:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:55:12 2025 by rpki-client