Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0a8726a9-8e8a-3934-b157-04060f75ccf9.roa
File:                     0a8726a9-8e8a-3934-b157-04060f75ccf9.roa (raw, json)
Hash identifier:          Cb+Nr2+EaN+Iio5rJW8sxQDzxA5C54ds9OqEMQhP+Qs=
Subject key identifier:   58:96:1B:1B:7A:1B:71:77:F5:E4:C6:EF:2D:51:AC:60:87:16:F9:3E
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584A411049E145A82B677A38EE80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0a8726a9-8e8a-3934-b157-04060f75ccf9.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     396982
IP address blocks:        130.41.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:49:e1:45:a8:2b:67:7a:38:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=af20ee04-5e53-49f3-80e9-26dd85996757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f2:54:7b:0c:93:90:b2:00:6c:73:19:d4:62:
                    cd:f9:78:b4:b9:8c:f1:1c:35:78:23:5c:8a:fe:16:
                    80:8a:5a:49:2e:c4:62:f7:f9:ed:fe:9a:aa:db:55:
                    b6:09:2b:b2:3e:de:80:17:b7:18:88:60:11:f7:c3:
                    f1:23:9b:94:a3:cf:ae:6c:9c:28:cc:03:ba:db:a0:
                    72:bf:14:53:ed:fa:a1:18:b4:ea:d1:07:c0:cc:02:
                    2b:17:1c:0d:4f:27:e7:f4:a8:5c:ac:2b:72:cc:31:
                    6b:0c:3e:c0:58:b7:4a:15:9d:c7:e2:c1:76:68:57:
                    92:80:e7:9c:78:2f:f3:ba:60:0a:c8:88:c4:f7:cd:
                    ef:a6:86:e5:4b:ed:5f:21:31:41:ea:4f:5c:e8:1a:
                    41:d4:d4:3b:ff:cf:a3:5e:d1:5f:1c:43:41:64:91:
                    57:b7:65:6a:6e:83:cb:48:21:ae:83:eb:20:36:65:
                    31:c0:55:29:48:b0:4b:e2:0b:04:38:c2:cf:c1:65:
                    d3:fe:e9:7c:76:9c:12:f2:de:88:2b:2e:7f:f4:b5:
                    32:8c:e6:0a:9e:ae:a6:c7:ac:9a:ca:b7:9c:df:7d:
                    2b:e1:4d:87:58:14:d3:eb:78:9c:74:a2:7e:f9:3f:
                    56:7e:75:64:9c:45:41:3f:27:e1:72:46:fc:e6:45:
                    c8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:96:1B:1B:7A:1B:71:77:F5:E4:C6:EF:2D:51:AC:60:87:16:F9:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0a8726a9-8e8a-3934-b157-04060f75ccf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.41.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ed:ee:ad:94:3e:c1:84:ad:5a:42:30:7a:2e:82:1b:67:79:d9:
         50:61:98:ad:6e:2e:da:3c:7f:e1:32:f3:76:3f:1f:9a:3e:b4:
         64:cc:44:29:ca:ec:59:2f:f5:ce:37:d9:30:4e:36:e6:3e:00:
         77:55:2d:6f:c3:b3:ac:3c:70:81:f9:ea:2a:9a:fd:70:b5:49:
         a4:93:ea:01:94:c4:c7:97:0f:64:18:0d:9c:24:18:4b:08:f7:
         f7:63:eb:14:5d:4c:44:e5:17:7b:6f:29:c7:55:72:54:61:d1:
         4e:ce:bc:18:fb:07:1c:66:20:79:be:dd:6b:7b:a4:60:3b:1c:
         97:49:81:b9:18:b2:58:05:c9:59:24:18:a7:cf:9e:b0:ef:c1:
         5d:86:0f:53:70:8c:c0:a3:84:8f:08:b7:e6:38:ac:9a:74:23:
         78:44:e4:c0:b6:73:25:35:ff:9b:af:ca:58:51:ef:e1:55:4b:
         04:66:cf:01:04:01:36:d3:69:ad:a6:7e:bd:1e:12:3a:84:c7:
         0d:37:b5:64:fb:e1:80:e9:7f:18:18:03:4c:19:88:4b:1d:5f:
         de:81:46:c6:7b:a6:4f:9b:ba:07:80:00:e4:75:92:ce:fb:9b:
         4e:04:4f:98:5b:d6:64:ab:87:e7:e2:ef:5c:91:e4:f1:1e:4f:
         17:f9:06:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:58:01 2025 by rpki-client