Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4735263d-7d05-3593-8237-7753095450c0.roa
File:                     4735263d-7d05-3593-8237-7753095450c0.roa (raw, json)
Hash identifier:          U8iA48AxCsj77MKKJcsWK4uiH4rkhsoAAqbB9Jf4zlk=
Subject key identifier:   CE:D9:15:B2:4D:3C:AB:F9:F5:6B:40:0C:96:3B:7B:00:93:4E:C4:76
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584B6BC74920BEA572EEA3BF1180
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4735263d-7d05-3593-8237-7753095450c0.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     54538
IP address blocks:        165.85.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:49:20:be:a5:72:ee:a3:bf:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=54f505d0-ad62-4551-b397-64fecc5df010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:d0:39:f5:5c:e0:e8:18:6f:22:1e:96:c1:
                    90:10:c9:8e:06:65:d1:78:d3:a2:aa:4f:6b:64:b6:
                    f3:0b:da:b3:1a:77:41:cb:cd:41:e2:14:29:40:75:
                    5d:4e:49:69:95:f7:90:6c:0b:b2:d6:d4:e4:43:e6:
                    cf:b1:c2:2b:8d:53:0b:57:f0:5c:a8:fc:37:8a:d9:
                    56:ec:f5:17:ae:b5:0a:40:9d:a7:fa:ba:a8:82:29:
                    2f:0b:e2:71:ea:f9:34:36:d0:75:d0:5f:b0:4d:65:
                    65:66:06:74:c5:85:6b:90:f2:c5:1b:c5:f8:6c:76:
                    19:47:91:d3:ce:e2:14:ba:5c:78:5c:fa:82:29:4f:
                    ae:aa:26:ca:46:e8:ae:6c:3d:75:97:99:41:55:45:
                    87:8e:ca:94:7a:a0:40:fb:f4:ee:23:5b:18:5b:cf:
                    e7:f4:12:30:da:a8:2a:39:52:04:c5:5e:ba:cb:26:
                    aa:af:53:78:cb:2c:13:71:cc:e4:34:66:2b:7f:3f:
                    85:c5:a2:a5:20:a1:45:4f:83:ee:ef:8d:ac:8d:75:
                    50:c8:03:37:bd:f5:fb:8f:eb:ee:93:61:1d:9b:1d:
                    d6:28:dc:62:34:ed:5e:d1:a2:b8:d9:ea:bb:74:e8:
                    3d:71:70:0e:ed:4a:92:c6:ea:9f:65:ad:4e:34:1a:
                    8f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D9:15:B2:4D:3C:AB:F9:F5:6B:40:0C:96:3B:7B:00:93:4E:C4:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4735263d-7d05-3593-8237-7753095450c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:76:4a:00:b9:e9:b0:5c:6d:85:a0:09:30:f7:f3:7a:52:37:
         ef:ed:f0:b6:5f:70:d5:aa:0b:90:31:8d:b3:40:65:b4:ef:30:
         f3:42:23:e9:49:d6:ff:59:0c:96:a4:cf:76:32:ab:32:ea:bb:
         8a:fc:2e:ac:a5:a2:40:83:3b:18:93:77:8e:89:16:df:c7:50:
         9a:a9:5e:de:3f:d7:bc:2f:e8:f9:b4:b8:8e:39:6d:40:97:89:
         ee:cb:19:0c:bc:4f:91:dd:c5:50:b7:c2:70:ae:7f:83:e0:51:
         f7:4e:9b:b1:b8:d8:29:ba:50:b6:cd:a3:f8:7b:f9:b6:0f:45:
         4a:50:50:64:73:dc:0e:e9:36:3a:10:f0:a5:e2:95:90:10:1e:
         29:4a:f3:5f:c1:70:de:24:4c:ae:f5:cd:a6:ad:68:bb:a5:f6:
         b4:e6:8d:df:a9:a5:13:38:e2:6d:4d:ca:d5:af:39:65:41:da:
         e6:90:09:3c:e5:18:6c:0b:ad:ed:02:dd:d8:10:48:df:eb:f8:
         75:fe:0c:a8:d5:10:a4:e4:98:2b:ad:6c:7c:80:ce:31:c2:66:
         5a:34:01:68:c9:1c:be:0f:85:3b:67:a9:ab:9d:1e:49:c9:4d:
         00:3e:48:9c:39:ce:0b:a3:8c:45:0f:ac:c4:9b:e3:97:ea:d6:
         75:6f:c6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:55:52 2025 by rpki-client