Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/62b4dd36-c7a3-3eef-b137-1909346b3eec.roa
File:                     62b4dd36-c7a3-3eef-b137-1909346b3eec.roa (raw, json)
Hash identifier:          T7V+BKuCnNdVEAkPndjrnUY89ME/Br+i6xlw2ZchD+o=
Subject key identifier:   A1:95:10:DF:32:8E:49:3A:E0:16:58:DF:70:58:1E:A0:54:17:B8:16
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584B3AEC461D17E314664E32A080
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/62b4dd36-c7a3-3eef-b137-1909346b3eec.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     16509
IP address blocks:        169.224.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:46:1d:17:e3:14:66:4e:32:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=3d29d6c6-3d5b-4c49-b5d2-c4cf2d863c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c6:bf:f9:62:bc:21:82:d6:c6:f9:93:14:cd:
                    aa:2e:8a:46:08:84:7c:3c:ff:bb:cf:14:13:63:fe:
                    6a:24:db:74:cd:55:7f:f4:75:c2:00:85:25:ec:84:
                    4f:13:7e:db:6f:b3:56:4a:41:63:8b:ec:00:12:5d:
                    25:01:a0:14:12:26:f6:a1:c5:fc:d2:8f:0b:6f:a3:
                    02:67:23:2d:8a:e9:af:65:6e:08:d9:ff:d8:eb:35:
                    d4:b0:13:dc:b4:13:39:6f:5b:a0:27:bd:67:d0:f2:
                    47:15:b0:33:0a:98:9a:8b:88:ae:dc:74:27:4f:01:
                    49:dc:da:1f:fe:e3:35:1f:3f:83:d9:e3:af:a2:73:
                    f7:0d:a8:a2:44:8f:80:3e:c9:ec:ce:b9:9e:fa:59:
                    c5:99:26:cd:13:ba:4a:1e:bb:6a:88:ee:dd:8b:73:
                    d1:80:3e:0f:df:c0:b0:50:bf:a3:a5:84:b1:7e:d4:
                    30:dd:de:0c:93:af:4b:0b:c0:13:3a:5b:aa:a5:8f:
                    91:63:9e:4c:bb:60:5a:f7:2a:17:33:a9:e9:a6:4f:
                    a6:eb:3c:b0:e9:e2:f7:3d:53:b8:39:eb:02:a4:3a:
                    3a:30:eb:1a:74:0d:bb:7a:2c:88:b4:c4:7e:6b:ab:
                    ad:3d:fa:19:92:4f:1e:2b:8a:67:52:7a:df:35:cf:
                    ef:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:95:10:DF:32:8E:49:3A:E0:16:58:DF:70:58:1E:A0:54:17:B8:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/62b4dd36-c7a3-3eef-b137-1909346b3eec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.224.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:71:2d:a0:24:d2:45:32:98:f7:23:9a:99:35:31:af:7d:c8:
         f1:4b:9e:6e:a8:49:1d:c4:5e:ed:78:3a:dc:a9:f4:fd:5b:c7:
         1a:dd:9c:c6:88:af:56:87:d3:04:03:97:d6:60:23:6d:64:18:
         e2:8c:1f:18:b5:02:c5:85:2f:3a:ee:d6:d7:61:92:24:41:c2:
         cd:bc:6c:7d:64:52:40:ef:7b:90:a9:ad:67:27:87:31:1e:bb:
         90:82:45:aa:f8:37:8e:b2:b3:53:43:d1:d8:ca:4f:8c:1f:d9:
         55:dc:89:96:22:90:9e:94:9b:f3:1f:20:2f:1f:35:18:fa:4d:
         1c:ea:62:6c:65:ff:e0:9a:6e:9c:b9:d2:f7:3b:e7:16:e2:63:
         10:a7:81:3f:8f:1e:08:ab:6d:23:bd:6b:d3:a5:40:0e:5b:94:
         0b:29:8d:18:53:90:55:02:0f:11:fb:88:31:e9:51:60:da:fd:
         7a:7d:39:7a:1b:bc:42:58:cc:07:53:42:94:b3:68:36:45:d1:
         3a:c6:b3:97:5d:7b:be:9d:7b:a0:a5:63:63:64:f6:2e:1c:fa:
         75:83:51:61:f6:48:fc:e5:65:3d:5c:fd:81:fb:3a:7a:19:80:
         ec:13:4a:6a:b8:cb:c5:31:96:82:a8:da:bf:39:05:b8:c3:4a:
         f7:5c:ce:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:56:15 2025 by rpki-client