Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/673d8c52-73ae-3f93-8f17-fa93b4103414.roa
File:                     673d8c52-73ae-3f93-8f17-fa93b4103414.roa (raw, json)
Hash identifier:          4G4rZh9WJngNkC/bHBx8qQuGGHMY9YVzNDWXcn81h3Y=
Subject key identifier:   3C:71:75:25:80:35:94:FF:37:D4:A6:EE:24:0F:91:13:75:6F:E9:AD
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584B6D2C958EE3E70237BE5107A0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/673d8c52-73ae-3f93-8f17-fa93b4103414.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     394089
IP address blocks:        137.83.224.0/20 maxlen: 24
                          137.83.240.0/21 maxlen: 24
                          208.127.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:95:8e:e3:e7:02:37:be:51:07:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=0182d4f8-f690-484f-952d-c3d0b92dee99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d1:4b:df:05:0d:82:d2:7f:03:69:04:1a:19:
                    fa:bb:fc:2e:d2:7a:1a:90:22:ae:47:91:ad:ae:70:
                    a8:e6:31:f6:bf:87:87:df:0f:f6:0a:fb:0e:e7:53:
                    31:97:4b:46:f1:9e:6c:5f:81:c5:97:97:f9:0b:77:
                    36:1d:70:b4:72:02:ce:d1:87:03:ef:1c:f7:14:cc:
                    8a:a6:c1:06:72:ff:59:c2:ed:64:9d:66:4d:85:10:
                    40:8c:f8:aa:43:38:db:ac:05:04:99:05:69:aa:c7:
                    ac:1a:1b:92:b8:dd:7e:df:78:ac:b2:75:29:c5:ea:
                    10:dc:dd:db:fd:78:b3:6b:e1:e9:2f:b2:c0:82:8e:
                    2b:a5:47:39:78:09:e4:6c:b4:ca:e5:74:04:c8:cd:
                    de:a9:77:3c:ab:0e:7c:aa:7c:8a:08:8d:89:05:95:
                    90:08:3f:4e:4d:44:5e:14:8a:73:e7:42:e0:67:16:
                    7f:2d:34:5c:fa:1c:25:71:83:41:5a:a5:e1:80:76:
                    b5:ff:69:f0:cc:b8:07:0f:99:fa:ed:3c:4e:46:a6:
                    e9:a7:ca:93:20:79:6e:27:e1:bf:64:a5:f6:22:6e:
                    ea:01:28:fc:ec:a6:e2:7a:93:d3:fd:d4:8b:f9:15:
                    96:79:2b:d7:c2:80:3e:d4:41:95:ef:b8:7a:9d:8d:
                    b9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:71:75:25:80:35:94:FF:37:D4:A6:EE:24:0F:91:13:75:6F:E9:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/673d8c52-73ae-3f93-8f17-fa93b4103414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.224.0-137.83.247.255
                  208.127.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e6:bd:ae:30:55:70:83:70:9d:a3:42:87:cd:02:46:8e:7a:15:
         2a:6e:77:4a:db:b6:fe:d6:80:37:5c:8c:44:cb:e5:4d:d3:ed:
         0d:9c:8a:5a:0b:22:6c:ce:14:b6:81:0d:51:ae:52:05:cc:42:
         35:28:59:53:7c:55:08:13:19:46:bf:e3:0d:97:e5:bd:0c:f5:
         ae:00:88:57:82:c3:09:09:bb:77:f5:e7:22:fd:a3:6c:be:a9:
         3e:f3:bf:33:3c:39:ab:8d:c9:bd:1a:61:55:58:27:92:5a:e8:
         e3:c7:15:0c:34:56:30:36:92:00:ea:66:38:83:dd:1e:83:45:
         b1:1c:8f:a4:69:e2:c6:a9:71:ea:8f:8a:f5:26:04:11:e4:f1:
         04:e8:3c:a9:3c:1e:48:fc:07:eb:74:64:e6:b9:c2:9a:5b:f4:
         ce:61:72:c0:99:36:5b:dd:b0:61:2a:8b:96:a5:ec:70:a1:55:
         f6:bd:32:66:cf:d7:ba:01:c6:28:4c:46:cb:e4:52:fc:4f:01:
         d6:af:ce:23:01:5b:a0:04:3b:9a:81:36:fb:27:a8:41:f4:9f:
         68:61:57:3b:61:81:1d:59:a7:d8:ac:11:6a:58:fd:14:9e:1c:
         8a:39:01:6a:6c:b9:b9:3e:ae:57:50:e5:0c:cc:31:30:a5:02:
         07:97:aa:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:28:23 2025 by rpki-client