Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7753b393-47b5-3a51-8d15-df478c5d264c.roa
File:                     7753b393-47b5-3a51-8d15-df478c5d264c.roa (raw, json)
Hash identifier:          IJuyJBLo0LFEbAhSuTpfPMjk5o/JMGEDKNI3onlqGb8=
Subject key identifier:   80:D3:DC:B2:FE:E5:DA:BE:07:88:10:7A:53:53:ED:0B:C6:D0:41:CF
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584A3CE02131CD8451F80CE37D80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7753b393-47b5-3a51-8d15-df478c5d264c.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     394089
IP address blocks:        140.209.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:21:31:cd:84:51:f8:0c:e3:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=15f72c82-f1ae-44aa-906b-c0c1b6ee4731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:35:90:00:59:65:06:f8:4a:d8:2b:91:59:
                    d2:2e:8a:1c:8f:da:9b:2d:99:47:ea:32:39:0a:a3:
                    0e:74:ce:50:4b:05:b2:59:e1:b7:2a:63:98:b8:da:
                    26:24:1e:41:50:71:25:fc:1b:23:65:21:94:88:6d:
                    f8:9f:4d:d5:22:24:47:15:a9:30:8b:05:52:5e:d1:
                    d7:67:06:72:07:60:67:bb:ce:7f:3d:d1:86:36:28:
                    71:d2:fd:f6:d2:af:e2:cd:fd:36:61:91:9e:7c:88:
                    64:fa:1c:52:4a:e5:ec:1d:47:38:2f:9b:68:dc:d4:
                    4c:b3:45:bb:ed:b3:de:8e:38:9a:2a:3f:5c:59:6e:
                    c4:92:61:2e:92:b0:bb:88:33:ec:d6:ea:aa:16:9b:
                    e8:b7:38:0b:54:da:94:d1:86:0f:3f:13:58:1c:70:
                    38:77:5a:8f:ed:2e:cb:11:66:03:c7:fd:8f:ba:12:
                    98:ca:60:93:02:a4:e5:48:42:7d:14:b1:99:ff:e9:
                    b1:49:96:15:90:c4:06:14:3d:e7:f1:b0:02:8a:cb:
                    e6:1f:e1:72:0c:b5:d2:56:6c:4d:ba:a2:91:ce:7b:
                    ed:dc:f3:67:32:43:be:72:60:53:9d:c0:2c:57:81:
                    b7:7f:cb:40:99:17:17:b2:50:ac:9e:37:6c:0e:4c:
                    d1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D3:DC:B2:FE:E5:DA:BE:07:88:10:7A:53:53:ED:0B:C6:D0:41:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7753b393-47b5-3a51-8d15-df478c5d264c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.209.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:9c:fc:17:1d:74:eb:31:46:c3:e1:6e:13:90:f6:5c:26:72:
         3c:7e:29:0c:e9:76:9a:45:51:1a:dd:75:38:a8:0d:51:b9:6f:
         dd:09:20:03:80:64:58:13:c3:a7:22:89:7a:5a:38:ff:20:07:
         a6:27:88:e3:94:b2:19:c1:4b:eb:35:11:64:77:21:61:5e:70:
         83:89:88:a4:ab:6c:e8:32:51:0d:de:9c:c5:a8:10:c5:fd:c1:
         b2:f7:f8:bb:61:58:3c:e5:99:14:41:92:3b:67:aa:6f:0e:e4:
         d6:83:e3:8f:0a:2c:12:22:5f:f2:40:3c:4e:a7:db:fd:14:fa:
         10:99:8e:f2:68:b3:bf:77:77:9c:7b:32:55:75:f6:6e:34:33:
         50:07:9a:75:f9:35:e7:b4:ef:d5:17:aa:0b:1f:18:5a:e6:d8:
         1a:e6:ae:a7:ef:6d:c6:12:19:f3:f7:11:21:6e:80:8b:a7:7a:
         ac:16:16:cb:6a:1f:81:48:e0:a6:b7:f1:71:94:bd:f5:00:9b:
         49:45:1c:bc:f0:0d:37:c1:30:fc:89:e6:ea:6b:a6:4d:53:56:
         c5:97:5e:8d:99:ae:7f:cc:da:9a:13:d9:00:38:4c:60:5f:2b:
         be:ca:87:28:7d:cc:86:15:7c:46:e7:ea:32:10:45:04:cb:2f:
         28:53:49:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:42:27 2025 by rpki-client