Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7962cec5-5489-3218-bf3d-cae8d72ac060.roa
File:                     7962cec5-5489-3218-bf3d-cae8d72ac060.roa (raw, json)
Hash identifier:          Bd5uM8mUrut0f//OJIs/p0RrX+hpMu1Nde8DFValW0A=
Subject key identifier:   E4:7F:44:AE:F3:4D:E5:84:58:86:20:09:E0:D2:D3:AC:7D:81:33:0A
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584B127163452DF758F5E987C430
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7962cec5-5489-3218-bf3d-cae8d72ac060.roa
Signing time:             Wed 03 Sep 2025 13:00:41 +0000
ROA not before:           Wed 03 Sep 2025 13:00:41 +0000
ROA not after:            Tue 02 Dec 2025 14:00:41 +0000
asID:                     394089
IP address blocks:        134.231.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:12:71:63:45:2d:f7:58:f5:e9:87:c4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep  3 13:00:41 2025 GMT
            Not After : Dec  2 14:00:41 2025 GMT
        Subject: CN=e6b11acf-490b-4d55-83ef-0f94cbafcc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c7:21:e2:6a:c4:a6:e7:99:53:42:f9:a8:a9:
                    1c:96:11:25:20:2e:0f:7a:07:46:d7:7b:db:9c:82:
                    fd:0d:e3:70:98:ae:77:9e:fc:8d:b2:bd:4c:50:e0:
                    4b:04:ad:6d:82:cf:65:b1:2a:2c:f9:98:d0:52:d6:
                    0b:91:0d:2a:7f:d7:cd:38:67:f6:71:d5:03:e7:38:
                    5e:f1:52:7e:aa:bd:79:de:de:99:a0:cf:23:76:49:
                    54:4b:d3:03:54:32:1e:aa:98:33:5d:30:02:80:36:
                    0f:7d:6c:72:03:da:f0:1a:9b:e1:af:b1:18:a8:9b:
                    00:f6:e6:d8:f8:c3:36:53:85:4c:95:ea:4a:01:2e:
                    35:c9:50:07:63:ee:56:6a:e7:53:f1:62:ec:ce:78:
                    28:48:88:e3:9e:7f:9d:a2:6e:08:1d:fb:d9:d4:6d:
                    ea:c5:d1:a9:80:c8:2f:02:2b:6d:af:74:f5:a3:ca:
                    c3:13:4e:3c:ad:6e:4c:ba:21:47:bd:1c:fa:d7:e2:
                    84:20:04:67:45:a2:89:41:f7:9d:59:3a:76:35:3e:
                    cb:97:d2:38:a1:47:bb:08:18:16:40:d3:2b:23:2f:
                    7d:cc:50:10:fb:f1:a8:42:20:7a:81:bd:fd:20:41:
                    d3:81:fb:12:d6:66:75:71:0a:20:5b:5f:72:f7:0d:
                    93:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7F:44:AE:F3:4D:E5:84:58:86:20:09:E0:D2:D3:AC:7D:81:33:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7962cec5-5489-3218-bf3d-cae8d72ac060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.231.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e6:b8:a3:9a:f2:ea:41:d1:54:b1:a4:2b:19:63:38:ed:2b:
         bb:9e:10:27:75:47:2f:ec:83:d6:f4:c5:e7:18:12:d9:c7:38:
         24:1f:36:bd:88:99:26:f9:e7:71:24:16:1b:57:2e:40:99:a7:
         52:1d:71:0b:d8:d3:ca:47:97:ca:0c:9e:3f:e9:31:20:a4:ca:
         49:ed:a5:d0:1c:4f:1f:32:47:11:09:95:d4:8b:3a:3b:d5:3d:
         be:c9:48:7b:82:41:54:e1:17:ac:c9:e5:54:1b:b9:c4:a7:8c:
         2b:db:07:9f:42:84:c9:24:6a:1b:1a:26:e5:2a:25:1c:1a:70:
         26:81:ce:02:75:f6:5a:31:6e:63:36:32:ea:59:b8:1b:dd:ad:
         4f:66:73:5f:17:85:5a:e8:cc:3f:bd:23:61:10:bd:15:19:92:
         4f:1b:6b:b0:77:fc:e6:27:e5:66:2c:07:04:ac:5f:cd:fd:07:
         9d:01:6f:f1:e2:93:84:4d:52:82:d4:cb:01:59:29:15:10:d5:
         93:35:13:96:2d:c8:0b:50:85:00:5c:b2:79:45:b1:94:8f:17:
         c3:6f:97:88:de:8e:d9:de:3c:22:88:83:97:19:4c:83:1e:e5:
         3f:8c:de:9f:1e:be:55:07:c5:81:1b:96:6b:44:e1:d4:e2:7a:
         57:1e:a5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:11:27 2025 by rpki-client