Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/cc14b707-3e78-3382-99cd-75d692e5974c.roa
File:                     cc14b707-3e78-3382-99cd-75d692e5974c.roa (raw, json)
Hash identifier:          DkCKqOeiPsgGZeLzF3pGWFKXqXU6aHUQDa4jsCertfY=
Subject key identifier:   5A:B8:FD:B2:04:9B:1D:FE:EB:4B:86:98:CB:B8:4A:B9:5C:CD:E0:F8
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584A45402E5DD15C7BD9C334E940
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/cc14b707-3e78-3382-99cd-75d692e5974c.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     394089
IP address blocks:        144.125.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:2e:5d:d1:5c:7b:d9:c3:34:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=7478e3c2-671d-4291-82e0-5b9cca33add2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:04:2c:1c:0a:ff:73:9e:9f:6e:3e:b6:e2:cf:
                    fb:b4:ad:cf:38:4c:94:d4:f2:c5:68:df:54:76:4e:
                    41:f4:39:78:8d:f0:d0:9b:0b:a3:f6:3f:dc:72:83:
                    39:9a:35:14:ab:e8:fb:fa:e5:4d:ae:dc:c8:03:b3:
                    44:7a:3e:60:e6:a6:cc:f8:ab:b8:39:e2:2a:31:8e:
                    3a:2b:34:0a:e7:65:98:c5:9f:5e:1f:ae:50:ba:4b:
                    86:fc:8f:27:98:3f:49:eb:b5:01:b0:7e:9c:e5:eb:
                    24:16:3d:d1:95:bb:da:14:cc:3e:b0:4c:6a:da:dd:
                    86:f2:31:82:c5:7a:4d:48:10:d2:1d:53:45:c6:d4:
                    d9:e7:8d:fc:a0:9f:76:a4:37:50:77:7f:ce:42:fe:
                    12:0b:0b:7d:21:31:49:c6:d2:99:bc:76:53:8f:64:
                    e8:45:47:6e:a1:9f:82:12:05:3a:17:7d:92:fa:7c:
                    33:ac:41:7b:fb:92:58:32:9e:64:68:54:c2:99:fb:
                    79:d3:32:2e:8b:ab:22:84:4e:00:36:b1:fb:32:2d:
                    4f:92:4d:b4:df:14:dc:41:d9:a6:af:24:72:41:3f:
                    d0:e9:bd:f9:cb:de:0c:a2:4d:62:27:37:db:33:25:
                    a1:73:25:ff:00:57:b4:d9:94:1e:3b:4a:97:a6:3f:
                    d9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B8:FD:B2:04:9B:1D:FE:EB:4B:86:98:CB:B8:4A:B9:5C:CD:E0:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/cc14b707-3e78-3382-99cd-75d692e5974c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:4f:8c:bf:45:aa:17:5d:4a:9f:92:ca:fc:74:49:73:1f:47:
         b9:4b:69:d8:b4:b4:72:f3:13:83:8e:35:83:6b:28:6c:b6:cd:
         60:92:3b:39:3d:14:9c:9b:98:bf:d3:c3:4e:12:d7:b9:b0:eb:
         1f:01:83:da:89:e6:97:57:1c:8a:26:57:bf:b5:43:4a:72:9b:
         f6:12:34:31:65:b1:62:5f:d0:d9:be:32:64:18:7d:a1:aa:66:
         16:9a:65:4d:bb:64:29:91:1b:4c:ed:9c:0f:c1:e1:8b:45:b0:
         37:ac:d8:d6:11:3c:e6:87:e5:e0:09:7b:91:fc:95:cc:b0:71:
         d2:f5:96:0f:dc:10:da:03:02:f1:1a:9f:3e:91:89:03:13:61:
         de:9a:6f:73:2f:9c:e1:de:4e:b4:30:55:fd:bd:48:37:15:2a:
         1d:0c:9e:27:94:4b:4b:b9:68:45:09:5d:d4:b4:dd:bf:33:f6:
         93:31:e8:b3:8b:b9:ae:45:94:2c:9d:98:66:70:fb:29:ba:b5:
         4d:97:c9:61:5e:36:36:56:7b:00:2d:2c:6e:11:bf:be:59:2a:
         42:ef:aa:e9:84:57:51:67:7d:86:eb:50:b5:b3:1d:82:87:09:
         ea:55:de:fa:d2:99:53:43:fc:74:d9:70:24:4e:14:16:85:29:
         af:dc:b4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:38:13 2025 by rpki-client