Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d608131c-82c0-320b-828e-21522b254dd7.roa
File:                     d608131c-82c0-320b-828e-21522b254dd7.roa (raw, json)
Hash identifier:          jDb5ifvbtLfzShjoE3m/uAMCETakRs5GF1ZbuNYqN8o=
Subject key identifier:   C0:09:B2:D8:A1:C3:FE:7B:45:DF:F6:41:2B:78:56:DD:27:FB:5D:AA
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584AFEE6CD11F5BE80CB99A3AE00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d608131c-82c0-320b-828e-21522b254dd7.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     394089
IP address blocks:        134.231.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:cd:11:f5:be:80:cb:99:a3:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=a3e801e4-33e0-4211-b95d-feea0cfaece3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f2:05:09:ee:7c:09:98:c8:bc:14:9f:d5:33:
                    f5:2f:dd:fd:2a:0c:0f:76:e8:7a:10:14:52:60:c9:
                    9e:58:a8:ea:af:31:df:33:0c:f9:4a:f3:41:d7:1f:
                    17:c0:5d:e2:46:84:50:c0:5f:c1:1f:23:67:08:fb:
                    05:85:47:cf:37:81:d8:af:33:ea:e0:d7:97:d4:18:
                    e1:13:86:2e:7a:2c:5a:06:17:8a:fa:4a:77:42:57:
                    f0:c2:dd:3c:fe:c9:35:13:78:be:f3:e4:a1:51:6b:
                    48:f5:78:98:3c:ab:42:6e:dc:67:03:a3:44:c8:b5:
                    87:c6:99:e0:fc:b3:5d:2e:69:4c:b9:7c:d7:0e:00:
                    20:dc:11:5e:bb:d1:17:76:4e:e5:a5:64:1f:57:ef:
                    79:c5:95:8a:86:bd:46:b2:6f:95:b4:27:31:ed:51:
                    0f:f0:c5:68:03:42:0a:21:10:77:1c:f0:10:21:86:
                    4f:33:fc:78:52:31:3f:f5:5d:e4:03:e0:bc:2d:4b:
                    6e:c5:af:e4:18:5d:73:c8:5d:1b:f4:f7:c1:29:f4:
                    0a:54:8c:01:9e:80:51:3b:57:a1:42:54:cf:0d:2a:
                    69:c2:f3:a7:02:fc:90:22:95:c1:53:ee:a6:28:f4:
                    ea:8b:0c:9f:68:37:7f:69:80:31:89:52:cb:64:85:
                    50:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:09:B2:D8:A1:C3:FE:7B:45:DF:F6:41:2B:78:56:DD:27:FB:5D:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d608131c-82c0-320b-828e-21522b254dd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.231.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:ce:99:77:c5:59:7b:05:92:40:91:b5:39:72:d6:7a:fc:a2:
         81:f2:18:7e:7b:0b:dc:19:b5:32:d4:0b:98:ec:3a:07:d2:ad:
         22:9a:0b:41:bb:9c:9e:5d:ea:b5:fb:e0:84:17:49:f3:d2:b1:
         cb:77:27:4d:eb:bb:38:0e:01:b3:82:6c:4a:ce:6a:98:4b:08:
         cd:1d:b8:b1:c4:dd:ac:41:0e:6c:cb:d9:ba:9e:44:2b:38:50:
         1d:90:f3:80:f6:5d:1e:fc:ff:89:5b:ef:7c:8a:dd:15:3f:a5:
         b5:6a:db:3b:bd:b5:08:4a:dd:e3:20:08:af:75:c1:4d:c4:ac:
         c2:9e:bc:a2:c3:5e:5b:0a:46:61:80:29:04:30:fa:8b:df:41:
         b3:26:3c:fd:74:d3:fd:c9:95:4d:41:2f:a4:22:b7:64:87:c6:
         15:80:fb:fa:37:8b:b5:57:91:e9:61:c0:9c:8a:6d:1f:ed:74:
         a2:21:85:0a:45:5d:70:e3:e3:a5:46:d5:03:7b:94:d0:cc:04:
         d1:1e:db:7a:6f:59:50:07:86:6f:ac:20:a9:fb:1f:43:a0:01:
         ce:e6:af:5d:7c:c1:1b:04:af:79:98:e8:0c:b1:0f:dc:11:9b:
         12:c7:f5:ee:c6:6d:77:90:33:fd:39:8a:53:e7:b5:d0:24:f2:
         e4:a2:d4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:33:41 2025 by rpki-client