Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ec6d4e79-7248-30e7-96c4-b3a77f3bc385.roa
File:                     ec6d4e79-7248-30e7-96c4-b3a77f3bc385.roa (raw, json)
Hash identifier:          U5jkmdZ5YPx6I8GLC/9IipeGnqTAC34RRyUtlYWARuU=
Subject key identifier:   77:4B:D4:EF:65:13:BA:40:A6:87:34:08:DC:74:C8:F8:86:27:29:61
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584AF0F14AA02BBFB121BA68B480
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ec6d4e79-7248-30e7-96c4-b3a77f3bc385.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     394089
IP address blocks:        169.224.152.0/21 maxlen: 24
                          169.224.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:4a:a0:2b:bf:b1:21:ba:68:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=b067bd56-988d-4436-83e8-4be41c1f782c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0e:7e:bf:d3:b5:78:74:bf:72:61:77:96:0e:
                    39:e2:8d:32:a2:51:af:86:3c:51:ad:61:1e:3a:58:
                    77:cf:26:b8:82:c4:66:10:3c:5e:c1:cb:67:5f:21:
                    18:dd:cb:fd:08:e8:e5:62:e2:b2:03:b0:9e:0f:10:
                    6c:35:08:36:03:be:2d:50:93:50:6a:9a:bd:a6:39:
                    cf:9f:0c:42:30:76:0f:46:80:ed:db:68:e5:07:1b:
                    b0:bc:e4:ae:bd:22:6b:90:6a:49:20:cd:a8:3c:18:
                    0c:4e:b9:b9:d0:91:92:7a:73:ce:ef:63:ec:25:f2:
                    f8:76:29:25:4e:25:99:4c:37:a7:68:77:bc:0d:7d:
                    fc:d4:70:62:4a:8e:46:16:7f:dd:ac:ec:ff:12:23:
                    3d:b2:ab:f2:c2:7a:2b:fc:aa:b1:a7:8b:5e:9d:86:
                    9a:9a:9a:b0:3b:b9:ee:46:05:8d:69:e7:0a:03:c3:
                    f1:f3:65:6f:5c:fc:93:97:9c:74:a7:92:84:33:de:
                    3b:75:99:ff:17:b9:2f:ed:a1:aa:8c:db:70:66:d4:
                    1b:32:fe:ae:df:b4:95:6c:39:da:50:65:3b:26:f2:
                    eb:61:ad:b5:5e:52:91:71:3b:07:0f:77:93:b1:83:
                    ca:05:3f:ee:7d:96:9f:e0:a5:cf:79:88:3d:03:4f:
                    69:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4B:D4:EF:65:13:BA:40:A6:87:34:08:DC:74:C8:F8:86:27:29:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ec6d4e79-7248-30e7-96c4-b3a77f3bc385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.224.152.0-169.224.191.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:1a:69:80:3b:7f:15:8f:03:14:c5:a9:7c:0d:6c:77:fa:e5:
         c3:5e:ae:ac:35:37:0c:93:c0:de:5c:cb:04:9f:c1:2f:ac:6e:
         59:91:23:84:88:94:2b:23:73:b2:25:5a:80:86:e2:0e:1e:1f:
         ed:ef:91:5e:6f:91:4d:69:38:be:e5:6d:a1:19:69:55:20:e3:
         5b:cf:dc:38:e0:1b:b7:52:44:f5:27:a9:74:a0:83:3c:5e:27:
         a2:91:f4:8f:c0:77:85:1e:da:74:0d:c9:26:ba:c6:fb:02:4b:
         4e:e1:d1:9b:a8:92:64:45:de:c5:06:12:69:bc:0d:c3:25:27:
         e5:34:da:25:c6:6c:d7:47:8a:e9:10:86:9f:7a:eb:fd:a7:8b:
         4c:b7:95:c1:fa:e5:94:b2:20:21:5f:23:fb:f0:73:26:bf:09:
         bc:24:fc:b8:5a:a9:e8:ea:86:49:c1:cc:7b:54:ff:c7:ed:1a:
         b8:a1:0a:28:04:3f:17:bd:06:80:72:5c:8e:d1:fd:35:d8:e5:
         f5:88:46:ac:0c:b8:98:cc:86:c2:12:fe:d3:f1:93:c6:2c:ed:
         92:0d:64:f9:e4:6c:b1:32:8d:4f:7f:b3:25:f9:f8:30:e3:7e:
         15:e9:c2:4e:97:ff:0a:54:c2:ef:95:6c:4b:e9:11:e8:77:33:
         35:58:33:f3
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWErw8UqgK7+xIbpotIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk
YjA2N2JkNTYtOTg4ZC00NDM2LTgzZTgtNGJlNDFjMWY3ODJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw5+v9O1eHS/cmF3lg454o0yolGvhjxRrWEe
Olh3zya4gsRmEDxewctnXyEY3cv9COjlYuKyA7CeDxBsNQg2A74tUJNQapq9pjnP
nwxCMHYPRoDt22jlBxuwvOSuvSJrkGpJIM2oPBgMTrm50JGSenPO72PsJfL4dikl
TiWZTDenaHe8DX381HBiSo5GFn/drOz/EiM9sqvywnor/Kqxp4tenYaampqwO7nu
RgWNaecKA8Px82VvXPyTl5x0p5KEM947dZn/F7kv7aGqjNtwZtQbMv6u37SVbDna
UGU7JvLrYa21XlKRcTsHD3eTsYPKBT/ufZaf4KXPeYg9A09pgwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFHdL1O9lE7pApoc0CNx0yPiGJylhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvZWM2ZDRlNzktNzI0OC0z
MGU3LTk2YzQtYjNhNzdmM2JjMzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAOp4JgD
BAap4IAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAihppgDt/FY8DFMWpfA1sd/rlw16urDU3DJPA3lzLBJ/B
L6xuWZEjhIiUKyNzsiVagIbiDh4f7e+RXm+RTWk4vuVtoRlpVSDjW8/cOOAbt1JE
9SepdKCDPF4nopH0j8B3hR7adA3JJrrG+wJLTuHRm6iSZEXexQYSabwNwyUn5TTa
JcZs10eK6RCGn3rr/aeLTLeVwfrllLIgIV8j+/BzJr8JvCT8uFqp6OqGScHMe1T/
x+0auKEKKAQ/F70GgHJcjtH9Ndjl9YhGrAy4mMyGwhL+0/GTxiztkg1k+eRssTKN
T3+zJfn4MON+FenCTpf/ClTC75VsS+kR6HczNVgz8w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:33:25 2025 by rpki-client