Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4ea78b05-576a-3537-bb20-2bac7e1ba1fa.roa
File:                     4ea78b05-576a-3537-bb20-2bac7e1ba1fa.roa (raw, json)
Hash identifier:          NtHi7QZalio14f8ZEkmNSB2/wL/rjJjiVIvGTK9/iEQ=
Subject key identifier:   F8:E6:51:6E:D0:8C:CD:AB:C8:8C:17:84:DF:B2:46:5A:E0:23:5C:4B
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584B2FC185F78621939AB7AA1380
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4ea78b05-576a-3537-bb20-2bac7e1ba1fa.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     25871
IP address blocks:        8.41.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:85:f7:86:21:93:9a:b7:aa:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=bf20284b-e709-46c4-9bad-cd8d03dd691e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:14:89:89:be:1e:0c:72:c4:77:7c:f7:07:
                    a6:d4:ee:94:9d:af:e6:56:cd:ed:27:b2:75:d3:c2:
                    9b:12:19:b5:67:cb:90:fe:0b:fb:0f:4a:bb:59:67:
                    76:94:03:30:75:72:67:1f:85:a5:90:6b:1c:3d:68:
                    ce:e5:a6:f7:52:78:ef:7a:a6:85:35:8e:20:58:06:
                    73:c6:8b:80:c4:63:67:7a:40:d2:57:2e:25:eb:45:
                    29:77:31:94:35:cd:61:09:ec:e4:37:da:78:34:46:
                    a7:51:5d:fa:87:b0:6c:ca:af:8d:2e:cc:66:84:e7:
                    64:38:b1:c5:57:b5:57:11:3d:a2:b2:68:17:6f:90:
                    bf:50:d3:8b:9b:eb:0f:77:1b:ff:fa:b7:19:f4:24:
                    ff:ad:f4:d1:c6:67:48:24:72:09:71:7a:6d:95:ea:
                    6f:ed:5a:e2:fc:cd:c8:7d:4c:f4:41:86:81:3c:0e:
                    a2:15:95:af:d7:52:a3:dc:e8:f8:0f:e5:07:90:30:
                    25:2e:3f:22:83:52:2a:7b:66:7d:3f:30:f2:1d:7b:
                    1b:7e:0f:f3:5b:6e:76:11:40:10:be:99:46:0e:24:
                    79:67:90:36:8b:51:43:f9:75:f9:c2:de:26:2d:20:
                    1a:41:0c:a1:3e:f7:83:b2:d2:87:29:7e:fa:9d:a9:
                    91:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E6:51:6E:D0:8C:CD:AB:C8:8C:17:84:DF:B2:46:5A:E0:23:5C:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4ea78b05-576a-3537-bb20-2bac7e1ba1fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.41.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:55:8a:df:75:ba:2a:b0:85:0f:e1:86:49:93:5f:59:be:4f:
         3a:3c:95:ca:ee:f5:23:47:89:52:33:f2:9e:bb:ae:4e:cc:5d:
         2c:75:fa:93:f0:7a:39:f6:06:f0:f5:24:f9:49:64:35:15:6e:
         9a:2f:98:ec:51:d9:e2:42:2b:92:73:58:1c:1d:d8:4c:19:f9:
         e4:a7:a2:d7:b1:29:1d:21:38:94:03:33:35:da:64:ad:ee:f3:
         36:2c:1a:42:6b:43:08:c1:9e:63:80:d8:ad:8c:39:07:94:d4:
         01:6e:a6:24:af:82:59:c8:24:7a:19:59:8b:23:a1:4b:96:8c:
         24:bc:68:73:9a:a6:9b:02:c8:8d:81:71:86:aa:86:b7:ec:1a:
         4d:64:b2:a9:af:07:8a:4f:1b:f6:ce:86:b7:74:17:57:42:ad:
         17:eb:76:7a:c3:f1:7d:bd:d1:8f:4f:b5:3f:cb:9d:37:19:ac:
         bc:b5:94:8b:4f:6d:3b:f9:a7:78:d7:12:ae:47:6a:a4:ef:59:
         93:25:a6:4e:89:d3:6c:70:3c:6c:d4:16:53:0f:47:f1:3d:c9:
         9e:05:f2:e7:e8:cf:1a:0e:f3:f3:1b:dc:0a:4c:ae:57:06:42:
         2b:94:18:d7:c7:e7:88:4d:bc:9c:f4:ff:0f:af:c9:76:06:66:
         08:b5:4c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:55:09 2025 by rpki-client