Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4ea78b05-576a-3537-bb20-2bac7e1ba1fa.roa
File:                     4ea78b05-576a-3537-bb20-2bac7e1ba1fa.roa (raw, json)
Hash identifier:          Yv7LDJADBW73dwP/pnkYF3TYQgesA6Wd/AK+R0uwxms=
Subject key identifier:   CA:31:08:98:7A:0A:D7:A8:EE:49:F6:2D:DF:BC:75:5E:89:5E:C0:00
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584A4F05BE7ACD7682E7CC763780
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4ea78b05-576a-3537-bb20-2bac7e1ba1fa.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     25871
IP address blocks:        8.41.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:be:7a:cd:76:82:e7:cc:76:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=7236f405-ce5e-44e5-a236-e986120ebeac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d4:5c:f1:b1:f1:72:3c:a9:a2:df:e9:0c:cf:
                    2b:bd:f6:53:93:6f:65:11:86:a9:ca:ab:47:c5:63:
                    09:a5:40:f0:0c:6d:d1:e9:9b:88:4b:75:87:46:21:
                    a9:3b:8e:e2:02:92:66:5b:5d:84:46:5a:79:7a:85:
                    e7:fc:f2:db:36:75:a1:a3:27:7d:64:46:cc:a5:42:
                    e8:82:1a:b3:ad:ce:04:14:d7:64:5d:58:e2:41:e1:
                    aa:46:52:75:33:4b:8b:07:6e:87:fe:c6:89:85:02:
                    f9:cc:10:0e:74:4f:5b:f3:a3:22:58:bb:46:1b:6f:
                    c0:c6:d1:33:0e:9f:36:51:86:a7:a5:08:3d:ce:96:
                    e0:3a:31:47:9c:bd:db:3e:bb:88:72:11:41:13:f9:
                    05:62:33:c7:78:d2:87:57:ba:d6:90:0b:04:16:45:
                    34:9d:a0:01:e1:ff:74:84:62:f0:e1:8d:82:ff:1e:
                    e3:0e:c4:4f:8a:cf:6f:43:45:d8:d0:3a:cb:85:01:
                    ef:bf:10:a7:79:24:0a:d7:52:04:58:85:10:de:62:
                    07:bb:9a:f2:09:92:7e:eb:b0:c5:4e:5b:aa:77:62:
                    7e:83:a6:d1:ad:91:78:8e:d8:bd:4d:95:90:c6:51:
                    d0:ee:60:96:bd:fd:e8:c4:3e:49:49:e3:67:fd:48:
                    52:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:31:08:98:7A:0A:D7:A8:EE:49:F6:2D:DF:BC:75:5E:89:5E:C0:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4ea78b05-576a-3537-bb20-2bac7e1ba1fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.41.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:70:6f:49:a2:8e:80:df:37:1b:04:85:e8:25:19:60:b1:b4:
         88:34:d7:3b:40:b8:e9:37:62:2d:d3:07:1a:14:ff:6f:98:bd:
         a1:15:98:54:8a:1c:a0:08:27:bf:b7:44:3a:71:f8:6c:fa:3b:
         4e:6e:dd:ee:ee:1e:6a:6e:d8:c3:67:29:95:52:11:49:61:f8:
         fe:91:9d:f3:3a:0f:f4:3b:bd:d3:1c:ce:29:bf:80:63:41:b6:
         e9:31:3c:a0:ab:ac:ec:3f:52:62:9f:d4:26:ff:61:4b:47:04:
         82:b7:4e:be:fd:00:89:7d:bc:2b:1d:64:58:38:32:14:4e:55:
         cf:9a:17:cc:cb:9a:24:dc:c3:95:d9:93:dc:d5:7e:80:1d:6f:
         86:b1:ff:ac:4b:06:dc:f7:fb:85:6d:0e:09:4a:83:12:b7:18:
         8e:19:7c:fc:0d:93:90:20:6d:2f:f4:4b:27:8e:f0:7d:97:f2:
         bd:fa:b2:99:f8:28:14:51:3e:97:38:8a:82:a3:96:47:cb:db:
         83:4b:d2:ea:f1:1c:56:13:d3:7f:e1:a2:cf:ab:8a:d1:45:58:
         24:69:0a:f2:c3:e6:b1:09:8f:c2:71:40:94:60:b1:7c:28:be:
         70:13:e6:39:14:ba:ec:53:90:48:63:fd:bc:e4:c2:00:67:f9:
         4b:69:a1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:12:33 2025 by rpki-client