Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/704f4ac5-f0ae-3ddf-89cd-8df001739812.roa
File:                     704f4ac5-f0ae-3ddf-89cd-8df001739812.roa (raw, json)
Hash identifier:          wX91Dy764FjDouwHNu3OjHu0kjdLUyO2h8AnEBwpC34=
Subject key identifier:   B4:A9:F9:DD:18:2E:AC:D4:AE:91:2E:11:40:8B:F6:24:98:D8:36:C3
Certificate issuer:       /CN=90fa7638-a775-4db8-9e8e-702cd8b26b9b
Certificate serial:       010D0C9F4328584B821CC991D1E9FA578B778700
Authority key identifier: 8D:4E:E4:49:0A:C2:84:0E:14:E1:21:EB:7F:73:A6:E2:EC:11:CC:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/704f4ac5-f0ae-3ddf-89cd-8df001739812.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     17151
IP address blocks:        69.59.224.0/19 maxlen: 24
                          74.116.144.0/21 maxlen: 24
                          216.115.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/90fa7638-a775-4db8-9e8e-702cd8b26b9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/90fa7638-a775-4db8-9e8e-702cd8b26b9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:c9:91:d1:e9:fa:57:8b:77:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90fa7638-a775-4db8-9e8e-702cd8b26b9b
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=3b17924a-abaf-4fe9-822b-c5c2a89b1579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:b0:20:02:3d:f8:1a:26:b6:3c:6e:5c:4d:
                    ca:66:c0:89:b5:7a:02:22:99:a6:52:44:44:b0:21:
                    31:69:70:73:27:97:dd:a6:6d:64:48:38:9a:42:b6:
                    3a:16:c1:bb:f7:91:79:ef:4f:35:d4:69:89:d9:a9:
                    e8:40:d3:9f:74:d2:a8:e7:2c:47:26:88:32:9c:0d:
                    6a:84:68:e0:19:4b:f1:2c:85:cc:e5:a3:5e:1e:3a:
                    fc:9c:a7:62:58:ef:eb:1d:9a:00:32:ba:0a:5d:63:
                    8a:6c:5f:7d:56:bb:d6:1e:47:91:97:ce:19:11:9c:
                    77:d0:b6:f6:d9:85:e3:53:67:96:14:8d:0f:51:6e:
                    01:b5:76:9c:03:c8:c9:bf:cd:82:81:15:0b:78:0c:
                    6a:c0:56:1d:c2:55:db:81:43:68:ed:f0:42:9d:43:
                    81:da:81:1b:6a:51:5f:86:a4:a2:a2:95:28:28:a2:
                    5d:aa:03:b5:fd:ff:a0:f8:e2:fa:24:3b:af:c9:db:
                    40:2e:bc:5e:12:02:b7:3e:7b:41:b0:61:89:d6:76:
                    9a:94:68:52:ad:d2:cb:39:2d:34:e7:fe:02:54:4e:
                    42:00:b9:ca:9a:1e:28:6a:9c:30:a6:6c:87:c4:3f:
                    bc:1d:e2:30:ef:ca:fd:5a:41:3e:d1:09:7e:fa:f4:
                    f0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A9:F9:DD:18:2E:AC:D4:AE:91:2E:11:40:8B:F6:24:98:D8:36:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/704f4ac5-f0ae-3ddf-89cd-8df001739812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/90fa7638-a775-4db8-9e8e-702cd8b26b9b.crl

            X509v3 Authority Key Identifier:
                keyid:8D:4E:E4:49:0A:C2:84:0E:14:E1:21:EB:7F:73:A6:E2:EC:11:CC:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.59.224.0/19
                  74.116.144.0/21
                  216.115.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:55:f3:2b:09:22:04:de:85:b7:6e:c0:37:86:ee:d0:09:4e:
         a9:78:04:46:b9:7c:ad:2b:86:84:bb:98:a7:50:2a:5c:22:8e:
         8b:4b:db:60:b7:be:23:d7:0a:43:72:dd:e7:4b:b0:e5:5a:c0:
         4d:e9:e7:95:46:e1:51:72:4e:c2:f5:15:31:f9:50:fa:8a:ca:
         9b:e9:fe:50:ed:e6:a5:d5:57:3c:00:41:c6:46:e1:33:57:f9:
         33:b9:42:3a:ad:13:45:1d:54:8b:c4:47:44:0d:6f:bc:ae:9c:
         54:9d:e1:03:26:9f:70:96:bc:50:3a:7a:2b:84:0a:81:42:67:
         90:f4:32:51:87:c4:b1:ba:ee:1f:80:80:69:87:5a:4d:d0:e6:
         d4:0f:2f:12:33:ea:fe:7b:d9:94:ef:2f:84:5b:6b:16:ca:e0:
         f7:8a:28:3c:54:d8:0c:4a:9a:c5:82:69:e6:58:4a:0f:0c:d3:
         72:ca:9a:fd:aa:79:ab:4e:a5:d6:41:28:f2:f7:16:de:8f:f0:
         41:1e:b1:0b:e8:e1:bf:32:ad:03:fc:73:3c:0f:cf:a1:61:42:
         f9:a1:36:e9:a7:62:de:d0:45:44:ef:6e:9f:8c:dd:f2:5d:e4:
         d3:9c:e9:5e:59:e5:6a:0b:3b:d6:b1:3b:26:1b:a0:c8:af:cf:
         b4:f2:3c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:28:52 2025 by rpki-client