Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/cbb8c0d7-e501-3e80-a9f5-0edf48a72fb5.roa
File:                     cbb8c0d7-e501-3e80-a9f5-0edf48a72fb5.roa (raw, json)
Hash identifier:          RT5YUqElIwrXux24e616le+COnad9nycV97P71joSCc=
Subject key identifier:   92:D4:46:7D:2D:97:3A:04:63:06:02:7A:96:71:63:A0:33:D8:73:66
Certificate issuer:       /CN=0679e601-ff38-42c1-9b52-0b5bad96b962
Certificate serial:       010D0C9F4328584AE4611537155E0EAE0C322FC0
Authority key identifier: FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/cbb8c0d7-e501-3e80-a9f5-0edf48a72fb5.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     137509
IP address blocks:        207.90.241.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:15:37:15:5e:0e:ae:0c:32:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0679e601-ff38-42c1-9b52-0b5bad96b962
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=e5a62c41-795f-474e-9878-00f6117bac18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:00:cd:9b:dd:30:85:65:9f:d5:ca:b6:2d:af:
                    95:21:6a:e7:4f:7b:4c:34:fb:03:00:37:ce:07:4f:
                    25:48:28:51:18:bf:a4:88:f6:4a:e5:48:c7:8c:c7:
                    80:d4:69:18:b8:2b:6e:fe:51:5c:9b:11:c8:13:95:
                    aa:ac:28:ae:8d:9b:0b:0a:df:c1:19:da:02:44:cb:
                    24:1f:15:92:a5:4c:74:ec:8f:78:8e:6e:5e:fd:d0:
                    60:8d:2b:59:9f:79:74:6e:89:a6:07:d4:54:72:c1:
                    84:1e:35:77:72:e5:23:3c:e0:a2:ca:3d:fa:c0:e7:
                    21:ca:29:21:e6:0a:f3:a5:19:f2:43:8e:19:e6:9a:
                    4c:95:83:06:89:32:fe:4c:1c:6a:6f:d8:9f:06:47:
                    2c:2d:63:b6:2c:36:21:8d:1b:d6:95:0f:1f:ac:30:
                    fc:e4:3a:5d:eb:90:04:4f:fe:b0:35:34:64:df:aa:
                    87:37:e1:c4:00:a6:24:9d:91:59:2b:7f:92:8c:bb:
                    21:54:b6:1c:20:0e:ca:37:2c:4f:73:97:38:7c:fd:
                    e7:ff:be:5d:b8:95:34:8f:5f:ea:fa:88:35:31:b6:
                    f1:74:3f:6d:79:2b:36:ec:81:8c:05:f6:83:6d:b5:
                    51:92:fd:6a:c0:f1:3a:1b:be:9c:1b:e8:64:84:4c:
                    23:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D4:46:7D:2D:97:3A:04:63:06:02:7A:96:71:63:A0:33:D8:73:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/cbb8c0d7-e501-3e80-a9f5-0edf48a72fb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl

            X509v3 Authority Key Identifier:
                keyid:FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:6b:e2:fb:2d:0c:67:e7:78:aa:ef:08:aa:cd:32:03:a8:5d:
         1f:1f:14:63:3b:6d:70:1a:cd:a0:e9:f1:3c:2c:3e:ef:1f:c6:
         23:29:d2:65:ab:fe:aa:00:19:8b:c9:d2:1e:2a:54:3f:ed:a1:
         77:0a:1c:21:a6:9e:af:49:ac:7c:8f:3e:f4:73:0a:bb:15:2c:
         29:e5:da:ba:33:20:38:5d:6b:2e:22:5f:35:04:8c:2f:32:b8:
         e1:59:81:6b:8a:60:19:8e:4e:d5:65:67:2f:6a:61:e8:b1:56:
         0a:88:98:71:66:53:a1:01:c7:d0:a2:5b:f2:fa:e5:2f:36:04:
         6b:53:3e:7d:89:ac:46:c6:b1:d8:8e:a8:6b:2f:f8:86:44:1c:
         28:d7:69:db:87:dc:e2:ed:02:84:a7:61:ce:ae:ad:fe:a7:9f:
         29:ca:54:50:f8:a7:a3:cd:41:77:6a:6d:bc:3e:b4:df:4b:bb:
         84:05:34:de:90:11:27:da:43:1d:61:66:86:b0:3c:e8:ca:4e:
         72:0f:52:74:b6:ca:3f:4a:89:f0:e2:02:12:85:3c:56:f5:79:
         ad:d1:4d:0c:45:32:cc:79:ad:0a:61:28:e8:3a:a7:d1:00:17:
         99:a7:e0:50:fb:4e:3f:c8:9a:f3:e4:3b:67:cd:bc:1b:a9:5b:
         67:15:6f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:56:59 2025 by rpki-client