Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/090eba3d-725e-3b20-8875-24c2d606b0e1.roa
File:                     090eba3d-725e-3b20-8875-24c2d606b0e1.roa (raw, json)
Hash identifier:          alwswk/ahTT5Et3fAnnq4zT0dlER3QjRKZT+Er4f09A=
Subject key identifier:   73:9B:43:15:C2:0F:4A:DD:78:0C:92:C2:68:5E:CE:19:99:0D:0F:F1
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584AF5213312FA658EB45C41D4EA
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/090eba3d-725e-3b20-8875-24c2d606b0e1.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     18434
IP address blocks:        69.36.18.0/24 maxlen: 24
                          147.249.12.0/24 maxlen: 24
                          147.249.13.0/24 maxlen: 24
                          147.249.14.0/24 maxlen: 24
                          147.249.15.0/24 maxlen: 24
                          156.55.42.0/24 maxlen: 24
                          156.55.138.0/24 maxlen: 24
                          156.55.164.0/24 maxlen: 24
                          156.55.165.0/24 maxlen: 24
                          156.55.166.0/24 maxlen: 24
                          156.55.167.0/24 maxlen: 24
                          156.55.172.0/24 maxlen: 24
                          156.55.176.0/24 maxlen: 24
                          156.55.177.0/24 maxlen: 24
                          156.55.202.0/24 maxlen: 24
                          156.55.203.0/24 maxlen: 24
                          199.200.24.0/24 maxlen: 24
                          199.200.25.0/24 maxlen: 24
                          199.200.26.0/24 maxlen: 24
                          199.200.27.0/24 maxlen: 24
                          216.189.244.0/24 maxlen: 24
                          216.189.254.0/24 maxlen: 24
                          216.189.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:33:12:fa:65:8e:b4:5c:41:d4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=a04f7445-7f27-4beb-910d-c87ea2db81eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:de:31:f8:8e:fa:6d:1f:8d:5a:4c:c7:4a:91:
                    7c:52:a2:bf:bd:2b:3a:94:53:8b:e8:b3:ed:71:9e:
                    01:93:7f:b4:f9:18:7d:6d:84:d4:db:8a:78:cc:04:
                    5c:89:8c:d0:d8:11:06:12:43:64:9c:30:29:a4:f4:
                    58:d3:4b:82:3b:46:84:53:00:cf:ef:63:f4:24:70:
                    90:9f:a2:df:a0:3e:60:96:6d:0e:47:42:e1:c0:f6:
                    ba:11:26:c5:87:7f:bb:68:bd:69:8a:80:d7:5f:f3:
                    0e:8e:51:21:55:c2:a8:54:b7:3b:ce:af:02:86:ad:
                    5e:38:88:85:cd:f5:54:a5:38:fe:1e:24:a6:a2:da:
                    f8:5d:50:74:7a:2c:69:af:10:4d:2c:11:b6:69:d0:
                    55:81:f0:dc:d0:f7:2a:c9:42:51:32:82:c1:61:76:
                    0d:c0:0a:24:6a:b1:b1:7f:8e:e4:ec:78:e7:bb:cf:
                    a5:50:9a:c4:f9:fe:b4:38:b3:f5:eb:d5:dd:a2:66:
                    ac:87:7f:d0:7e:a6:76:10:35:52:71:9a:ba:41:6f:
                    8c:51:5e:2d:da:97:a6:50:ff:db:07:8d:18:17:47:
                    73:0b:23:b1:55:ae:5d:f9:18:3d:96:b0:69:3a:32:
                    21:2e:6b:8d:31:4b:3a:fb:e3:bf:c4:f4:27:37:29:
                    94:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9B:43:15:C2:0F:4A:DD:78:0C:92:C2:68:5E:CE:19:99:0D:0F:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/090eba3d-725e-3b20-8875-24c2d606b0e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.36.18.0/24
                  147.249.12.0/22
                  156.55.42.0/24
                  156.55.138.0/24
                  156.55.164.0/22
                  156.55.172.0/24
                  156.55.176.0/23
                  156.55.202.0/23
                  199.200.24.0/22
                  216.189.244.0/24
                  216.189.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:e2:c1:ef:d8:cd:e7:62:b6:2f:e5:22:a8:fb:24:00:fd:8b:
         f7:11:09:1d:74:f6:8c:51:48:bd:8e:c5:2c:a2:d4:58:bb:cd:
         d4:fd:fc:81:71:27:59:d7:e9:60:44:b2:f8:47:d1:42:7f:80:
         dc:c3:c8:74:ca:b6:d9:1e:b1:39:c3:f1:ce:fb:23:ef:e6:46:
         3d:e4:b2:20:ef:4c:b9:57:6f:21:f3:3d:3d:9e:9a:00:95:34:
         38:18:6b:1a:c7:ce:2c:8e:6b:1d:b3:88:22:90:13:21:cf:56:
         35:51:65:a3:09:ec:f1:fd:79:c6:ea:bb:d1:84:e4:fc:f9:a6:
         e4:49:b2:52:e0:ce:4c:4e:4a:fb:51:49:31:9b:1d:0a:2e:b1:
         0e:5b:ce:7e:6e:9e:27:66:2b:7a:e8:af:f8:61:08:34:92:bf:
         79:49:a4:74:cf:1b:14:ce:ca:51:e5:da:91:6d:5d:46:63:52:
         60:f7:aa:44:2a:78:ab:9e:d6:cf:1a:d6:c2:e1:ee:ba:b9:8e:
         59:20:fd:9f:e1:39:7e:8b:cd:a0:e9:a6:b6:6d:79:65:2c:bc:
         b4:cd:52:ef:0b:c2:28:f3:45:e5:4e:7b:54:e5:65:4a:d2:d4:
         61:a0:ee:f3:bc:5a:25:ad:54:2a:e6:ed:ee:f1:6a:81:a5:2f:
         57:c9:ab:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 06:32:34 2025 by rpki-client