Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ea1cb771-cdfb-3c1d-a5ca-5524da37a9fb.roa
File:                     ea1cb771-cdfb-3c1d-a5ca-5524da37a9fb.roa (raw, json)
Hash identifier:          BdMH0mjCRAlo6+XIFrNfkX284dpmrtd1ITGLDhmUyQU=
Subject key identifier:   FE:7D:F1:32:54:88:D2:F2:4D:72:5F:0B:E0:3F:7F:68:E6:1A:02:51
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3C0FB580B4C32A6E84893E00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ea1cb771-cdfb-3c1d-a5ca-5524da37a9fb.roa
Signing time:             Wed 18 Jun 2025 18:00:55 +0000
ROA not before:           Wed 18 Jun 2025 18:00:55 +0000
ROA not after:            Tue 16 Sep 2025 18:00:55 +0000
asID:                     22773
IP address blocks:        24.251.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:0f:b5:80:b4:c3:2a:6e:84:89:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 18 18:00:55 2025 GMT
            Not After : Sep 16 18:00:55 2025 GMT
        Subject: CN=a40b4d35-f9bf-4662-a524-bb520f248806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:21:4d:dd:b5:52:35:9a:c8:6e:ce:62:db:4e:
                    16:b0:3c:4d:7d:21:54:44:6a:3a:c1:82:29:61:86:
                    83:ae:18:92:80:42:b3:0c:02:24:70:bb:fa:fb:31:
                    97:8c:7b:77:75:f2:cd:4a:6a:81:cd:80:52:1f:4c:
                    e4:60:6c:a1:b3:11:1d:cc:34:0d:cf:12:dc:d5:c6:
                    e2:a8:55:21:ad:de:6d:7f:37:15:df:bd:e3:b4:3a:
                    a1:20:74:48:4b:8e:37:ec:69:97:d7:8d:fa:b3:5e:
                    31:74:d0:4e:e7:02:c7:a4:a6:84:a1:2f:74:ac:48:
                    de:5c:e3:fa:a7:c2:76:36:8d:6d:09:eb:ab:58:6d:
                    ce:89:c1:82:77:5b:78:7c:2d:0a:20:77:7a:7b:97:
                    c4:c5:d6:2e:21:4d:2a:e1:ac:74:de:ff:30:4b:9f:
                    6b:f4:d2:b8:4e:14:72:57:56:88:a3:ec:9c:6b:b0:
                    7c:63:d8:3f:d7:7d:12:12:b3:c0:31:88:9e:2a:c6:
                    7a:fd:82:29:7d:7b:b8:b4:7d:2e:ed:0f:59:03:ba:
                    34:5f:2c:2b:6e:9b:64:52:b1:81:10:64:b7:9b:9b:
                    54:ad:69:68:f0:f9:67:68:2a:c7:89:90:08:c9:f6:
                    5f:7a:f2:e4:d1:07:1e:98:08:36:ff:a4:d4:91:aa:
                    e4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7D:F1:32:54:88:D2:F2:4D:72:5F:0B:E0:3F:7F:68:E6:1A:02:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ea1cb771-cdfb-3c1d-a5ca-5524da37a9fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.251.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:ce:60:56:ee:1e:9e:95:fe:d8:87:53:58:1d:31:2e:99:c1:
         15:e0:b1:9b:05:e4:fe:49:6a:33:a4:45:4a:33:0e:99:7b:7f:
         87:bd:85:67:57:93:f6:6a:d4:df:64:41:b4:c7:b8:00:cb:16:
         57:c2:8b:ad:f3:ca:cb:f9:55:0d:05:84:92:ee:37:d1:3c:6a:
         44:ad:83:16:d1:60:75:b5:2b:62:45:27:33:f3:97:ba:a1:8f:
         1d:25:c0:fb:4b:a2:11:db:9f:e5:09:5e:c0:69:af:55:9f:6b:
         5f:99:5d:0b:2b:77:7d:7e:06:d3:d4:f0:f7:0a:86:72:8a:dd:
         f3:ac:14:52:65:55:86:07:06:58:5a:4b:7b:a3:74:3b:06:e5:
         75:ac:ba:80:61:aa:37:62:2c:15:61:60:52:f9:5e:b0:1d:5c:
         64:bc:bb:bd:62:18:d4:55:b4:ec:a6:ed:21:98:f0:e4:8b:76:
         df:0c:56:a2:28:ca:47:89:7b:35:21:46:71:b3:6e:2b:77:b8:
         2d:2f:76:7a:96:2b:55:25:cb:8f:3c:72:04:0f:1b:d8:78:69:
         ee:c1:7d:7a:87:5d:ec:3d:11:1e:e6:ea:d8:ca:08:ca:b3:65:
         cb:0e:82:81:4a:b3:b8:ff:9d:59:3f:73:66:26:4f:f2:07:cb:
         3a:68:7e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:01:09 2025 by rpki-client