Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b90fbd97-8822-3745-b4a2-f3e544e9c78f.roa
File:                     b90fbd97-8822-3745-b4a2-f3e544e9c78f.roa (raw, json)
Hash identifier:          9YZyKaG8azWqC5oYQOWxphCmPGfaP1By6I2urw39CgE=
Subject key identifier:   22:17:71:04:37:82:EF:1B:83:7C:1D:31:B6:3E:24:21:C0:33:E6:78
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584B8BE231995E3D908BEBBC3500
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b90fbd97-8822-3745-b4a2-f3e544e9c78f.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     7181
IP address blocks:        208.69.108.0/22 maxlen: 24
                          208.88.240.0/22 maxlen: 24
                          209.59.0.0/19 maxlen: 24
                          209.92.7.0/24 maxlen: 24
                          209.92.39.0/24 maxlen: 24
                          209.92.44.0/24 maxlen: 24
                          209.92.53.0/24 maxlen: 24
                          209.92.56.0/24 maxlen: 24
                          209.92.62.0/24 maxlen: 24
                          209.92.68.0/24 maxlen: 24
                          209.92.70.0/23 maxlen: 24
                          209.92.74.0/23 maxlen: 24
                          209.92.79.0/24 maxlen: 24
                          209.92.88.0/24 maxlen: 24
                          209.92.90.0/23 maxlen: 24
                          209.92.137.0/24 maxlen: 24
                          209.92.224.0/21 maxlen: 24
                          209.177.16.0/22 maxlen: 24
                          216.27.0.0/18 maxlen: 24
                          216.27.64.0/19 maxlen: 24
                          216.46.48.0/20 maxlen: 24
                          216.48.112.0/20 maxlen: 24
                          216.58.224.0/19 maxlen: 24
                          216.150.128.0/19 maxlen: 24
                          216.182.80.0/20 maxlen: 24
                          216.211.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:31:99:5e:3d:90:8b:eb:bc:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=71412b8c-214d-4506-8591-8b063c3fa074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:43:42:55:b9:85:bb:f3:85:ca:f5:68:37:9e:
                    ac:67:a2:5d:d6:1c:54:86:b7:ec:4a:b9:fc:b6:8d:
                    67:e0:f1:2f:96:28:bd:c2:f2:be:d1:cd:d7:55:e3:
                    ce:a5:2c:9f:43:f3:d8:cd:97:20:93:1e:5b:f8:ec:
                    f7:3d:16:30:34:c1:5c:34:c1:8f:6b:78:ee:56:74:
                    bd:e3:74:9e:87:e4:cc:cb:48:6c:fd:f5:0a:dd:7a:
                    0f:99:52:d5:fa:c7:95:19:e6:51:e3:25:f7:94:79:
                    43:f0:f1:82:62:37:08:b4:29:74:b5:ee:53:4c:ef:
                    e9:f8:16:ad:65:db:4c:6c:d5:bf:99:22:27:a5:f3:
                    28:9d:eb:2d:b9:b2:7b:6d:b1:d6:6c:1d:54:73:31:
                    c7:51:5e:b6:00:3b:4a:45:5e:8e:b7:94:62:19:e7:
                    1b:8a:56:f6:a0:18:96:2d:e9:eb:a5:c3:41:c6:47:
                    6d:05:90:95:a6:b3:25:0f:ef:26:00:3a:5c:a7:f4:
                    7a:48:0e:d2:32:3a:35:06:a1:e4:d7:16:72:b9:31:
                    90:ed:9a:fd:65:43:bd:47:03:d8:20:78:7d:85:23:
                    53:7d:58:51:2d:c7:c7:e1:e7:54:35:d2:24:ee:25:
                    2d:18:21:ce:9d:45:29:b6:32:24:4b:8e:e0:01:b8:
                    5b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:17:71:04:37:82:EF:1B:83:7C:1D:31:B6:3E:24:21:C0:33:E6:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b90fbd97-8822-3745-b4a2-f3e544e9c78f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.69.108.0/22
                  208.88.240.0/22
                  209.59.0.0/19
                  209.92.7.0/24
                  209.92.39.0/24
                  209.92.44.0/24
                  209.92.53.0/24
                  209.92.56.0/24
                  209.92.62.0/24
                  209.92.68.0/24
                  209.92.70.0/23
                  209.92.74.0/23
                  209.92.79.0/24
                  209.92.88.0/24
                  209.92.90.0/23
                  209.92.137.0/24
                  209.92.224.0/21
                  209.177.16.0/22
                  216.27.0.0-216.27.95.255
                  216.46.48.0/20
                  216.48.112.0/20
                  216.58.224.0/19
                  216.150.128.0/19
                  216.182.80.0/20
                  216.211.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:de:1c:8b:ad:eb:88:72:77:13:31:03:4a:62:7d:c6:3b:5c:
         db:c4:f0:64:30:a4:31:3f:9c:52:c7:04:19:a3:b5:76:84:8a:
         ac:92:51:03:5e:80:f0:84:55:ad:16:d4:63:d2:2f:e4:fa:9d:
         0a:e5:f4:d2:39:82:91:5c:86:99:29:09:84:fb:7a:b7:3c:61:
         7f:d9:39:b5:c3:d7:59:e3:f4:f5:7d:91:57:64:6f:c3:41:63:
         83:3c:ba:7e:f4:c5:aa:b8:36:27:3c:2b:e3:a2:b3:87:77:2a:
         21:6b:3e:8c:d5:df:d2:cb:cb:79:1d:bb:b0:74:77:21:75:40:
         19:f3:d9:87:8b:cf:84:3b:31:8b:4d:88:1c:8a:91:1b:2c:96:
         b9:39:e6:1f:58:1e:d8:0d:f4:21:ef:e5:6f:d1:56:05:f8:25:
         18:7a:52:12:cc:ab:dc:cd:10:f3:c9:14:e5:7f:c6:2f:26:99:
         f1:00:6f:e4:93:cf:4d:c4:57:b2:a3:56:e4:b0:42:d8:7a:84:
         10:96:c2:70:ac:18:28:7b:e9:b1:53:75:a2:f1:75:db:be:74:
         a2:93:19:cb:5e:ff:aa:c0:9d:0e:54:40:d4:bf:44:3a:74:ac:
         79:b7:b2:c8:c8:3b:8a:b0:8d:91:3a:20:b8:cc:c7:88:f8:39:
         61:8e:de:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:39:56 2025 by rpki-client