Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/37cbe920-929d-3859-bf5c-6f9c5454b2da.roa
File:                     37cbe920-929d-3859-bf5c-6f9c5454b2da.roa (raw, json)
Hash identifier:          cd68JYaDrJGsglkYPxggS5nPU6J7Jd5fbWywVKm//g4=
Subject key identifier:   E0:CB:86:DC:91:D8:1D:E2:EA:B6:94:26:14:69:C5:8A:ED:81:A5:B0
Certificate issuer:       /CN=826ab4ee-b6aa-4222-ae26-8bc58c9b742a
Certificate serial:       010D0C9F4328584AD5065FCC4116252ABF72F740
Authority key identifier: 5B:7C:6C:55:80:AC:19:EC:C0:BF:7D:79:D4:2C:EF:DF:2D:B7:C1:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/37cbe920-929d-3859-bf5c-6f9c5454b2da.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     11700
IP address blocks:        205.211.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:5f:cc:41:16:25:2a:bf:72:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826ab4ee-b6aa-4222-ae26-8bc58c9b742a
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=ed01d5f5-207e-400f-a42a-85468f449e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a8:ff:78:29:de:19:f8:48:85:8b:54:2f:47:
                    6e:07:ce:39:a2:6a:9d:12:9a:da:db:87:74:24:2a:
                    17:d3:4e:13:d8:54:3e:99:c2:c9:ea:63:5c:6a:56:
                    b9:5e:c8:1e:03:1e:82:47:54:b8:f1:8d:7e:ae:96:
                    dc:1f:c1:4c:a4:56:ba:38:79:f9:76:cb:9c:f6:3f:
                    16:91:1b:af:53:0d:43:0a:45:a1:3b:b0:22:79:0c:
                    0a:9e:7c:34:78:2a:bd:f9:b8:33:75:bd:03:1f:82:
                    9b:4d:8c:5c:38:17:00:69:f6:8b:c5:88:2c:72:d2:
                    56:1d:64:b5:bf:23:d6:07:df:09:4b:a9:4b:c7:66:
                    b1:1e:2a:cd:78:ef:89:2b:fb:6e:5f:28:08:ed:83:
                    d0:a9:eb:09:99:4a:43:a8:8f:c5:52:d1:39:41:31:
                    22:bb:be:ac:ac:0a:f2:aa:29:19:f4:88:80:d0:5f:
                    90:bf:9d:48:2f:d8:f1:19:e4:08:79:38:30:ef:4b:
                    1a:ff:b1:e1:fa:bb:f8:09:cc:6b:c1:d7:e4:61:d1:
                    40:ab:80:55:93:45:f5:5e:f7:11:f8:47:1a:43:39:
                    d4:11:a9:67:ea:94:e6:80:4d:5b:c3:01:97:a0:56:
                    c1:19:e9:69:a0:72:e9:62:f7:91:b3:de:62:41:41:
                    94:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CB:86:DC:91:D8:1D:E2:EA:B6:94:26:14:69:C5:8A:ED:81:A5:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/37cbe920-929d-3859-bf5c-6f9c5454b2da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.crl

            X509v3 Authority Key Identifier:
                keyid:5B:7C:6C:55:80:AC:19:EC:C0:BF:7D:79:D4:2C:EF:DF:2D:B7:C1:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:a2:d1:d6:70:69:86:c9:3e:a2:22:62:27:35:31:64:60:74:
         ba:a4:b8:fc:c9:c1:b0:50:56:53:a0:76:52:73:c9:a4:cb:d5:
         6f:f6:ef:78:45:c2:6a:ec:f1:75:a5:16:a0:e6:1f:03:78:2e:
         dd:54:d7:b5:63:9a:38:1f:c4:c3:52:9f:14:10:9e:da:d5:61:
         12:ab:f3:43:1e:96:00:38:68:06:02:94:0f:ad:a4:f9:3c:5e:
         bc:04:39:80:9b:21:e0:c4:12:25:97:05:b7:49:89:e7:1a:bf:
         4c:91:99:61:58:f1:e5:bd:14:f2:7d:17:a0:a0:7c:99:27:9f:
         4b:e4:02:a2:58:23:1f:f2:4b:b9:ba:d0:77:7b:9a:4a:f0:b1:
         6e:43:f4:0c:67:10:eb:94:4d:7a:38:ed:69:0c:39:cb:58:da:
         7c:9e:67:f9:a1:f5:31:33:b0:9d:04:28:d0:25:8e:fc:bd:a8:
         ab:e6:9e:2d:f0:e6:06:d4:ca:1a:88:f5:b5:41:9b:82:0f:27:
         ad:fd:82:27:31:92:b5:14:77:2d:5c:58:f4:aa:41:25:1b:27:
         12:d6:12:19:c7:c3:6d:e7:c4:9e:8c:df:01:f0:9d:0b:7a:d5:
         2c:7e:e0:b4:a6:d7:85:fc:33:cf:06:38:ed:46:9d:10:c6:90:
         07:7a:a6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:29:11 2025 by rpki-client