Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/d8207238-f42f-3e03-914f-1208ebf45ac1.roa
File:                     d8207238-f42f-3e03-914f-1208ebf45ac1.roa (raw, json)
Hash identifier:          3+pv/1YT59COM8tJGNsPdglmHXesNmZPJQ3JS5mWZEk=
Subject key identifier:   F8:63:BE:76:55:9B:E5:E3:64:0E:60:C1:6F:C7:2D:D1:BC:DF:E8:76
Certificate issuer:       /CN=1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07
Certificate serial:       010D0C9F4328584AA42B8CEB196E1A694231DBA8
Authority key identifier: 7D:8E:A4:82:0C:DC:9A:6F:4F:C9:31:C7:23:75:90:14:E4:AE:3A:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/d8207238-f42f-3e03-914f-1208ebf45ac1.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     7029
IP address blocks:        207.90.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:8c:eb:19:6e:1a:69:42:31:db:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=9718bdf6-3e22-44ae-909a-6ecd17a8f9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:48:27:ec:ef:59:36:56:ee:2f:16:72:4d:3d:
                    f0:e9:bf:47:c2:a6:84:93:1f:a3:14:9a:8a:b1:51:
                    8a:5e:80:d5:83:51:a5:a1:f4:a8:78:a2:f4:85:03:
                    49:86:d4:f6:c8:20:0c:db:89:b7:e5:90:83:0b:ec:
                    8a:bd:e8:5c:5e:3e:de:f2:56:f9:14:31:97:31:cf:
                    52:19:75:94:b0:cc:f6:23:79:0e:5f:fc:cd:32:72:
                    6a:3c:2f:2c:bf:fc:3c:f4:70:31:cc:06:4e:70:37:
                    52:65:78:f3:9e:67:8e:3f:2f:76:14:97:52:1d:a1:
                    96:2b:a1:84:13:56:8e:de:03:ac:6e:50:f0:42:57:
                    7d:eb:c0:58:81:67:7b:cf:7f:23:3c:0e:0c:41:aa:
                    b3:08:06:4a:ca:e7:c7:64:81:42:8c:3b:d1:8f:fe:
                    16:17:7b:a5:35:3e:98:4d:ab:63:4e:06:65:2f:99:
                    99:7a:e4:b6:9b:fd:e7:73:ee:57:97:96:89:f7:0f:
                    79:cc:0b:6d:79:27:6b:ee:cc:2d:33:e2:0e:f6:36:
                    58:ee:bc:26:a2:f7:a1:87:42:c4:6a:4e:b1:c7:a3:
                    02:8e:7e:73:6c:57:19:68:0a:65:62:b3:86:90:55:
                    44:f0:6e:9a:b6:8d:f2:62:a1:c9:e9:32:7b:aa:9e:
                    0e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:63:BE:76:55:9B:E5:E3:64:0E:60:C1:6F:C7:2D:D1:BC:DF:E8:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/d8207238-f42f-3e03-914f-1208ebf45ac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.crl

            X509v3 Authority Key Identifier:
                keyid:7D:8E:A4:82:0C:DC:9A:6F:4F:C9:31:C7:23:75:90:14:E4:AE:3A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:8f:5b:5c:3e:10:e7:c6:0e:ef:e1:d7:e1:85:94:01:e9:e5:
         b4:ee:73:74:74:b6:6c:c0:0c:20:80:53:18:8d:8b:6b:0e:ce:
         19:5e:b8:32:6d:73:fb:d0:0f:f8:ca:a6:fc:28:05:68:50:db:
         e0:bf:8d:76:2b:52:4d:f8:b4:1b:7b:a1:7b:8d:8c:0e:ba:33:
         f0:b1:ec:b8:0a:82:00:87:13:26:49:c9:ed:5b:fa:0a:0a:ad:
         3d:1e:c4:37:6b:df:8c:7a:37:aa:e1:fa:82:fb:34:5b:00:ce:
         5a:24:25:b2:b1:aa:68:2e:fe:ca:a6:b3:04:bf:3a:95:8e:42:
         f9:f2:a6:b3:b4:d1:85:89:bf:16:cd:c7:57:6f:17:87:0a:98:
         b7:9b:95:eb:b5:2f:42:fa:4d:84:4d:a1:27:9f:18:a4:5b:4a:
         d2:a3:08:1a:0e:61:b9:6f:05:bb:61:31:ba:65:e5:4f:f2:df:
         2b:ee:1d:f7:83:a5:65:99:0d:51:f5:46:42:03:8f:d6:d7:e4:
         cb:01:bc:00:7b:f6:b9:de:28:16:45:f4:e1:bc:f8:a0:98:b6:
         94:c4:46:29:c3:cc:c9:37:a4:f1:71:42:5d:3d:96:e4:65:bd:
         0e:59:c1:70:14:e0:ab:43:52:0f:8a:56:f4:de:64:84:d8:13:
         94:fd:2f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:31:02 2025 by rpki-client