Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/abb10cbd-7ad6-3df3-8c4f-bbd62f847e06.roa
File:                     abb10cbd-7ad6-3df3-8c4f-bbd62f847e06.roa (raw, json)
Hash identifier:          TmgWpwMWjisEzEyO/mNyy0MgwDHrpKky59W69N6r4T4=
Subject key identifier:   CA:54:1A:95:F4:47:58:C1:95:CD:90:D5:C8:92:28:2D:F4:C4:68:31
Certificate issuer:       /CN=f6e6ee11-cd51-4809-bddc-1460c28a9121
Certificate serial:       010D0C9F4328584B92DD9941C4003EBA78962F00
Authority key identifier: 2F:64:D2:D2:30:94:F0:74:84:57:4C:F6:ED:28:61:F2:B1:E8:27:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/abb10cbd-7ad6-3df3-8c4f-bbd62f847e06.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     46620
IP address blocks:        208.90.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:99:41:c4:00:3e:ba:78:96:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6e6ee11-cd51-4809-bddc-1460c28a9121
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=841c4759-4be1-4d5a-9870-5aa017aef128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0f:3a:72:e8:8a:1e:dc:ab:db:65:fd:cf:60:
                    c8:b0:2d:c3:78:0a:9e:8b:80:2b:fc:66:e9:de:c5:
                    8d:a8:7f:bc:4f:46:92:03:f0:cf:bb:0a:00:7b:16:
                    e5:dd:9a:bb:ee:4c:d7:5a:a2:6c:f0:ae:0a:3a:4b:
                    08:c4:76:d0:ce:9b:50:5e:c1:ca:4d:7b:0c:97:52:
                    cc:75:e2:47:8a:81:86:98:11:20:74:3a:17:47:bc:
                    d0:25:67:90:45:81:e8:3b:06:19:ab:c0:b4:e1:3f:
                    17:c0:af:ed:1b:d8:87:c1:bc:f7:b8:1e:0a:47:7a:
                    97:7d:14:a4:d3:75:01:ed:44:09:3c:68:b9:74:43:
                    3e:db:fc:19:38:28:88:b7:77:55:a7:33:a7:90:08:
                    f5:fa:e3:29:02:43:97:ae:04:4b:0a:4f:d4:48:97:
                    70:41:9d:0c:d2:2c:25:ec:52:78:bf:80:6a:2b:16:
                    ce:80:74:5d:4b:92:2c:09:2d:3d:41:85:f4:d3:9f:
                    f5:6c:77:32:c3:33:e1:f2:cd:12:5c:13:20:6e:76:
                    de:90:bc:06:7d:92:1d:a9:c8:d6:da:04:fb:87:61:
                    92:fe:36:a6:7a:4c:bf:5d:1a:4c:6a:d5:65:9f:84:
                    44:2d:32:16:ed:31:5d:41:25:ab:c8:3e:c1:9c:d9:
                    87:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:54:1A:95:F4:47:58:C1:95:CD:90:D5:C8:92:28:2D:F4:C4:68:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/abb10cbd-7ad6-3df3-8c4f-bbd62f847e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.crl

            X509v3 Authority Key Identifier:
                keyid:2F:64:D2:D2:30:94:F0:74:84:57:4C:F6:ED:28:61:F2:B1:E8:27:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:8b:7f:f6:48:22:6b:6e:ae:79:cb:66:f4:b5:a1:fd:72:0e:
         a1:44:d9:71:a8:bf:ea:e7:67:7d:c6:ce:c9:7e:93:2a:56:8e:
         ce:5d:2b:ee:fe:da:8e:cc:ff:d9:f0:47:1b:6b:98:f7:ab:64:
         1b:3b:82:f9:2d:7f:79:ad:a8:b9:4e:de:52:36:fe:3e:64:59:
         9e:86:32:85:c1:f6:af:fd:01:90:19:91:94:4d:6a:a1:b1:63:
         f1:3d:17:8d:79:cb:7f:fd:9e:b1:8b:fe:7a:33:87:31:88:cf:
         82:b6:95:1c:79:04:b4:6d:d7:88:4b:ec:55:b0:a1:39:34:dd:
         65:65:38:3e:19:3a:7e:56:2f:c8:7e:42:ea:51:35:94:ce:3d:
         47:8b:58:7d:5e:2c:12:ea:1d:a2:ca:6c:d4:0a:de:4e:ba:2e:
         0e:6a:85:7d:56:36:fb:b0:cd:0c:fa:f2:ce:98:f9:58:de:b2:
         84:c5:c9:23:9b:f6:28:5d:35:d8:8c:2a:ef:f8:00:c6:e1:63:
         2e:66:9c:f6:a2:e4:0a:20:99:60:40:33:3d:0b:eb:e5:a8:a6:
         59:a6:86:40:6d:5d:fd:19:03:41:2c:75:62:05:df:7d:36:a4:
         8f:35:5f:11:98:ec:f2:cd:b0:c0:d2:36:46:09:0c:c3:4f:c9:
         ff:bf:0a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:46:06 2025 by rpki-client