Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/ef4a4583-f2cf-3fdc-a35f-7b4886cd2058.roa
File:                     ef4a4583-f2cf-3fdc-a35f-7b4886cd2058.roa (raw, json)
Hash identifier:          B9hyPS8dj4fPSE9AJboR3xxM/b61t/lYmekOGppZrIw=
Subject key identifier:   1B:1A:94:35:D5:49:BF:A4:C2:81:EB:21:81:93:06:D0:BA:55:57:EA
Certificate issuer:       /CN=f6e6ee11-cd51-4809-bddc-1460c28a9121
Certificate serial:       010D0C9F4328584B92DD991BCF9D2792E8C71580
Authority key identifier: 2F:64:D2:D2:30:94:F0:74:84:57:4C:F6:ED:28:61:F2:B1:E8:27:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/ef4a4583-f2cf-3fdc-a35f-7b4886cd2058.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     12099
IP address blocks:        208.90.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:99:1b:cf:9d:27:92:e8:c7:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6e6ee11-cd51-4809-bddc-1460c28a9121
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=e9e18ec6-6c12-4618-ae81-71f50de7302c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:dc:df:f3:ba:0b:14:b9:d5:d5:f0:30:a7:
                    4e:57:9b:9c:f3:3f:2e:4c:72:0a:79:d9:a8:8b:27:
                    88:1e:e6:7e:b7:ba:70:11:37:87:8b:5d:e3:b8:19:
                    b4:70:1c:59:b0:aa:ce:16:36:71:a7:b3:30:88:c1:
                    6d:21:d8:d2:2e:32:c7:44:d5:e1:f8:1b:e6:b0:2a:
                    82:04:88:a5:ed:e1:95:2f:fa:0a:ff:65:d9:39:ac:
                    69:31:a9:b0:4d:58:99:68:f9:c8:c0:ef:08:6e:cb:
                    2d:7f:ae:df:bf:2d:55:1f:d8:6a:d8:be:89:f5:cb:
                    ed:e1:16:c6:fa:70:b5:95:ec:5d:eb:ee:e2:7c:e9:
                    e8:e0:39:c9:0b:04:13:f9:14:6d:d3:49:d2:e2:a2:
                    ae:ac:36:1d:8e:d3:0e:e0:51:10:a5:84:b7:71:7f:
                    a7:61:bb:62:51:34:3a:52:93:7a:9d:42:3e:9c:ad:
                    0f:9d:19:a2:4a:cf:27:66:0a:d0:d6:2a:f4:50:40:
                    24:e2:7e:a3:38:45:b8:8f:5b:e7:94:40:ff:47:bb:
                    dc:ab:b5:e6:58:69:5e:4d:b2:82:86:9b:2e:0f:f8:
                    2d:e6:94:2c:40:c8:4a:51:70:d3:35:50:4e:8b:d0:
                    c9:7d:f1:23:ae:f8:f6:0c:8c:2d:b1:d3:5c:15:ef:
                    75:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1A:94:35:D5:49:BF:A4:C2:81:EB:21:81:93:06:D0:BA:55:57:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/ef4a4583-f2cf-3fdc-a35f-7b4886cd2058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.crl

            X509v3 Authority Key Identifier:
                keyid:2F:64:D2:D2:30:94:F0:74:84:57:4C:F6:ED:28:61:F2:B1:E8:27:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b8:86:91:47:f3:19:b4:aa:58:ab:74:9f:5d:59:32:eb:b2:
         42:a1:7d:d8:17:1b:fb:17:5d:df:a3:fe:85:a3:34:da:84:d3:
         e2:5c:ec:b0:55:38:44:24:74:d0:ea:3d:a3:40:3a:41:ef:2b:
         24:5b:a1:40:ad:f4:b0:a3:bd:18:59:01:50:50:53:c0:c2:a8:
         1d:90:8f:27:d6:9b:9a:1d:4e:3b:62:45:56:34:0b:b1:4e:42:
         ea:56:6a:76:3f:e6:56:03:ab:bc:4c:8b:c3:cc:b9:20:f5:8c:
         b2:6a:c0:b4:7e:52:8a:04:60:ca:b9:67:f8:4b:5b:b3:eb:04:
         1c:74:db:8d:9c:6b:a0:fa:60:db:7d:fb:d9:c6:95:10:fd:3d:
         aa:1c:d6:90:4a:d6:cd:ce:e7:3f:3f:47:e6:b7:f0:aa:71:c2:
         2a:ed:46:0d:85:1c:8a:b8:2b:67:88:4a:65:af:36:da:21:46:
         fe:b2:b3:7b:fc:38:ac:44:aa:d7:20:c9:2b:6d:15:b0:c3:2e:
         49:a7:ef:b3:ad:8f:4f:78:de:c8:d8:79:44:65:37:7a:cc:60:
         61:1a:10:ec:8b:f0:d9:0c:b6:c9:c1:10:49:8b:d8:f5:65:4c:
         4a:fb:a7:0f:e4:97:ad:85:58:09:5b:01:37:b1:f7:44:ea:09:
         6a:33:2b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:52:12 2025 by rpki-client