Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3dc16fb1-8fcf-3b9c-8f3a-ef0006abbc06.roa
File:                     3dc16fb1-8fcf-3b9c-8f3a-ef0006abbc06.roa (raw, json)
Hash identifier:          Q/v+Nbw2G5LJN0u3GrhhQ2MQRE0gxgvnj1UQqaECdhQ=
Subject key identifier:   ED:33:61:0E:D0:BD:94:43:F6:5C:48:84:4E:90:B1:1C:82:E1:8D:A2
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584AE451C68E0877F3F501FD0F40
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3dc16fb1-8fcf-3b9c-8f3a-ef0006abbc06.roa
Signing time:             Mon 18 Aug 2025 00:29:50 +0000
ROA not before:           Mon 18 Aug 2025 00:29:50 +0000
ROA not after:            Sun 16 Nov 2025 01:29:50 +0000
asID:                     7015
IP address blocks:        69.91.188.0/24 maxlen: 24
                          69.91.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:51:c6:8e:08:77:f3:f5:01:fd:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Aug 18 00:29:50 2025 GMT
            Not After : Nov 16 01:29:50 2025 GMT
        Subject: CN=2e3f20be-76ed-49f6-95a7-46274f61e704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:68:5e:ad:a8:78:e3:fa:bf:b5:75:05:b9:f4:
                    3a:f1:c4:09:c9:03:82:0f:16:d0:63:82:6e:bb:43:
                    4f:57:f9:c3:73:d0:c9:d3:86:3f:73:1a:51:c5:0c:
                    8c:39:4d:0f:6e:d2:bd:f8:1b:a6:c6:81:ff:31:fa:
                    d2:fc:6d:c1:11:02:d7:2e:5b:68:07:01:f9:90:2d:
                    3b:f4:8c:f3:54:99:9a:fb:ea:25:8f:64:05:d5:31:
                    ae:c9:cd:2c:ae:18:49:ab:65:2e:fc:4e:af:09:fa:
                    0c:eb:6b:2a:80:65:e0:20:87:04:a1:19:50:aa:a9:
                    2d:97:3e:c5:7f:3b:0b:86:8c:dc:1c:29:5d:dd:af:
                    b8:94:14:59:93:f0:8a:05:e7:bd:fc:01:1a:1f:74:
                    ee:8b:be:fe:fe:1b:3a:07:86:c9:23:d0:54:c3:76:
                    f8:dc:0e:5f:b5:05:1b:2b:77:9d:f7:7e:80:97:2d:
                    96:98:60:63:b0:0e:d1:b5:5b:46:fc:fb:09:3c:45:
                    79:59:b7:ed:aa:cc:61:94:75:b4:a1:aa:f3:52:10:
                    4a:72:9d:8f:d0:63:21:6e:54:54:f2:ac:c1:ef:b7:
                    97:e7:00:4c:41:18:ef:17:1f:36:ea:1c:62:29:71:
                    0c:64:3f:42:34:20:93:1d:b6:49:69:d4:83:29:c2:
                    02:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:33:61:0E:D0:BD:94:43:F6:5C:48:84:4E:90:B1:1C:82:E1:8D:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3dc16fb1-8fcf-3b9c-8f3a-ef0006abbc06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.91.188.0/24
                  69.91.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:62:85:a6:23:46:a3:91:98:5e:cb:45:a3:a4:45:f0:fc:0e:
         a5:87:f1:95:27:3c:53:81:36:12:cd:16:e3:28:eb:2c:c8:87:
         c0:46:16:f2:d2:91:ae:7c:5b:a3:1b:d0:d6:56:54:d7:03:c8:
         ca:78:20:b0:40:25:ed:8e:aa:94:1c:76:81:06:59:40:df:5c:
         66:b2:0e:8b:4b:bc:fb:9a:4b:bf:b9:fe:2c:8c:63:e1:c5:ee:
         3f:bf:d9:32:c4:1f:98:d8:ba:84:09:51:14:7c:6f:1b:06:12:
         00:d4:b6:b6:c4:88:1e:87:3a:d2:41:c0:76:01:8d:f9:c4:02:
         a1:f9:1b:40:c2:4a:0c:1b:f9:c0:1e:7f:53:d1:6a:83:3e:c7:
         e8:25:2e:8f:8a:80:a1:00:a1:f6:5c:c0:2c:8b:e3:57:ae:56:
         48:ee:81:c7:a1:7b:4c:47:c1:af:ce:e0:35:b6:08:61:5f:5e:
         d7:f0:1f:39:52:aa:a0:5f:32:96:85:83:41:2b:ca:77:05:0d:
         66:b2:9e:d2:79:82:f2:cb:3d:8c:4c:3a:b2:65:77:50:93:9a:
         42:c0:88:95:36:9e:b0:89:34:16:df:3f:eb:aa:57:4d:40:b1:
         78:b0:a3:7d:98:8f:1a:2b:83:68:81:57:8d:15:41:8a:e7:dd:
         0b:a1:e0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:58:13 2025 by rpki-client