Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7d0455f4-8ea1-3c23-ab6f-0f5bf1807663.roa
File:                     7d0455f4-8ea1-3c23-ab6f-0f5bf1807663.roa (raw, json)
Hash identifier:          XO/dnkEue4hk0DrN9WEnXkc3DO7Tn1zM9Iem/YddGRk=
Subject key identifier:   D0:84:CB:DB:09:9C:4A:97:A2:AA:D1:70:A1:0D:97:1D:AD:80:43:16
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584B8D8EB1E13AE20CB7008ECA58
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7d0455f4-8ea1-3c23-ab6f-0f5bf1807663.roa
Signing time:             Fri 17 Oct 2025 15:24:11 +0000
ROA not before:           Fri 17 Oct 2025 15:24:11 +0000
ROA not after:            Thu 15 Jan 2026 16:24:11 +0000
asID:                     15164
IP address blocks:        205.184.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:8e:b1:e1:3a:e2:0c:b7:00:8e:ca:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Oct 17 15:24:11 2025 GMT
            Not After : Jan 15 16:24:11 2026 GMT
        Subject: CN=9c66c4c3-ac30-4c69-9d83-aa1816fa831c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:35:c4:d4:09:e1:1b:54:9d:f6:7b:72:2e:e5:
                    7f:51:c6:d7:31:de:fe:c8:98:a0:09:11:43:7c:88:
                    ab:d5:ac:f4:dd:8d:2b:62:4e:ed:8c:f8:00:23:2e:
                    31:89:2f:66:32:96:05:72:db:41:3a:b5:28:df:96:
                    a0:bd:bf:8a:5a:d9:a6:71:3d:f1:dc:56:b5:13:84:
                    7f:9b:ad:42:85:05:f9:5d:02:6c:f1:e4:11:17:ae:
                    74:d1:d6:9e:6d:0b:08:8a:92:c1:b6:7f:95:cd:94:
                    e0:e5:a5:39:d1:0f:a2:72:b5:7f:1b:7d:89:f9:79:
                    48:35:b7:89:06:94:b4:3e:f2:24:e1:c8:c9:b4:44:
                    bb:8d:a2:b1:59:62:98:3b:90:53:ba:da:3c:2b:92:
                    f6:b3:66:13:2e:a6:4a:17:7f:b2:4d:5b:18:a0:4e:
                    19:07:d0:ba:e1:2c:ff:d2:fc:5e:36:20:a1:0c:e4:
                    82:91:3e:6d:6a:88:94:e3:cd:0d:91:ea:16:97:1a:
                    b2:33:43:9d:dc:23:68:73:00:71:78:21:b3:e1:5c:
                    04:c2:b1:6b:15:c2:12:05:4b:44:e4:05:0c:7b:db:
                    08:f1:86:30:9f:24:ab:64:3e:f7:16:cc:81:3f:58:
                    6f:e6:6f:c1:fa:37:63:82:57:3b:1e:8c:66:a3:6c:
                    70:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:84:CB:DB:09:9C:4A:97:A2:AA:D1:70:A1:0D:97:1D:AD:80:43:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7d0455f4-8ea1-3c23-ab6f-0f5bf1807663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.184.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:eb:e1:ac:80:82:a2:0c:75:16:c5:8c:c0:1f:27:8e:d6:9e:
         66:89:7a:f3:62:12:78:49:a2:46:8f:ec:4c:5d:92:9f:29:7e:
         88:76:10:1b:04:f3:d7:97:70:b9:34:2c:48:16:03:2b:4c:c9:
         0e:66:bc:17:4e:ef:38:10:a2:b8:3f:27:93:67:32:f8:b8:2a:
         db:9a:57:da:00:a6:af:84:4b:fd:68:a0:30:44:59:83:52:82:
         be:c6:73:06:5f:3f:6d:81:0b:57:c8:fb:f0:f1:2a:54:f4:09:
         e4:72:e1:e1:e1:49:54:c8:11:b9:78:b5:90:01:f1:a9:a4:4d:
         49:8d:7b:ec:04:32:fd:4f:1e:ed:7c:49:a3:45:f7:03:30:a0:
         1d:06:61:c3:5d:00:4e:58:b9:da:fd:06:6c:c5:ee:a8:52:bb:
         c9:5d:c9:22:30:c3:a9:8b:75:1f:42:be:56:87:8a:2d:eb:24:
         cf:57:c0:0a:34:d1:b9:8a:1c:e6:8a:db:5a:e4:94:66:8e:7c:
         9a:5d:44:27:5f:78:9f:68:31:24:ed:f7:35:07:3b:3f:78:a1:
         8a:31:13:9c:dc:47:c4:3f:79:0e:34:4b:3f:84:b5:c1:0f:fb:
         db:13:71:cf:41:09:38:fb:2b:4d:ce:01:c7:b5:4e:a0:dc:b9:
         0f:65:90:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:55:39 2025 by rpki-client