Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/957f7958-7609-3f47-b3c6-ee76d895db0a.roa
File:                     957f7958-7609-3f47-b3c6-ee76d895db0a.roa (raw, json)
Hash identifier:          czsuamvI3i8L2BPYNMEVAfAxkyDXX4Q3ua+Bzlspu8c=
Subject key identifier:   E1:03:0A:07:38:D8:97:F7:98:F3:B3:A9:CF:3C:67:DD:3D:79:0E:68
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584B8D8DBA49BA411D22DB980300
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/957f7958-7609-3f47-b3c6-ee76d895db0a.roa
Signing time:             Fri 17 Oct 2025 15:22:14 +0000
ROA not before:           Fri 17 Oct 2025 15:22:14 +0000
ROA not after:            Thu 15 Jan 2026 16:22:14 +0000
asID:                     15164
IP address blocks:        205.184.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:8d:ba:49:ba:41:1d:22:db:98:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Oct 17 15:22:14 2025 GMT
            Not After : Jan 15 16:22:14 2026 GMT
        Subject: CN=5d62446a-72fa-402c-9a37-0885feaf3b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:be:0c:4c:03:89:77:56:24:c0:29:7b:3b:ae:
                    19:78:57:c5:3b:2b:03:93:61:4f:f6:7c:f2:15:06:
                    74:c5:87:34:5b:ef:30:9a:48:d9:c4:7a:46:d3:0b:
                    ce:0a:22:20:b6:6d:c1:aa:9a:96:07:86:60:95:16:
                    67:12:8a:a0:e5:ae:9a:dd:f7:16:6f:38:40:e1:35:
                    68:df:fc:4c:a4:ab:a4:ed:05:04:3d:34:31:d8:23:
                    b2:db:91:21:2a:5e:96:0d:1d:cf:a1:04:bf:a0:f2:
                    1b:86:f0:0e:dc:98:89:db:cf:6f:96:75:2d:b2:24:
                    bc:ad:d9:f4:a8:21:ac:0d:60:f0:6f:2c:31:fc:6f:
                    f0:82:d4:8b:77:5f:94:4a:e2:c6:37:f5:dd:0d:97:
                    42:60:98:63:df:0b:6a:e0:d6:c0:cd:6b:33:6c:61:
                    65:d0:f7:11:1d:61:29:34:56:77:18:09:f7:d7:9a:
                    20:a6:38:f5:b2:53:d6:d6:55:8a:39:9b:6d:87:89:
                    e9:11:cf:85:ba:63:f8:ed:09:54:94:88:8d:47:3d:
                    1f:8f:4f:1d:bc:c5:05:a1:ee:bf:eb:bf:4b:6f:e7:
                    ec:8a:3e:1c:88:a9:c3:79:b9:98:c9:2c:c8:34:1f:
                    ed:4b:d5:b4:92:07:b6:41:d6:18:13:32:56:62:c6:
                    ec:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:03:0A:07:38:D8:97:F7:98:F3:B3:A9:CF:3C:67:DD:3D:79:0E:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/957f7958-7609-3f47-b3c6-ee76d895db0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.184.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:b5:fc:8b:39:10:40:63:c2:93:9b:5c:0f:89:71:80:98:c1:
         08:c5:08:49:62:0f:0a:4a:83:47:60:44:d8:ee:6e:21:59:47:
         c2:68:70:3a:90:c6:97:90:57:61:a7:89:a0:a7:8f:b7:02:8f:
         b5:38:8a:c8:2f:b2:68:8b:6e:97:6b:ce:42:3e:fe:9e:86:ef:
         26:4d:d9:fe:eb:35:bb:fe:aa:7e:68:69:2f:24:0f:92:3c:9c:
         83:fb:fc:0b:90:b1:dc:61:de:9b:9c:d7:35:62:b9:6f:38:b8:
         11:77:ee:0a:d9:66:b6:62:84:5d:cb:ff:52:b0:8f:53:e5:c0:
         12:90:18:e1:3d:4c:62:c0:4d:4c:67:47:6e:7b:92:fe:83:9b:
         1f:f7:9f:4b:4d:b1:8c:dd:2c:c4:4a:2f:c0:b8:e4:3d:bb:cc:
         ca:2b:54:9b:be:44:2a:c6:ef:33:ec:1e:3a:30:1d:4c:68:81:
         fa:c2:42:be:1a:95:92:26:e4:64:50:a0:5f:bb:2c:0f:d8:c5:
         5f:cb:73:08:20:b7:e6:96:23:3d:c7:ab:db:62:b6:dd:c1:82:
         41:49:15:fc:99:65:c1:57:8c:cc:e8:31:0f:9c:c3:22:93:7f:
         fe:9b:e2:59:e3:4f:f6:c4:db:ab:26:b9:d9:f3:ae:39:5a:b8:
         a3:5d:de:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:55:43 2025 by rpki-client