Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8936a13d-455f-353e-841a-22653a65c03b.roa
File:                     8936a13d-455f-353e-841a-22653a65c03b.roa (raw, json)
Hash identifier:          gW1xv1kIYczU5PKzonjrUeNqMwC2LXMyx6h5+CVjhGs=
Subject key identifier:   FB:2C:FA:7F:2E:E7:48:02:21:0E:63:19:71:F6:E8:E9:F3:6E:20:1A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AEB3120E32B9D08AC3EFAA0C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8936a13d-455f-353e-841a-22653a65c03b.roa
Signing time:             Wed 20 Aug 2025 11:34:43 +0000
ROA not before:           Wed 20 Aug 2025 11:34:43 +0000
ROA not after:            Tue 18 Nov 2025 12:34:43 +0000
asID:                     31898
IP address blocks:        140.91.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:31:20:e3:2b:9d:08:ac:3e:fa:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 20 11:34:43 2025 GMT
            Not After : Nov 18 12:34:43 2025 GMT
        Subject: CN=62e14a7d-e3b7-4eb1-b69a-7a8f6481b8cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e9:d0:be:87:91:06:49:24:7e:3d:d8:c1:dc:
                    da:6c:7c:31:6b:b0:fe:56:ea:cc:c4:45:de:5c:6d:
                    22:7f:1a:be:3f:e5:cb:18:b9:04:e3:97:f8:e0:df:
                    a8:31:3b:02:89:f8:d6:77:76:17:7f:b5:e7:c0:8c:
                    c8:7e:7e:96:31:33:00:9c:3e:76:7f:53:e7:a6:40:
                    87:9e:58:72:32:24:32:80:08:6c:1f:28:b1:dd:52:
                    b1:5d:c7:96:11:ee:88:97:91:6a:76:b5:4b:a4:e5:
                    93:fe:9f:95:ea:75:02:0c:bb:b7:3b:97:79:f3:3b:
                    8f:21:13:2b:16:49:b1:ea:d9:e8:92:f9:69:77:fc:
                    5b:b3:8a:53:59:78:b0:ab:97:d9:a9:60:59:c7:b1:
                    06:af:03:05:dc:18:cc:ec:86:df:2c:ad:3b:15:a2:
                    fd:cc:e5:ab:58:4a:6d:d4:12:85:0d:9b:66:16:70:
                    90:f1:2c:61:65:f2:04:77:31:b5:32:95:6f:0f:7b:
                    a0:9d:51:55:10:f9:60:a0:15:84:c4:b5:bd:03:32:
                    d7:15:00:75:02:f2:74:9f:ff:dd:ba:fd:d1:ef:b4:
                    8d:9e:19:9a:16:4c:2c:aa:91:12:10:7a:20:7c:16:
                    2a:99:29:b1:fa:11:dd:31:e8:c9:1c:df:28:8f:e7:
                    2b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2C:FA:7F:2E:E7:48:02:21:0E:63:19:71:F6:E8:E9:F3:6E:20:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8936a13d-455f-353e-841a-22653a65c03b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.91.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:fc:df:01:f2:29:d4:25:26:ee:d7:ba:e3:a9:6a:06:7e:79:
         ef:b9:54:a4:65:81:22:f0:56:7a:13:24:a3:15:1e:16:63:30:
         b7:06:43:2b:bb:ba:a5:22:ac:b3:63:cc:18:b4:a1:6c:21:f6:
         a6:74:16:61:2f:b5:65:4c:b6:e3:33:b8:b1:f8:e7:4b:ca:6f:
         d9:e9:24:c6:c6:16:76:c6:02:45:60:4a:a8:f7:e6:69:09:90:
         ea:6b:2b:b6:65:8c:ba:50:6d:b0:99:b6:64:73:fc:6e:8b:9a:
         57:f9:0e:44:ac:89:e0:9f:50:e7:ba:4e:a1:06:6f:46:b4:d9:
         eb:00:00:48:23:55:84:36:fe:a5:5b:cd:8a:75:97:7c:a3:ee:
         53:ed:19:42:df:ac:bb:fd:97:1d:9f:2e:53:b4:c6:1a:2b:b5:
         2e:46:12:c7:f5:8a:48:5d:af:fd:ba:64:b5:06:92:8d:32:4b:
         67:93:44:d2:f3:f2:86:76:54:79:47:b9:1d:0b:99:ea:1b:f8:
         49:00:b2:ac:64:f9:3e:21:1c:95:69:a1:c0:b7:01:bb:a4:a2:
         5d:cd:65:17:ff:3f:87:4a:4d:f9:1e:ae:0f:19:9a:2d:ec:3e:
         75:5d:67:fb:34:38:a0:6f:9e:22:2d:34:2e:bc:1c:fc:53:a2:
         db:83:6c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:37 2025 by rpki-client