Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d2d2d74e-1a25-327a-ac00-ac51bfcbbcc1.roa
File:                     d2d2d74e-1a25-327a-ac00-ac51bfcbbcc1.roa (raw, json)
Hash identifier:          LxCXOnojUJ5jo2ge26VL1KPTgF8MzMjfnlONskRBF7M=
Subject key identifier:   FC:A9:3D:C8:07:F5:37:5A:84:5F:6A:0A:8B:CE:10:22:DA:F5:AC:F1
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AF01503F5B9ED2E1719F2CEC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d2d2d74e-1a25-327a-ac00-ac51bfcbbcc1.roa
Signing time:             Fri 22 Aug 2025 05:37:07 +0000
ROA not before:           Fri 22 Aug 2025 05:37:07 +0000
ROA not after:            Thu 20 Nov 2025 06:37:07 +0000
asID:                     31898
IP address blocks:        140.91.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:15:03:f5:b9:ed:2e:17:19:f2:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 22 05:37:07 2025 GMT
            Not After : Nov 20 06:37:07 2025 GMT
        Subject: CN=b461133a-071f-4582-8e2b-0fa0dedc5927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:78:f1:23:ff:2d:80:85:a4:5a:87:0b:06:
                    e2:ec:07:1a:62:3e:e7:31:b3:3e:64:b0:08:7d:e8:
                    54:be:41:6a:48:12:29:8e:fd:89:41:bf:97:b8:7a:
                    dd:d6:09:ac:4a:a7:29:85:d9:21:23:2a:66:e7:8e:
                    ca:9c:bf:e5:30:24:0e:cc:54:63:30:75:59:bc:4d:
                    f6:6e:ed:d8:7d:a0:12:5f:b5:17:e7:33:a7:b7:f3:
                    ab:8f:21:c8:a3:cb:b2:24:cb:72:51:94:d0:eb:c2:
                    89:d0:c7:f0:12:47:84:e7:8a:6f:11:c9:42:19:d4:
                    38:31:90:8c:4a:5a:42:56:73:6c:9d:8c:d6:57:7a:
                    51:6a:d3:98:1d:44:d7:e8:08:04:dd:65:66:bd:f0:
                    6f:28:b9:dc:1b:f4:ac:8a:3a:e1:91:8b:df:3a:67:
                    09:bc:b7:36:ac:d8:07:aa:b4:e0:e7:56:2d:87:64:
                    80:34:6a:5b:d9:3a:7b:90:24:28:46:e6:b0:28:e8:
                    79:fc:3a:81:6d:96:83:29:45:f1:ea:3b:a7:11:b6:
                    53:7f:eb:47:af:f6:e2:ea:1e:a0:8b:72:0b:75:d1:
                    d6:7c:55:7e:73:0a:b2:b0:55:77:3e:2b:b4:74:d8:
                    02:81:e2:cb:0c:c6:9b:4b:d1:a3:08:90:4c:14:a0:
                    2b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A9:3D:C8:07:F5:37:5A:84:5F:6A:0A:8B:CE:10:22:DA:F5:AC:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d2d2d74e-1a25-327a-ac00-ac51bfcbbcc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.91.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:a1:bd:d9:a2:5e:25:37:8b:6c:01:7d:2f:67:f7:71:1f:41:
         4c:28:93:3b:1e:72:38:32:82:6f:19:f1:6d:a1:e1:83:c3:82:
         7f:0b:b8:18:bd:cc:64:9f:07:62:46:75:a2:50:df:e4:0d:90:
         b1:81:ee:42:8b:5d:5c:07:af:90:32:4e:fd:ed:be:46:4c:83:
         83:ab:05:66:21:7c:13:48:58:d0:9c:d7:d1:54:0e:a9:a2:b2:
         40:5b:41:2d:0b:de:22:0b:de:b7:4a:ba:eb:97:bc:3c:17:a9:
         05:48:f1:c9:fc:d5:97:1b:a4:64:d4:54:66:87:24:9b:83:f9:
         b3:ef:48:3b:8a:9a:ee:57:2b:09:60:c6:4b:d6:4f:83:08:a1:
         f8:dd:6d:92:af:02:70:a1:3e:2a:f9:89:3e:11:15:89:8b:85:
         95:46:2e:84:84:4c:4c:bd:14:31:be:bb:c4:76:b3:cf:92:12:
         e1:3d:38:df:fc:1a:8c:12:bf:8d:b3:85:4f:ea:cf:ef:0f:4f:
         af:52:49:fa:43:cb:55:d0:62:8d:b8:87:dc:af:2a:52:74:77:
         6c:a7:7a:20:2f:0c:61:c7:b4:01:e2:2e:10:a3:b0:8e:36:ca:
         0b:65:68:6b:c0:cf:15:6d:c4:d9:86:46:59:60:61:50:ab:36:
         66:8b:ea:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:24 2025 by rpki-client