Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/207c1b2b-d1db-300f-bc1a-372f077d979a.roa
File:                     207c1b2b-d1db-300f-bc1a-372f077d979a.roa (raw, json)
Hash identifier:          AUx18zzbI4gZUwdUibyypK3DtATx3reiLkcOkvV3r20=
Subject key identifier:   0B:A5:9D:FF:D9:FA:36:D4:F9:29:92:E4:55:6A:0F:67:DE:DC:6A:98
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584A6F207796382BDC816EDAF4AC
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/207c1b2b-d1db-300f-bc1a-372f077d979a.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     15164
IP address blocks:        199.200.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:77:96:38:2b:dc:81:6e:da:f4:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=bff96029-795a-4cd2-bc2d-42bbfa609da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:10:3f:bf:00:9d:ef:1c:cb:42:43:6d:23:4e:
                    06:c6:6c:a6:1b:02:9e:2b:de:20:08:a7:a7:27:84:
                    75:a7:c4:aa:41:12:f7:aa:9a:d0:48:e4:ca:88:31:
                    68:9d:56:de:3e:2e:1c:1b:87:c8:88:5d:f7:87:15:
                    75:d4:eb:d0:5f:62:70:5f:b0:98:84:62:f5:e8:44:
                    06:bd:bf:c8:9b:16:46:0a:19:75:08:9d:ad:4f:05:
                    53:e9:55:13:1d:87:b0:9b:8b:41:72:c3:3d:f6:c0:
                    6c:63:b1:c4:6a:72:87:61:7d:f2:46:40:5d:06:1a:
                    3c:9d:37:04:ad:37:02:07:f8:62:c2:1e:12:a9:eb:
                    a3:98:62:7e:d4:65:9c:bf:22:72:f5:41:72:36:4f:
                    63:67:8d:34:8b:22:3c:d7:a4:a7:95:fd:92:0c:9a:
                    cc:5a:f8:45:2b:6e:ab:1f:c2:ec:da:4b:53:ee:41:
                    da:bb:ef:13:6a:2f:38:7b:0a:7d:0c:0a:71:f3:7b:
                    ab:ce:02:0c:f1:d5:c5:8b:4c:3b:92:c9:44:ea:50:
                    bf:e9:f8:c9:62:9b:93:80:af:07:32:d9:49:2e:2b:
                    00:3f:3a:cb:04:33:df:6c:05:a9:a7:a7:a8:79:73:
                    f9:f7:6a:e0:df:cf:5d:db:e8:e0:db:de:a2:fd:52:
                    87:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A5:9D:FF:D9:FA:36:D4:F9:29:92:E4:55:6A:0F:67:DE:DC:6A:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/207c1b2b-d1db-300f-bc1a-372f077d979a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.200.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:7d:a4:90:d5:76:c3:78:59:28:de:e1:61:41:4f:fc:2f:99:
         db:b3:eb:f9:67:ec:4d:c0:16:c5:04:48:03:10:85:98:07:99:
         23:b2:f4:eb:dd:95:d4:e3:12:f8:34:c8:81:2e:6b:9a:4f:ef:
         e5:4d:9d:df:e5:3c:5b:bd:1c:36:56:c9:08:ca:90:77:d4:50:
         0b:4e:44:1d:7b:29:0d:53:af:63:7c:1e:23:4e:3b:e8:bf:2e:
         3a:80:a8:13:66:cc:15:b7:e9:3d:21:93:90:2f:23:f4:82:97:
         89:8a:3d:22:b8:b9:36:80:26:bd:c6:9b:b6:f1:5f:ad:1b:70:
         39:e1:83:bb:e4:6a:9c:15:a3:dc:24:b8:4f:39:02:96:52:86:
         79:7b:13:df:04:8c:28:48:32:c1:62:84:9f:ff:b6:95:e1:e0:
         d9:17:0c:a5:3c:cd:e9:d0:e7:6d:75:81:d6:dc:35:84:3d:b3:
         82:5f:c7:8a:b2:8e:47:47:c2:a1:91:83:19:c6:6f:b9:47:d7:
         d5:a9:ba:d1:c4:ec:6d:16:6e:27:ae:90:32:b8:6b:18:d4:3e:
         66:22:30:eb:e5:d7:e7:f1:0a:74:e7:3b:d9:08:14:62:7f:f9:
         be:46:20:13:48:16:25:c8:1c:27:4c:4a:c6:64:14:04:00:15:
         90:85:7f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:50:22 2025 by rpki-client