Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/31300e2b-97a7-3d58-a34f-406ef6444722.roa
File:                     31300e2b-97a7-3d58-a34f-406ef6444722.roa (raw, json)
Hash identifier:          UBS4ygQ+NbMBn3EXtGKRfxoJ5UydsnwA/HvRLRYzNaI=
Subject key identifier:   C2:FA:7D:21:3E:1D:5F:7E:53:A5:69:E1:DE:87:6B:09:36:E2:8A:D9
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584A7A4B303306704C7D408A7F40
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/31300e2b-97a7-3d58-a34f-406ef6444722.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     15164
IP address blocks:        209.71.146.0/23 maxlen: 23
                          209.71.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:30:33:06:70:4c:7d:40:8a:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=84a18eee-846b-40c1-b55c-e1f1cb062af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:45:fe:77:ca:37:dd:40:ea:0a:21:83:db:e7:
                    8b:67:70:57:07:77:1b:59:40:fe:17:02:ef:83:f8:
                    7d:84:09:52:e5:dd:a4:a0:9b:2c:80:03:f5:32:af:
                    50:fe:61:7d:15:84:a7:a8:f4:01:69:86:e2:ff:d9:
                    7f:2f:88:28:7f:56:c0:91:cc:ee:d8:ad:0a:c7:3c:
                    da:15:04:e9:69:54:61:16:10:10:c9:08:ef:3b:25:
                    e4:50:aa:27:59:20:63:be:b3:00:3f:1f:1e:73:42:
                    9b:a2:71:ad:37:0d:ef:18:8f:d0:d2:0f:4a:cb:d0:
                    c1:6e:fe:3d:0a:fb:97:61:78:46:95:5d:e5:81:f0:
                    e2:ce:77:2f:88:d7:26:20:1a:af:41:46:9c:6f:67:
                    cf:34:4f:30:ae:ef:02:e5:49:54:68:ef:0b:6a:c4:
                    96:34:43:1b:ca:8a:36:b4:9b:f8:83:be:37:22:58:
                    e3:c1:76:74:a8:1f:5d:dc:3d:15:71:61:42:47:0b:
                    46:75:0c:fa:88:30:09:d5:b7:46:e7:ed:08:af:62:
                    5b:09:44:35:80:19:64:22:93:40:fc:44:c4:0a:f4:
                    ad:1a:5a:ae:41:73:c3:d4:46:55:2e:51:09:10:78:
                    7f:db:3d:af:54:9c:f1:44:c7:32:f8:43:7d:ad:5d:
                    a9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FA:7D:21:3E:1D:5F:7E:53:A5:69:E1:DE:87:6B:09:36:E2:8A:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/31300e2b-97a7-3d58-a34f-406ef6444722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.71.146.0-209.71.149.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:3c:2c:e8:39:98:a7:bc:96:4d:cb:56:ef:7d:b0:91:90:50:
         ee:9c:74:1d:0a:83:4c:66:70:31:5a:47:50:96:90:cd:e5:64:
         12:4d:48:9c:77:8a:94:b7:56:c2:14:09:16:d1:a3:89:b4:52:
         2d:dc:11:b9:b4:48:5f:f7:b9:8c:b7:1b:11:68:f1:4f:eb:0e:
         a2:8e:49:ab:2d:e3:73:ff:3f:2b:dd:95:6b:bd:0b:b5:18:5b:
         6a:80:ab:00:43:46:62:02:cb:70:39:55:43:cd:ac:82:11:d2:
         21:6c:53:6c:9f:8f:a0:3b:a7:10:c8:e2:c6:ac:28:4b:df:ef:
         63:10:62:df:38:3a:f6:9a:3a:06:ce:e0:cc:08:e2:74:b2:91:
         b4:36:69:2d:e8:02:59:c1:2e:bb:5b:7b:98:d1:fc:4b:cf:fe:
         bb:f9:6c:e2:40:cd:58:d4:e4:6b:f5:b8:d8:a0:b8:78:59:50:
         35:5c:5d:39:eb:a0:c3:15:10:02:fb:7a:10:c2:97:44:da:2b:
         b6:a6:17:34:87:5e:7d:16:06:ca:58:6d:6d:e7:ac:24:5d:a9:
         6b:64:4e:27:0d:8b:f5:d5:88:d4:f4:29:dd:ba:cd:88:85:2a:
         0e:cb:8b:0b:a4:bb:dd:a3:c4:71:73:89:8b:3f:ce:7b:35:79:
         4c:a0:26:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:10:20 2025 by rpki-client