Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b2d92ca4-524b-3faf-90e7-dcd70308f84c.roa
File:                     b2d92ca4-524b-3faf-90e7-dcd70308f84c.roa (raw, json)
Hash identifier:          NKiB6OlgFuKDWQEff2HQOvsD1aSgp5+C7Znc0KVzMr8=
Subject key identifier:   A9:73:51:0D:91:33:36:87:0F:E5:32:12:DB:20:1E:96:9F:85:71:B4
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584A19FAB6D691629CD254E11E60
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b2d92ca4-524b-3faf-90e7-dcd70308f84c.roa
Signing time:             Fri 06 Jun 2025 13:01:04 +0000
ROA not before:           Fri 06 Jun 2025 13:01:04 +0000
ROA not after:            Thu 04 Sep 2025 13:01:04 +0000
asID:                     15164
IP address blocks:        209.71.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:19:fa:b6:d6:91:62:9c:d2:54:e1:1e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jun  6 13:01:04 2025 GMT
            Not After : Sep  4 13:01:04 2025 GMT
        Subject: CN=83b0f15d-db1b-47bb-b1a8-0bec61abcfb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a3:14:44:50:6b:fd:26:ff:91:c3:2d:6d:8e:
                    82:60:e0:fb:75:9b:46:ec:fe:05:24:2b:6c:98:26:
                    ef:8e:a4:52:d3:a0:dc:8b:8b:ea:7f:a0:2c:3a:8f:
                    b4:d8:e7:0a:35:9b:2e:f1:af:03:a2:04:4f:ff:11:
                    fc:17:c6:3e:e0:b6:df:f8:62:f1:bc:fe:c1:21:ca:
                    83:a8:70:ba:5f:94:ad:2a:57:37:3b:fb:4c:72:46:
                    9f:89:bd:f0:f3:50:26:82:68:57:5a:15:57:99:41:
                    6d:a0:e2:38:49:3a:51:0e:72:c8:24:3d:2a:64:07:
                    a5:38:ae:d5:22:ee:a5:17:c7:39:26:72:f6:f8:1d:
                    f7:ec:b4:8e:7d:1d:85:6b:fe:6f:23:b4:a3:b6:72:
                    1e:67:f9:77:40:db:f8:91:4a:4e:ea:e5:35:88:14:
                    1d:11:12:5f:1a:31:5c:83:70:87:46:e6:21:8e:45:
                    1a:b5:3c:1b:68:af:f6:d4:c5:d5:84:45:1a:5a:85:
                    1c:6d:bd:10:f0:1f:b7:1d:8d:03:7b:4e:79:4e:6b:
                    a8:2f:20:9e:e0:9a:b8:7a:c4:26:b9:d9:12:12:73:
                    64:1f:c3:6d:3b:bf:4f:2b:bc:a1:3b:9a:db:24:7a:
                    f1:f5:86:ed:9b:4c:4c:23:2e:6c:32:ad:c1:6b:31:
                    81:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:73:51:0D:91:33:36:87:0F:E5:32:12:DB:20:1E:96:9F:85:71:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b2d92ca4-524b-3faf-90e7-dcd70308f84c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.71.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:6f:55:ef:82:aa:7b:17:e0:30:bc:c4:0e:3c:17:48:19:90:
         54:cc:aa:75:77:c0:50:90:27:4c:15:c9:30:80:94:21:76:ba:
         22:93:cc:1c:b2:aa:28:09:7b:75:e0:b9:38:7e:42:66:ce:81:
         7b:de:4d:7a:64:03:73:ad:6a:de:04:86:23:39:5d:17:47:0b:
         56:90:52:59:11:17:2e:7f:b4:02:09:28:25:6c:d3:57:f9:a8:
         ff:9f:29:01:d3:ac:9b:61:5d:58:a0:a1:ad:df:01:7e:46:36:
         8f:b0:a0:89:8f:ea:93:9a:dd:a1:ee:64:fc:21:79:d9:ed:4a:
         31:1d:8e:71:42:d0:a9:ef:41:e7:1b:b2:55:e4:fb:8e:23:80:
         0a:c3:32:8e:b9:42:ef:72:9a:4a:26:70:2e:14:95:dc:f7:8c:
         35:52:03:56:b3:88:f6:d6:24:61:43:08:16:51:d9:b4:62:51:
         ad:2a:82:90:fe:30:87:ed:d2:57:8d:83:f7:d9:b9:ef:f6:75:
         84:09:45:b9:a8:73:a0:a1:1a:aa:35:6f:24:cb:66:ab:51:8e:
         d0:a7:ba:06:7c:12:b8:4b:f5:cf:41:92:42:99:26:26:2a:cd:
         60:ec:8e:65:34:e4:0e:4a:f5:73:40:f3:26:5a:f2:ad:1c:92:
         8e:d8:57:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:22:17 2025 by rpki-client