Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/defae92a-38aa-3188-8dfa-60a7fa4efaff.roa
File:                     defae92a-38aa-3188-8dfa-60a7fa4efaff.roa (raw, json)
Hash identifier:          743SyzIjKyz7h4VLCzVIk/Qgev1nuw5OepvTddJgxfQ=
Subject key identifier:   92:F9:7B:52:91:FD:FB:6A:98:D7:8F:05:D1:91:3B:37:E7:A3:AD:F6
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584A6F2077D63511EF4F0B188340
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/defae92a-38aa-3188-8dfa-60a7fa4efaff.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     15164
IP address blocks:        199.200.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:77:d6:35:11:ef:4f:0b:18:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=73112597-7732-4a4f-9f06-0c33ffccd286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f0:49:ce:5b:2f:13:e9:8b:da:53:85:77:88:
                    38:39:fd:52:c9:a0:6e:60:64:64:15:6e:e7:7e:b8:
                    f6:93:27:a2:90:c5:c7:4f:9c:23:d5:f0:24:53:d4:
                    66:ce:5b:27:0b:21:af:48:06:a5:53:a6:ec:d7:73:
                    80:23:a9:db:4b:d8:bd:8b:ec:5c:3a:03:ec:85:51:
                    57:d3:24:83:66:49:35:cf:9e:3e:7e:82:de:cf:64:
                    fb:f2:8b:56:3a:c6:73:b2:8e:9c:c1:15:3e:c5:59:
                    7c:54:62:3d:f2:a6:16:c4:a3:fe:21:1b:02:6b:11:
                    83:cc:c6:bc:04:1d:81:c6:b1:41:c3:ff:15:3c:e7:
                    ca:eb:b6:5a:9b:f2:31:73:0b:76:68:6f:5b:3d:e5:
                    64:d4:95:07:5b:8d:a5:65:20:f2:ef:42:6b:6f:31:
                    2a:0d:f1:86:9e:e7:00:32:cf:a4:d1:c8:7a:3d:b8:
                    25:e7:9c:d5:75:47:be:49:f9:a6:1e:2d:6b:a9:ac:
                    c7:e6:37:b4:df:d0:81:e7:9c:31:e2:5e:26:2b:b2:
                    26:eb:a0:0b:2b:60:06:71:5f:b5:13:80:62:d6:38:
                    aa:45:f9:be:bc:a9:ad:3f:30:0b:b4:8c:fa:8a:47:
                    fb:e9:b7:01:a2:e4:99:a2:b5:98:68:3f:ba:11:ed:
                    57:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F9:7B:52:91:FD:FB:6A:98:D7:8F:05:D1:91:3B:37:E7:A3:AD:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/defae92a-38aa-3188-8dfa-60a7fa4efaff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.200.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:59:dd:a7:57:5c:f6:cc:f2:71:40:a6:cc:db:ea:15:2d:c7:
         c6:9a:45:66:60:97:52:99:53:79:cd:a3:21:89:0c:83:fc:00:
         90:0e:8f:8d:73:ee:70:9d:99:b8:3c:c1:ac:1b:a1:f7:52:e0:
         62:a3:42:89:4d:68:d7:a2:60:99:5f:c9:ff:19:80:8a:2b:ee:
         b3:a1:cb:01:49:c7:a0:07:75:6a:d1:a1:e5:a4:fd:f1:c6:cd:
         be:5b:a2:d3:f1:45:0f:40:66:b0:7d:8c:1a:21:a6:4c:95:6c:
         0e:81:87:57:8d:53:50:82:9c:25:d8:31:e5:76:1e:48:bd:c8:
         74:e8:e6:55:f1:55:ee:54:89:f4:c5:13:3d:a0:7c:d0:0d:54:
         14:3d:20:06:2a:6b:9f:d1:7c:fc:65:9d:eb:9c:82:a7:e5:9a:
         49:11:4a:7b:13:91:a1:1a:85:26:82:90:9d:8f:74:4a:67:f1:
         d9:01:ae:43:26:f4:75:79:87:58:e7:37:07:39:84:d8:17:4d:
         b8:bd:c5:d2:3f:5d:06:e5:ad:33:b7:b3:03:37:f2:dc:f0:0c:
         65:5d:2a:4b:e7:40:8a:af:2d:68:b8:7d:c1:42:59:1a:72:81:
         a0:bc:3b:2a:98:22:0c:65:ac:c6:9d:d9:e9:ad:5c:6b:3a:e0:
         20:69:b2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:43:59 2025 by rpki-client