Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/95e69e9d-8803-3d03-82be-65dad88233d9.roa
File:                     95e69e9d-8803-3d03-82be-65dad88233d9.roa (raw, json)
Hash identifier:          6lt81vVfzWkYfdy4LnWzOOGm3KWQpls/PzliLpg/eys=
Subject key identifier:   6D:D0:DC:9E:3E:38:E2:54:D5:E7:64:4C:41:08:F9:EF:DC:92:75:0E
Certificate issuer:       /CN=aae4f0de-2296-435c-b411-b16981804498
Certificate serial:       010D0C9F4328584A20F54D712008C49C828BE120
Authority key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/95e69e9d-8803-3d03-82be-65dad88233d9.roa
Signing time:             Mon 09 Jun 2025 01:00:50 +0000
ROA not before:           Mon 09 Jun 2025 01:00:50 +0000
ROA not after:            Sun 07 Sep 2025 01:00:50 +0000
asID:                     398268
IP address blocks:        199.58.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:20:f5:4d:71:20:08:c4:9c:82:8b:e1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae4f0de-2296-435c-b411-b16981804498
        Validity
            Not Before: Jun  9 01:00:50 2025 GMT
            Not After : Sep  7 01:00:50 2025 GMT
        Subject: CN=c9c47524-1712-48f7-9109-cb3325dffc1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d3:f7:5e:9d:f1:d7:31:8a:73:55:32:d8:a6:
                    bb:e2:67:7d:60:94:d0:04:a5:dd:34:61:d1:2b:2f:
                    3c:12:88:98:f5:4c:79:51:8c:f8:13:aa:94:90:8a:
                    88:7a:48:01:e1:73:3d:dc:c9:ae:1c:c2:84:9b:f6:
                    da:28:ba:bc:27:96:9e:a5:2b:f0:61:53:6c:b5:fb:
                    eb:4d:dc:8e:9f:32:50:02:0a:73:dd:c6:00:a6:c0:
                    bc:5b:bf:be:7d:ae:6b:f9:7b:c5:5e:bb:73:6f:14:
                    b3:38:44:5b:dd:97:8e:0a:16:b1:06:03:a8:64:f0:
                    06:58:34:64:64:b1:df:f9:c4:8a:35:da:a3:15:c0:
                    b2:4a:71:65:38:fd:68:79:87:8c:05:d8:3c:06:f1:
                    92:19:7e:25:8d:15:fd:92:99:8a:0a:88:b9:42:c5:
                    53:69:fb:e7:b2:f9:98:a7:e7:6c:ad:54:7b:32:28:
                    41:be:87:6b:73:77:1d:4f:65:cc:4e:3b:35:c2:63:
                    74:e8:7d:1f:b7:43:10:fe:99:bf:50:6d:60:77:94:
                    52:7c:61:2d:0c:55:7b:da:d1:10:6d:bb:ff:db:4f:
                    02:dd:8e:43:48:84:12:2e:d8:b7:4c:b1:c8:5f:09:
                    c2:53:d8:a9:64:0d:c7:09:ed:a8:0a:a4:f3:57:55:
                    96:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D0:DC:9E:3E:38:E2:54:D5:E7:64:4C:41:08:F9:EF:DC:92:75:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/95e69e9d-8803-3d03-82be-65dad88233d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl

            X509v3 Authority Key Identifier:
                keyid:1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:eb:b8:d5:69:88:8c:b1:51:2d:bb:b0:d2:95:91:1a:e0:08:
         7e:d5:cb:70:19:73:c3:5a:70:c5:01:3b:c2:d9:c9:b8:a0:f0:
         a9:9b:ae:b3:85:fb:4a:10:30:5a:35:a8:4d:3d:98:80:02:9c:
         be:04:aa:bd:28:19:eb:e8:f2:7e:20:50:4b:4b:7c:95:e9:03:
         ee:40:9f:ea:e4:c4:bc:ed:85:4f:ef:e7:ab:e5:ee:cd:2e:25:
         5a:19:22:74:2d:bf:e5:2f:04:9f:40:73:e5:00:c6:2f:78:45:
         64:49:dc:1d:9b:87:98:79:4a:af:56:c8:5d:11:0a:7a:ca:42:
         9e:ab:94:af:94:04:f5:00:a7:55:e9:2e:d4:22:3e:5c:bf:f2:
         3d:73:6d:52:18:7d:92:0a:a4:94:3e:f7:78:b2:eb:58:31:c6:
         d6:53:89:7c:82:2c:c4:55:69:f9:be:cf:ed:b3:1c:41:d9:ad:
         a7:2f:74:c0:23:e5:f5:43:75:de:94:71:cb:38:80:af:15:8a:
         02:0c:68:0d:61:c7:88:9d:93:f8:09:38:b4:00:e6:8b:2f:52:
         00:ef:87:fd:98:0e:3f:c2:ec:ac:3c:9d:24:72:da:fb:f9:85:
         37:6c:c6:5d:a4:9f:4d:11:55:d6:7a:10:d3:1e:59:1f:bc:0e:
         99:f2:3f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:49:28 2025 by rpki-client