Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/2d875c89-89ae-35d7-bbb4-09d5f24ccda5.roa
File:                     2d875c89-89ae-35d7-bbb4-09d5f24ccda5.roa (raw, json)
Hash identifier:          9oj7sGDeyiT2xBIKKR5NfXaTyDGJB3pF20rylaiELlA=
Subject key identifier:   34:94:F7:7E:45:03:9D:3E:85:AC:87:57:1D:DF:55:D2:6B:4A:96:F3
Certificate issuer:       /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial:       010D0C9F4328584A14656C303C03391FF1E05AC0
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/2d875c89-89ae-35d7-bbb4-09d5f24ccda5.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     5650
IP address blocks:        168.91.92.0/24 maxlen: 24
                          168.91.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:6c:30:3c:03:39:1f:f1:e0:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=bbc90467-83a3-42e5-a26b-1d727cbb76f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a3:c1:e4:1f:be:6d:aa:35:1e:1d:3a:e9:df:
                    66:ad:85:a4:c8:5a:aa:4d:7f:7d:28:3f:c2:6d:c2:
                    50:b5:ac:aa:c4:cb:b4:4c:ef:43:3d:69:35:f0:84:
                    90:55:52:be:43:5f:e1:c1:03:85:24:89:74:76:cf:
                    78:00:4c:f2:1e:aa:ed:89:03:28:7f:88:8e:9b:41:
                    45:d2:9e:5c:91:b4:36:52:60:07:d8:5a:5a:af:4a:
                    09:98:30:49:8d:97:43:8f:30:5c:7a:db:50:7b:6d:
                    17:d1:89:39:5d:06:96:53:93:5a:c9:74:8d:6b:72:
                    de:65:82:07:55:a8:77:4f:65:fa:93:b7:c5:42:63:
                    12:52:19:70:08:75:0e:38:16:f0:c7:6d:5c:5d:b2:
                    92:22:13:0e:dc:0f:7d:e5:41:14:20:f9:52:91:bb:
                    b1:31:77:c7:24:a0:55:30:5d:6f:e3:3d:43:63:63:
                    4d:90:ff:24:e7:46:dd:6f:57:8e:16:45:2c:cf:cb:
                    5e:96:3c:25:8e:c1:72:a6:1c:1c:74:62:1d:96:2f:
                    86:6d:6f:25:13:9e:04:fa:7a:d6:a3:0c:3f:dd:2c:
                    90:6b:ed:08:72:c6:7f:65:08:5d:2f:5b:57:7b:26:
                    f5:73:b7:84:c1:03:99:5a:cd:9e:eb:30:b1:d7:70:
                    0c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:94:F7:7E:45:03:9D:3E:85:AC:87:57:1D:DF:55:D2:6B:4A:96:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/2d875c89-89ae-35d7-bbb4-09d5f24ccda5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl

            X509v3 Authority Key Identifier:
                keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.92.0/24
                  168.91.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:07:a9:cc:f6:90:70:fa:93:18:13:15:d7:9a:5d:48:54:de:
         1c:07:d1:fd:b1:4b:40:98:22:a1:dd:62:01:d8:a8:40:7c:ef:
         63:e1:ac:21:c1:d9:84:76:b6:e8:2a:8d:ce:73:30:01:d4:27:
         f3:9d:7c:f0:53:5e:a4:95:31:05:77:af:a2:37:f2:13:6d:0c:
         59:ae:4e:03:88:be:63:7a:45:19:73:6a:00:b5:a5:bd:1e:03:
         04:12:17:77:7a:12:ac:f6:1d:f1:fe:70:b7:b5:b8:e0:12:46:
         39:b0:8a:57:9b:9e:72:39:cd:d4:7c:0b:e1:9c:f5:a1:45:83:
         91:f6:0d:f7:b9:ac:a6:fe:46:f3:73:44:ee:9b:69:4b:c8:31:
         8a:be:dd:c1:10:54:ee:41:5c:36:fb:db:1d:3b:b2:49:b5:90:
         99:fb:60:95:94:c7:16:7e:9b:94:2a:0f:83:59:8f:6d:49:52:
         7e:eb:12:3e:e9:fc:ba:36:4a:56:6e:41:01:27:60:b5:32:9c:
         d8:85:fa:90:b7:12:23:9f:43:97:84:19:21:54:db:0d:5d:7c:
         65:df:b8:5a:66:8b:4e:35:cd:ff:d1:c5:c8:e0:6b:a7:bb:81:
         c0:d1:b7:b9:98:c9:3f:00:d2:95:b4:20:c4:83:91:09:2b:4b:
         09:15:32:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:57:35 2025 by rpki-client