Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/e07ffccc-e92d-3740-bf40-b1ce295ad731.roa
File:                     e07ffccc-e92d-3740-bf40-b1ce295ad731.roa (raw, json)
Hash identifier:          UnihsH3KHjzwW/Sw4I7s3krAL8zS+TZfWfJrnEOpLT4=
Subject key identifier:   DB:95:57:C8:EE:73:39:40:1B:A9:2A:7F:A3:5D:65:E5:91:D5:C0:36
Certificate issuer:       /CN=91c894d6-b991-4966-bec4-7c58dac779b5
Certificate serial:       010D0C9F4328584AAB264F69D3294F1AF6DF6680
Authority key identifier: 13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/e07ffccc-e92d-3740-bf40-b1ce295ad731.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        199.87.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:4f:69:d3:29:4f:1a:f6:df:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c894d6-b991-4966-bec4-7c58dac779b5
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=19a26efb-068b-478c-953b-5ab7f7c040be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c4:81:b9:26:27:b1:3c:dd:43:dd:fe:ae:74:
                    ee:0c:c0:3f:54:c6:f1:6e:1e:d2:dc:6f:9a:67:2a:
                    73:b6:7e:27:c5:f2:13:dd:a0:f8:66:41:68:1e:7f:
                    a7:62:6c:3d:76:51:44:26:12:e5:8b:1e:09:70:a8:
                    d8:1b:30:59:19:f9:ea:9b:92:4d:78:07:69:f3:1d:
                    75:97:ba:77:8d:b6:2d:0b:e2:b9:1c:c5:9b:a9:ea:
                    c8:14:3b:5f:c4:f8:ea:06:4f:d3:be:44:4f:0b:97:
                    77:07:46:4f:d9:c5:7b:7d:eb:4e:38:ea:05:96:fb:
                    e9:13:34:a4:36:02:ff:0a:51:2c:3d:a5:4b:25:f2:
                    a7:b4:62:ca:d0:bd:f5:33:b6:46:0e:9b:ea:9a:98:
                    8b:d0:28:61:f3:dc:41:97:e4:d7:ce:20:3a:7f:de:
                    c2:5c:eb:82:9d:64:25:3c:41:16:8a:e4:32:aa:a3:
                    df:32:00:79:d6:f5:e6:f6:c9:78:f8:7e:e9:66:8a:
                    ca:a0:a7:90:13:89:29:16:c7:55:88:2c:cf:35:69:
                    6a:1d:ed:e2:5c:64:75:82:46:50:5b:db:4e:6d:4e:
                    7d:2e:06:3b:c3:73:48:60:b3:51:55:94:5a:0d:38:
                    0c:f7:a0:7a:b2:36:5c:4c:55:53:06:01:ec:5f:29:
                    46:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:95:57:C8:EE:73:39:40:1B:A9:2A:7F:A3:5D:65:E5:91:D5:C0:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/e07ffccc-e92d-3740-bf40-b1ce295ad731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl

            X509v3 Authority Key Identifier:
                keyid:13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:21:6d:16:ed:5f:b3:66:5d:33:b3:8b:38:46:61:ae:08:3d:
         32:91:1a:a4:b6:c1:a8:bf:e4:fa:31:a3:ce:85:89:8e:60:36:
         5d:88:64:5d:7a:74:05:66:de:21:11:2d:e7:4f:87:98:cc:c2:
         99:b0:45:2d:dc:d1:10:13:05:b8:b8:c6:85:95:11:7b:e5:98:
         03:8b:64:d5:2a:85:8e:f5:f2:5e:1f:ef:d4:c4:69:cb:08:b8:
         4a:ab:00:30:ee:8e:06:1a:fb:d9:45:3a:e6:30:fe:b5:7c:28:
         5b:05:cb:20:a8:0a:d6:aa:37:48:7b:8c:56:94:44:4e:a1:52:
         56:36:1e:db:f5:6f:ec:6a:bd:74:b7:05:7a:08:4c:88:60:e8:
         a5:b9:c3:17:d9:da:0a:76:66:75:80:02:1c:61:7f:48:17:75:
         c7:0f:bc:0e:54:0e:f1:77:6a:96:f1:be:25:a2:f4:64:a9:bc:
         c3:4b:fd:73:fb:d0:dd:cd:01:81:b1:23:30:1e:30:60:24:00:
         d4:b8:c7:30:07:24:0c:0a:bd:05:5e:1d:2c:ff:65:ab:f9:3e:
         b4:15:0d:87:59:9a:c0:c6:c5:27:81:30:ca:c9:c0:9f:a1:ce:
         3a:7b:95:ae:cb:69:44:f9:6a:38:43:a4:a9:60:72:4f:d3:97:
         51:a9:a6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:04:39 2025 by rpki-client