Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1d73e0d5-1652-3a3e-9318-3d81e4f5ca0f.roa
File:                     1d73e0d5-1652-3a3e-9318-3d81e4f5ca0f.roa (raw, json)
Hash identifier:          Z60BXLRFpnikbPglAqlYumfAiMNS72d/yjhQvWV2+3k=
Subject key identifier:   17:B9:27:A7:77:F3:26:9D:7E:5E:55:22:DD:35:1D:4E:76:B2:8C:53
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584A93112FC627334F39F4772620
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1d73e0d5-1652-3a3e-9318-3d81e4f5ca0f.roa
Signing time:             Sat 19 Jul 2025 21:59:13 +0000
ROA not before:           Sat 19 Jul 2025 21:59:13 +0000
ROA not after:            Fri 17 Oct 2025 21:59:13 +0000
asID:                     20115
IP address blocks:        69.91.133.0/24 maxlen: 24
                          69.91.137.0/24 maxlen: 24
                          69.91.141.0/24 maxlen: 24
                          69.91.145.0/24 maxlen: 24
                          69.91.149.0/24 maxlen: 24
                          69.91.153.0/24 maxlen: 24
                          69.91.157.0/24 maxlen: 24
                          69.91.161.0/24 maxlen: 24
                          69.91.165.0/24 maxlen: 24
                          69.91.169.0/24 maxlen: 24
                          69.91.173.0/24 maxlen: 24
                          69.91.177.0/24 maxlen: 24
                          69.91.181.0/24 maxlen: 24
                          69.91.185.0/24 maxlen: 24
                          69.91.189.0/24 maxlen: 24
                          141.140.65.0/24 maxlen: 24
                          141.140.68.0/24 maxlen: 24
                          141.140.71.0/24 maxlen: 24
                          141.140.74.0/24 maxlen: 24
                          141.140.77.0/24 maxlen: 24
                          141.140.80.0/24 maxlen: 24
                          141.140.83.0/24 maxlen: 24
                          141.140.86.0/24 maxlen: 24
                          141.140.89.0/24 maxlen: 24
                          141.140.92.0/24 maxlen: 24
                          141.140.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:11:2f:c6:27:33:4f:39:f4:77:26:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Jul 19 21:59:13 2025 GMT
            Not After : Oct 17 21:59:13 2025 GMT
        Subject: CN=b7b1e2ef-ef82-4eff-9b31-0556713904df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:71:ed:5e:31:bc:39:a8:f1:7f:b0:4c:51:62:
                    51:0d:63:9e:5f:f1:66:ba:e5:d3:a8:20:95:ba:2a:
                    cd:69:7d:bd:d1:21:4a:94:4f:60:b7:e6:af:c2:57:
                    15:bb:e8:d3:58:04:ca:74:a6:ef:61:65:36:1a:a7:
                    fe:1d:a9:bd:41:60:b9:20:80:92:33:28:4d:e5:b4:
                    15:e6:c6:51:c4:5e:84:67:6e:c2:b6:8a:7a:3c:9e:
                    25:31:b7:0a:ca:3a:e4:b9:71:64:fb:7e:75:7e:f5:
                    62:02:1e:6c:7b:7d:5c:b2:e5:17:0f:5b:0d:9c:e1:
                    ed:27:4d:51:c5:5e:95:4e:c2:34:d3:71:ef:d1:35:
                    96:67:db:76:e9:fb:0f:e6:0c:31:20:33:24:11:7b:
                    41:36:db:74:32:12:3a:3d:14:af:65:7f:bc:b9:09:
                    dc:9c:db:c5:e2:8a:23:ad:6d:a7:e7:59:dc:7f:10:
                    0a:ea:2d:41:8e:29:7a:64:61:02:74:1a:40:90:b5:
                    87:bd:48:8e:0a:8e:1e:50:4b:4a:13:a7:98:96:ff:
                    28:cb:c2:3e:2b:55:47:cc:09:9c:4f:eb:1c:c8:6b:
                    22:0d:d8:40:93:05:51:70:f1:4d:d9:5b:4f:87:9c:
                    df:c1:c2:29:44:7d:1a:fb:81:24:e3:e1:e1:8f:fa:
                    43:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B9:27:A7:77:F3:26:9D:7E:5E:55:22:DD:35:1D:4E:76:B2:8C:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1d73e0d5-1652-3a3e-9318-3d81e4f5ca0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.91.133.0/24
                  69.91.137.0/24
                  69.91.141.0/24
                  69.91.145.0/24
                  69.91.149.0/24
                  69.91.153.0/24
                  69.91.157.0/24
                  69.91.161.0/24
                  69.91.165.0/24
                  69.91.169.0/24
                  69.91.173.0/24
                  69.91.177.0/24
                  69.91.181.0/24
                  69.91.185.0/24
                  69.91.189.0/24
                  141.140.65.0/24
                  141.140.68.0/24
                  141.140.71.0/24
                  141.140.74.0/24
                  141.140.77.0/24
                  141.140.80.0/24
                  141.140.83.0/24
                  141.140.86.0/24
                  141.140.89.0/24
                  141.140.92.0/24
                  141.140.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:bd:67:01:d3:b3:de:64:c4:e5:42:dd:da:f5:8b:ab:10:f6:
         fc:83:78:55:39:6f:c7:14:e9:9e:6a:f1:62:cb:a5:5c:2c:5c:
         07:bd:b2:35:db:e5:2a:fa:ea:7c:e6:54:52:a1:d5:1b:36:81:
         31:0c:04:4c:2b:09:db:67:89:26:43:73:c0:d1:9a:ef:34:7b:
         e2:78:b1:ec:74:42:5d:a9:a5:5a:88:a8:e1:e3:63:47:31:0d:
         f7:1d:6e:83:66:a4:f4:58:59:da:c8:f0:3e:41:ff:f2:10:3d:
         76:bf:14:08:cc:b7:22:5c:38:34:6f:6f:6c:2e:8c:f5:2d:e3:
         32:90:04:13:59:68:9a:e2:b8:d7:00:f0:f4:2c:20:3c:1d:18:
         94:67:c1:ab:56:fb:0c:2c:91:cf:ce:65:20:e2:70:31:6a:63:
         87:cd:30:54:98:3b:95:d5:46:66:ee:30:b4:f5:a0:8d:e7:b7:
         7f:5b:b8:f2:6c:d1:63:24:c7:4b:fb:48:ee:a4:e4:fd:68:3d:
         86:99:01:d0:dc:54:a3:e4:62:da:0e:1d:ae:f3:b3:21:1d:d7:
         84:05:09:67:17:3c:ef:87:6d:0f:f4:85:ff:fc:c8:99:7a:2d:
         b7:59:dd:35:f8:44:f2:e5:29:7a:07:02:d0:77:49:6b:ca:6a:
         83:a7:18:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:24:51 2025 by rpki-client