Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/1a347840-299a-3ca9-bc93-d9f4e2fa3e1f.roa
File:                     1a347840-299a-3ca9-bc93-d9f4e2fa3e1f.roa (raw, json)
Hash identifier:          89SNaN4xyMPynUqliNTLqYr4V/+YevwAZ/IWmLNzeYY=
Subject key identifier:   DB:59:97:F3:39:3B:32:D0:04:6B:61:67:06:AC:D3:6F:94:82:00:1C
Certificate issuer:       /CN=4091c99f-9cd5-4db2-8733-67e22036ebb5
Certificate serial:       010D0C9F4328584B2FC18A2F5E0C7F9BDD439600
Authority key identifier: 9D:EE:31:DA:BE:20:EA:2A:96:A5:4D:36:81:FA:52:AB:BE:72:25:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/1a347840-299a-3ca9-bc93-d9f4e2fa3e1f.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     32274
IP address blocks:        207.190.160.0/21 maxlen: 24
                          207.190.168.0/22 maxlen: 24
                          207.190.173.0/24 maxlen: 24
                          207.190.174.0/24 maxlen: 24
                          207.190.175.0/24 maxlen: 24
                          207.190.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:8a:2f:5e:0c:7f:9b:dd:43:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4091c99f-9cd5-4db2-8733-67e22036ebb5
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=6e4edf9c-811e-45fd-9aa3-301cd93e42f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7e:50:fc:ab:ca:c1:4c:44:b4:56:a2:f1:d0:
                    82:a8:89:51:55:96:da:5b:a0:d5:1b:52:b0:64:f3:
                    67:bb:7c:99:a9:72:3d:4c:b5:a1:e7:7f:ca:a4:4f:
                    93:43:e3:35:9d:4c:6a:ee:46:11:e1:f9:eb:c5:41:
                    10:25:dd:ec:67:d8:f0:e6:69:59:c1:43:6e:90:5f:
                    70:9f:dd:93:9c:8e:31:1e:0c:07:ec:f7:2d:90:50:
                    9a:a6:d9:38:9d:4b:98:f1:af:10:a6:12:5a:ac:5d:
                    21:02:d0:67:12:7b:57:c3:82:9f:8b:17:4d:4e:87:
                    e4:80:f5:47:d4:43:2b:d4:36:cb:ce:83:a2:90:bc:
                    d2:75:ce:ae:fc:f6:94:6f:0a:f6:71:df:39:00:0f:
                    80:a8:60:3b:61:17:8f:df:ff:ef:61:bd:b4:4b:e9:
                    02:3e:02:93:e5:82:fb:ce:44:3d:02:4f:c8:ae:82:
                    7a:f0:62:b3:05:9a:c8:41:11:97:48:13:c4:7c:a7:
                    f0:ed:57:03:34:81:71:cb:68:a5:16:bd:81:ea:0a:
                    a3:de:11:ea:15:25:36:d0:30:a6:78:7c:89:37:40:
                    3b:ee:e8:ff:cb:02:79:67:9c:2a:c2:5b:67:c9:d8:
                    b5:1b:b4:c9:9a:30:09:53:bb:4c:65:fa:49:12:39:
                    0a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:59:97:F3:39:3B:32:D0:04:6B:61:67:06:AC:D3:6F:94:82:00:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/1a347840-299a-3ca9-bc93-d9f4e2fa3e1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.crl

            X509v3 Authority Key Identifier:
                keyid:9D:EE:31:DA:BE:20:EA:2A:96:A5:4D:36:81:FA:52:AB:BE:72:25:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.190.160.0-207.190.171.255
                  207.190.173.0-207.190.191.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:57:ba:81:bd:53:7f:9c:f3:5a:f1:fa:5e:50:15:d3:fe:a1:
         7b:60:d9:c3:08:93:37:21:1e:47:5e:f1:e5:62:26:d7:cc:ec:
         9a:7e:33:82:19:a9:be:25:e3:7b:ca:4e:7c:af:6c:af:e2:86:
         7c:0e:ed:84:3a:77:58:dc:b5:f9:d1:6a:a8:89:e1:72:a4:b4:
         c8:07:1a:66:3d:31:72:15:8d:4e:a2:3d:7b:e4:0e:f5:02:fc:
         b6:05:c2:04:2b:9a:66:38:bf:e8:6c:42:20:9c:13:fe:b7:08:
         e5:5c:4d:ba:27:96:c1:65:0b:9a:51:4f:14:d6:60:a8:3f:f8:
         5b:09:a7:46:ea:dc:df:5f:33:ce:11:72:51:c0:62:44:92:85:
         9d:1d:38:fc:73:14:29:22:18:06:4c:21:28:d0:df:fd:6d:1e:
         08:0a:9b:47:4f:c4:50:95:8b:c7:aa:eb:2a:06:53:fa:d3:15:
         a9:34:e7:01:94:98:2e:d7:b9:9d:ed:78:2d:4d:4b:b5:6f:17:
         7b:98:5a:42:27:10:0c:88:8c:6b:a2:ae:c5:96:e1:65:5b:6d:
         2a:c1:1a:c7:8f:e1:4b:2a:e0:5f:98:d2:1d:68:76:e1:8c:ef:
         5b:aa:f7:b0:93:b2:43:bf:88:be:55:28:fe:6a:2c:9a:f2:b8:
         92:0a:59:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:32:22 2025 by rpki-client