Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91be5bd1-0b9b-3b4e-81f2-f68c7879c74b.roa
File:                     91be5bd1-0b9b-3b4e-81f2-f68c7879c74b.roa (raw, json)
Hash identifier:          L3WEJilA7J/NXbQbfd0K9bYRnmziFc/wI6Ywho/xtEw=
Subject key identifier:   E0:4D:86:93:92:9C:D7:D4:1D:2A:6E:63:79:41:C5:A9:7B:CB:9C:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF52163F5F1A6C358A13C2B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91be5bd1-0b9b-3b4e-81f2-f68c7879c74b.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     7342
IP address blocks:        209.131.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:63:f5:f1:a6:c3:58:a1:3c:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=b5ca7b9b-5380-4651-945e-68b427518f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:26:9e:96:a7:c4:b1:ab:05:17:d2:ed:13:30:
                    97:de:e5:57:2e:e5:65:f8:d8:39:81:62:7c:df:3d:
                    cd:3e:95:ab:82:7d:a9:ee:54:2e:63:68:de:bd:db:
                    ed:cc:90:6d:c2:1c:f5:11:0c:b3:52:67:d1:8d:a9:
                    ec:b3:dd:38:c1:fe:c0:40:2c:c4:8a:58:a9:b7:04:
                    7e:bf:b6:fa:a7:c1:12:d1:64:bd:bb:31:22:04:dd:
                    78:ae:5b:c9:c8:d9:fd:d2:ae:a6:b8:f4:1d:a4:76:
                    7f:9b:79:09:f2:56:eb:40:51:b0:d3:e1:6b:ec:eb:
                    3f:e8:d5:68:96:9c:3f:f5:e4:ca:15:81:23:58:91:
                    86:3e:79:95:a7:a2:43:ba:04:88:8a:cf:38:de:99:
                    78:15:c7:cf:40:89:bb:bd:0f:f2:d7:2b:89:05:a2:
                    51:66:34:68:58:c4:fc:50:69:ee:79:61:60:ae:35:
                    8f:9e:a2:ae:15:f6:32:32:6d:65:ce:b2:b4:fd:ba:
                    74:fd:95:aa:b2:56:6f:dd:63:f8:f6:4d:b4:d4:65:
                    ef:d2:da:70:b5:0d:da:58:d1:73:78:73:53:0d:13:
                    34:74:26:eb:3d:20:07:13:97:fc:37:e3:4a:5d:8d:
                    1b:1e:8b:97:74:a0:d1:71:42:7e:12:2c:9d:81:fe:
                    02:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4D:86:93:92:9C:D7:D4:1D:2A:6E:63:79:41:C5:A9:7B:CB:9C:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91be5bd1-0b9b-3b4e-81f2-f68c7879c74b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:24:3a:cf:99:34:6e:f7:48:7c:e9:22:cf:00:67:ab:b7:6b:
         97:f4:52:a1:5e:a9:e5:bc:67:52:42:54:56:db:9f:1e:7c:05:
         46:17:4a:b8:60:52:ca:39:a3:0b:ea:9e:8e:de:5b:27:e9:a5:
         65:69:88:16:2d:55:8f:c8:1f:82:34:cc:47:91:03:78:da:78:
         07:1f:66:64:e0:d8:12:38:8a:06:46:cf:bf:b7:90:96:a0:77:
         99:01:84:ff:b2:35:95:df:c7:68:64:f0:2a:33:58:eb:a3:a7:
         fe:c4:23:6d:ef:1c:0b:27:2c:6f:6e:01:9f:15:84:88:de:2a:
         46:d7:b3:81:b8:24:36:d8:ae:2a:f9:27:79:95:81:0f:cb:ee:
         b7:3c:f7:19:b9:1a:e5:d5:2f:16:89:fe:08:dd:99:90:44:d0:
         c9:e3:bb:28:e5:89:2b:27:ea:a7:8e:41:a6:ed:fa:c9:b9:33:
         eb:d3:c6:0b:e3:6a:d4:3a:00:5f:f7:27:43:e1:f0:30:08:aa:
         67:a6:7c:b8:56:c0:a7:1f:f2:77:62:1b:20:33:e5:43:e4:95:
         94:31:59:b2:b1:b1:f7:cd:1b:8a:05:49:fb:61:f9:76:50:ab:
         2b:b4:38:16:6d:a7:d8:af:84:60:57:8e:db:72:83:3d:8b:68:
         fe:c5:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 06:08:09 2025 by rpki-client