Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/207c1b2b-d1db-300f-bc1a-372f077d979a.roa
File:                     207c1b2b-d1db-300f-bc1a-372f077d979a.roa (raw, json)
Hash identifier:          fjfOtgMY5232Wm4iJfUqYJAEzm9PXFWGoB1X0pX0PKk=
Subject key identifier:   EB:FD:4A:AD:14:BE:A0:BE:5B:EF:EE:16:92:DF:3C:1D:45:9B:97:B0
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F43285848AFBFA82A4A9F966C18A51280
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/207c1b2b-d1db-300f-bc1a-372f077d979a.roa
Signing time:             Mon 27 Jan 2025 18:59:31 +0000
ROA not before:           Mon 27 Jan 2025 18:59:31 +0000
ROA not after:            Sun 27 Apr 2025 17:59:31 +0000
asID:                     15164
IP address blocks:        199.200.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:bf:a8:2a:4a:9f:96:6c:18:a5:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jan 27 18:59:31 2025 GMT
            Not After : Apr 27 17:59:31 2025 GMT
        Subject: CN=0ebaff20-b01f-4d29-94d4-ec844be9ffb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:56:b4:e0:df:34:b1:88:86:54:32:a7:31:f7:
                    63:15:c2:6f:b6:cf:a7:82:e4:de:b0:de:b2:5c:72:
                    da:0d:77:46:48:af:28:e8:bd:d0:e9:67:58:dd:a2:
                    94:bd:f5:25:fb:4d:1b:b9:f0:d4:99:d5:cb:72:96:
                    04:34:57:90:23:62:70:5e:e0:83:1e:0e:86:af:31:
                    16:9b:f0:2c:f2:0f:f7:8e:51:b0:6d:e7:4b:59:8b:
                    ff:ef:6b:62:7f:a2:32:50:19:63:0d:1d:c6:cd:9c:
                    11:b5:e0:a1:66:d4:27:15:c8:52:ef:7e:d6:67:ac:
                    1e:c0:21:c8:20:f8:f2:49:6f:a1:5e:83:3c:55:23:
                    a3:3d:0e:d2:31:99:7e:9a:a5:95:93:ef:52:b6:13:
                    31:a7:b8:91:32:d6:3c:26:3b:b3:41:f2:4f:32:9c:
                    81:ac:a4:d0:eb:ff:10:d7:c4:fa:e9:f8:f5:55:b8:
                    72:3a:a1:6f:05:89:83:ed:8e:62:53:72:08:de:d6:
                    22:ef:15:e5:34:03:67:43:ff:25:e2:d2:45:b4:0d:
                    0a:f9:e2:6a:14:1d:80:4b:6b:23:86:4d:dc:e8:41:
                    4f:ea:c6:a1:a0:be:18:64:bf:8c:40:ef:c2:2a:44:
                    26:0d:d9:04:84:54:3c:74:29:36:99:2a:5c:f9:07:
                    31:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FD:4A:AD:14:BE:A0:BE:5B:EF:EE:16:92:DF:3C:1D:45:9B:97:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/207c1b2b-d1db-300f-bc1a-372f077d979a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.200.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:d5:48:2c:ec:da:05:12:35:37:bc:25:e9:3b:10:d9:6c:97:
         e1:f3:1e:60:81:02:65:ad:98:cc:8a:8b:e2:96:43:86:52:e0:
         a9:e9:f7:c5:cb:0c:73:78:81:e4:34:1a:64:3a:ef:c1:d8:8b:
         52:a3:e7:f7:65:4a:f4:f0:41:b8:17:5b:e2:28:c6:3b:33:57:
         e4:f5:bc:a3:fd:0f:fb:70:cf:50:e3:1b:f2:19:1d:ca:b7:6f:
         dd:2a:6f:b1:cd:6a:86:0b:a1:75:69:64:96:e8:50:e1:e7:3b:
         9f:19:c5:7b:2f:f0:18:b3:0a:07:0c:e9:a0:73:a0:f2:b1:0d:
         d9:c5:6a:9f:39:1f:f8:80:fe:d0:96:61:ad:54:1e:15:8c:ff:
         8b:d8:00:4e:5f:3c:71:01:46:81:2e:32:49:9e:69:b4:38:fa:
         45:fb:58:39:b6:a1:f1:8e:2d:6a:29:31:d9:e6:0d:24:f6:ac:
         2e:e3:70:67:e0:08:1e:b1:d0:30:60:63:a6:c1:3c:55:82:f1:
         ee:7a:64:c6:2d:a4:37:96:df:e7:65:0e:f9:53:e6:3e:b9:d2:
         1a:21:6c:ae:cd:5b:10:2d:5f:e8:e6:87:c3:6d:99:20:7a:3c:
         ed:2b:a4:f0:84:dd:28:27:bf:75:58:ab:cd:03:c6:f3:d2:00:
         7e:68:2c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:03:23 2025 by rpki-client