Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/29efcc49-6bcb-3481-a0be-3b192461ef99.roa
File:                     29efcc49-6bcb-3481-a0be-3b192461ef99.roa (raw, json)
Hash identifier:          Qe07B0kLV/9M6Ar3PqDCd8t950wUlhjLH9SC98scxJA=
Subject key identifier:   32:B1:D2:A1:EA:35:9D:D3:51:AC:43:A6:19:9A:93:63:E7:F3:0D:1D
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE67A2647137FC4056C246480
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/29efcc49-6bcb-3481-a0be-3b192461ef99.roa
Signing time:             Mon 18 Aug 2025 19:02:48 +0000
ROA not before:           Mon 18 Aug 2025 19:02:48 +0000
ROA not after:            Sun 16 Nov 2025 20:02:48 +0000
asID:                     31898
IP address blocks:        140.91.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:7a:26:47:13:7f:c4:05:6c:24:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 18 19:02:48 2025 GMT
            Not After : Nov 16 20:02:48 2025 GMT
        Subject: CN=1a8097ff-def9-4080-b5a1-c580e3f84253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e0:50:e3:07:c2:80:26:72:bf:43:92:96:c9:
                    8e:1f:56:7b:72:0e:8d:0a:f4:01:55:93:90:b8:75:
                    73:9b:79:06:f7:68:d6:2a:8b:f2:30:53:6b:ce:41:
                    ec:1b:60:9e:e5:97:43:32:de:90:74:07:25:08:f4:
                    52:7e:11:31:a0:40:3c:1e:52:8d:c9:4d:d5:e7:0d:
                    5a:db:2a:94:4e:d7:89:24:59:3d:79:77:77:06:0d:
                    7b:a2:b1:58:d2:15:9f:29:8e:c9:a3:23:f6:65:bd:
                    30:56:69:4d:94:8b:38:a8:48:58:10:1f:3b:ef:67:
                    92:b5:95:28:41:95:1d:2f:14:be:59:e8:74:a9:ba:
                    13:57:09:a3:fb:76:00:bb:b7:4d:9e:64:d9:c6:af:
                    75:ba:3b:44:e3:90:ed:27:8e:3e:f9:35:00:c2:8b:
                    84:7a:06:f3:a6:83:cd:f9:ed:6f:0d:da:42:6a:bb:
                    9a:2b:ae:a8:3a:35:fd:74:ad:8d:67:7e:45:ca:94:
                    ad:c5:15:ab:4a:90:e5:1a:85:64:6f:30:79:bb:8e:
                    10:66:95:dc:2f:c0:47:9d:6c:b1:37:b1:be:86:e9:
                    e2:51:f0:7b:8f:8d:df:3a:1c:4d:95:16:32:d4:90:
                    a2:d7:3b:fd:55:c6:c2:90:3a:68:3e:4e:82:55:fa:
                    51:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B1:D2:A1:EA:35:9D:D3:51:AC:43:A6:19:9A:93:63:E7:F3:0D:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/29efcc49-6bcb-3481-a0be-3b192461ef99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.91.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:dc:61:6c:f9:5b:59:19:ed:c8:47:3b:8d:e8:a5:42:23:fa:
         8a:db:bd:21:db:33:2a:ca:92:52:f0:49:b4:43:8e:59:45:91:
         a8:f0:b9:5e:08:02:c3:8b:e9:cb:de:2f:40:28:ba:1d:4a:5c:
         f6:92:04:fe:33:43:d0:50:f0:52:be:58:f8:c1:f7:6b:22:99:
         81:f4:77:22:76:f7:7f:45:38:9f:1d:b3:af:e4:88:fc:79:64:
         7d:54:6a:0e:3a:6b:78:e2:e4:d4:b8:ce:ea:5c:5c:bb:24:bc:
         fb:6e:67:d8:79:56:2c:ec:73:57:b2:f4:53:47:06:2a:80:04:
         dd:68:f1:bb:c3:bc:ec:17:60:8a:86:05:6c:d0:ee:7c:e6:c4:
         17:50:c2:d4:71:67:20:77:ca:31:80:36:df:0f:71:40:f2:5e:
         da:0c:bd:37:2d:04:a8:2f:eb:dd:cc:75:14:ad:ee:9f:8a:74:
         c1:23:71:d5:f9:ed:4a:38:c8:58:b6:c0:05:c4:1f:bd:90:42:
         c6:67:73:94:66:bb:27:4c:aa:36:15:8e:eb:28:de:0b:08:d7:
         37:7e:98:fa:ab:2c:21:b8:c5:fd:87:bb:e3:12:a9:c4:41:a4:
         c3:b8:bb:a3:97:02:70:6b:ac:66:1b:0e:42:09:bb:8f:9c:ed:
         ba:9e:bb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:33:45 2025 by rpki-client