Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6500c21a-be7a-3945-b3a1-74c13bdb0da9.roa
File:                     6500c21a-be7a-3945-b3a1-74c13bdb0da9.roa (raw, json)
Hash identifier:          fb9fzjZU5+LnN1LlHctiyMzYfzOPNrLJmXSeKKoRRBI=
Subject key identifier:   BE:A3:D5:E4:33:72:7C:EC:8A:0E:B4:55:46:AC:5D:E4:9F:57:EF:F9
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584ADE597B96329290152112F200
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6500c21a-be7a-3945-b3a1-74c13bdb0da9.roa
Signing time:             Fri 15 Aug 2025 21:10:31 +0000
ROA not before:           Fri 15 Aug 2025 21:10:31 +0000
ROA not after:            Thu 13 Nov 2025 22:10:31 +0000
asID:                     31898
IP address blocks:        140.91.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:59:7b:96:32:92:90:15:21:12:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 15 21:10:31 2025 GMT
            Not After : Nov 13 22:10:31 2025 GMT
        Subject: CN=313faa92-fa8a-43c8-87a6-feb3ad0df813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f0:bb:83:0e:52:5b:ce:59:74:96:10:4c:85:
                    a3:29:91:64:77:a8:c8:89:60:d6:65:cd:10:d3:c8:
                    cd:90:50:ae:df:99:8b:5c:b3:e1:4a:ce:5a:04:87:
                    81:d9:0a:c6:01:af:6f:01:ce:24:00:16:39:58:f1:
                    22:23:1e:59:66:86:a2:4f:e8:de:3e:29:7a:70:98:
                    b4:bf:09:cc:2e:80:84:f6:46:c7:89:62:e0:5a:0b:
                    5b:80:48:b5:79:3d:df:56:26:63:d6:a4:82:64:c1:
                    fb:41:26:24:c3:37:51:85:dc:e1:a9:c5:65:84:b2:
                    8c:9b:41:7c:3b:b1:c4:c3:4c:db:a8:26:e5:a9:09:
                    e1:2d:72:29:a8:b9:e2:bc:e8:93:1f:fa:3a:6d:30:
                    d4:4b:9f:cf:9e:a6:e4:59:df:34:1c:6e:ea:06:a9:
                    1b:18:50:c4:90:cc:2a:bf:18:af:94:79:c4:90:f2:
                    47:50:c5:c1:42:a5:53:34:d3:bb:ee:05:2c:15:5c:
                    2b:15:c8:0f:73:74:da:68:8f:b7:ab:d8:d1:26:c1:
                    48:12:fe:5a:5e:96:4e:51:d0:c3:c0:16:b8:50:9d:
                    cb:fb:58:b9:c9:14:74:12:b1:97:8c:83:8a:c5:eb:
                    0f:5c:39:1d:58:33:d4:a6:2b:2b:23:1a:c6:91:8b:
                    ee:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A3:D5:E4:33:72:7C:EC:8A:0E:B4:55:46:AC:5D:E4:9F:57:EF:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6500c21a-be7a-3945-b3a1-74c13bdb0da9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.91.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:2c:c0:e3:44:92:67:23:89:76:77:95:df:d8:e1:a2:48:89:
         8d:ba:c8:60:96:34:84:bd:8b:06:b9:34:06:73:4f:7a:f6:9d:
         84:56:9c:63:02:51:3e:ff:aa:fe:ae:2d:bb:36:a6:c4:d6:d8:
         28:2d:e4:c3:4f:1c:3c:36:04:85:d4:9d:0b:d3:45:ca:d7:74:
         93:9c:02:14:0b:f7:a8:67:17:04:6b:05:f0:06:db:a6:08:87:
         79:56:74:0e:0b:eb:9e:fa:1a:8f:f6:b1:1f:14:ed:63:2b:16:
         ce:bb:14:fa:60:b3:0f:46:3d:d7:b8:5a:91:10:4f:42:62:fe:
         de:d1:8f:94:dd:b9:8c:d1:b6:8d:9b:58:ab:fe:97:f7:1e:73:
         16:19:2f:06:8f:af:b6:06:b6:79:2c:68:aa:85:fc:07:cf:d7:
         85:13:68:28:7e:e1:be:92:4a:2f:2c:79:a8:99:6d:cd:62:08:
         e0:48:27:b3:7e:bc:73:3d:7b:a8:c2:9a:a7:0d:fa:c3:19:11:
         43:3b:d0:24:00:f8:4b:db:66:43:7f:93:f3:b0:c3:9b:b7:f3:
         17:44:43:c1:bb:73:5e:e8:c1:92:f6:f1:52:bc:5c:08:87:4f:
         7c:0f:b4:cb:cd:75:ee:70:2c:65:27:3d:d5:83:f2:5c:a2:7f:
         80:32:2f:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEreWXuWMpKQFSES8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MDgxNTIxMTAzMVoXDTI1MTExMzIyMTAzMVowLzEtMCsGA1UEAxMk
MzEzZmFhOTItZmE4YS00M2M4LTg3YTYtZmViM2FkMGRmODEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfC7gw5SW85ZdJYQTIWjKZFkd6jIiWDWZc0Q
08jNkFCu35mLXLPhSs5aBIeB2QrGAa9vAc4kABY5WPEiIx5ZZoaiT+jePil6cJi0
vwnMLoCE9kbHiWLgWgtbgEi1eT3fViZj1qSCZMH7QSYkwzdRhdzhqcVlhLKMm0F8
O7HEw0zbqCblqQnhLXIpqLnivOiTH/o6bTDUS5/PnqbkWd80HG7qBqkbGFDEkMwq
vxivlHnEkPJHUMXBQqVTNNO77gUsFVwrFcgPc3TaaI+3q9jRJsFIEv5aXpZOUdDD
wBa4UJ3L+1i5yRR0ErGXjIOKxesPXDkdWDPUpisrIxrGkYvuDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL6j1eQzcnzsig60VUasXeSfV+/5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjUwMGMyMWEtYmU3YS0z
OTQ1LWIzYTEtNzRjMTNiZGIwZGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFs0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFAswONEkmcjiXZ3ld/Y4aJIiY26yGCWNIS9iwa5NAZzT3r2nYRWnGMC
UT7/qv6uLbs2psTW2Cgt5MNPHDw2BIXUnQvTRcrXdJOcAhQL96hnFwRrBfAG26YI
h3lWdA4L6576Go/2sR8U7WMrFs67FPpgsw9GPde4WpEQT0Ji/t7Rj5TduYzRto2b
WKv+l/cecxYZLwaPr7YGtnksaKqF/AfP14UTaCh+4b6SSi8seaiZbc1iCOBIJ7N+
vHM9e6jCmqcN+sMZEUM70CQA+EvbZkN/k/Oww5u38xdEQ8G7c17owZL28VK8XAiH
T3wPtMvNde5wLGUnPdWD8lyif4AyL5g=
-----END CERTIFICATE-----
Generated at Wed Aug 20 03:44:15 2025 by rpki-client