Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/75905a4f-ba2b-3473-a639-d73e6d2e23da.roa
File:                     75905a4f-ba2b-3473-a639-d73e6d2e23da.roa (raw, json)
Hash identifier:          sdhMHy/aEo3+W75Us8OqspYqyrGEDT8Z7RkNDyAmbhU=
Subject key identifier:   86:9F:D5:80:36:B7:EB:40:CB:5D:19:B0:AC:0A:61:4E:8C:7E:7F:EE
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE6FD160AA6E91C9CE4A7EF00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/75905a4f-ba2b-3473-a639-d73e6d2e23da.roa
Signing time:             Mon 18 Aug 2025 23:26:37 +0000
ROA not before:           Mon 18 Aug 2025 23:26:37 +0000
ROA not after:            Mon 17 Nov 2025 00:26:37 +0000
asID:                     31898
IP address blocks:        140.204.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:fd:16:0a:a6:e9:1c:9c:e4:a7:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 18 23:26:37 2025 GMT
            Not After : Nov 17 00:26:37 2025 GMT
        Subject: CN=692c5811-9243-438e-9540-8b1d2b429a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1e:00:4f:c2:ec:78:d1:51:a6:f6:6a:fd:f4:
                    f3:f9:3c:c4:6c:92:ef:36:1f:c8:c8:c1:6e:c1:24:
                    0c:82:39:34:a2:da:6e:a2:52:93:ab:ed:11:ff:31:
                    38:7d:06:75:c2:8b:ad:d7:55:58:94:c6:ef:56:1c:
                    72:e9:6e:52:84:44:be:99:a7:4a:2d:cf:b6:f1:c7:
                    69:7c:1f:31:c1:ac:91:39:98:05:9d:2d:30:0d:3f:
                    84:00:58:7b:d0:ef:b7:e5:f2:5d:51:7d:3a:48:68:
                    77:f7:13:ae:ea:b1:26:a8:eb:b9:e2:10:0a:3e:85:
                    9e:0c:e2:7d:b8:c1:42:6e:07:a8:c9:d5:c2:e7:a7:
                    f8:0b:d9:bb:28:ea:ee:e1:36:0a:ee:83:01:ac:d2:
                    1f:e0:2b:6b:d0:b5:08:c4:a7:18:48:4b:8a:a1:79:
                    c7:7e:a7:6a:cf:9d:93:fb:91:a9:b8:f7:bb:8b:de:
                    6e:84:29:ee:da:a1:64:66:30:47:8f:45:80:b2:d8:
                    48:52:06:53:70:ae:9f:e0:fd:bb:96:a5:23:03:13:
                    4d:fa:61:41:f4:04:5c:66:e1:1a:ca:61:7c:45:0b:
                    a8:1c:30:05:e0:d5:1e:49:85:56:97:45:9a:f4:7e:
                    7c:47:09:e1:2a:ab:d7:58:ff:64:c9:19:ae:0c:46:
                    d7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9F:D5:80:36:B7:EB:40:CB:5D:19:B0:AC:0A:61:4E:8C:7E:7F:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/75905a4f-ba2b-3473-a639-d73e6d2e23da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.204.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:87:aa:6e:b6:ea:b9:f7:0f:c5:14:8c:0b:95:a5:f3:aa:0a:
         d6:c3:ec:66:95:4b:67:3b:4c:1f:16:89:7f:b8:49:a9:ea:69:
         1d:e2:42:2d:61:a1:81:f6:2f:09:9b:21:6b:cf:d0:f0:0a:bb:
         e6:9a:97:bf:d3:7d:10:40:dc:94:06:ab:97:f6:76:22:59:61:
         3e:c6:ec:69:b0:c7:8f:32:8a:2b:46:cc:33:8a:92:a2:2f:cb:
         2d:3c:b9:eb:a5:3c:03:ef:5d:2d:22:25:5c:e9:fd:59:0b:40:
         6c:6b:cb:16:ed:a8:97:a6:0d:d5:db:a4:f1:8a:1f:85:9e:e9:
         02:7e:58:7b:8b:13:05:23:85:fb:5e:78:c2:df:44:d9:6f:0d:
         b5:4c:b0:f1:07:34:c0:e7:e6:30:05:3e:50:24:ba:73:f2:2e:
         f8:e7:04:fc:46:3e:72:e3:28:d4:c7:0d:cf:a0:0f:6b:e3:68:
         f2:73:f6:ca:fc:12:a3:3a:79:6f:ac:2a:9e:7f:7c:72:20:07:
         cf:9a:dd:a4:51:d9:cf:1b:16:b1:ca:d3:cd:72:79:da:c0:0c:
         ca:51:bb:2d:3d:08:f2:00:34:9c:11:7f:cd:2d:b6:37:c8:f8:
         b6:24:9b:64:a9:03:e5:9a:0d:40:be:28:3e:03:31:71:bd:b4:
         07:c0:b5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:29:09 2025 by rpki-client