Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/07616ced-0504-3b41-84fc-172bb80378f5.roa
File:                     07616ced-0504-3b41-84fc-172bb80378f5.roa (raw, json)
Hash identifier:          1B88b1BY7lcF8bWDMyaWiwZajqGAroB53k6U3z+7JdQ=
Subject key identifier:   0B:C0:2F:66:31:A2:9A:15:4F:61:C8:EE:DC:34:77:82:AB:F1:E6:DE
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584A63F5BEC22657955ECF370260
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/07616ced-0504-3b41-84fc-172bb80378f5.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     15164
IP address blocks:        138.199.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:be:c2:26:57:95:5e:cf:37:02:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=279e7969-4db8-4af6-a9f8-8225c22df22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:99:5a:17:a7:53:b3:18:24:72:d8:bf:24:2b:
                    60:77:3b:76:47:51:14:e6:19:5e:a8:76:f3:c4:d1:
                    b6:cf:9a:27:02:2b:65:38:a2:ee:30:1a:41:19:e4:
                    f4:e6:04:fe:03:65:75:dc:14:75:bc:b5:f7:2b:aa:
                    6e:ca:6c:e2:f0:83:90:8d:55:ec:40:0a:a2:6f:04:
                    ab:cb:c7:f8:ea:bb:83:13:e7:72:a9:2d:2d:61:6a:
                    13:8e:81:0a:96:f5:d6:3c:98:72:c4:72:14:bd:9e:
                    65:11:b5:7a:29:3b:03:67:00:61:80:42:57:fa:23:
                    11:87:c5:0a:07:d3:b4:03:84:08:ca:1e:1a:e0:cb:
                    69:cf:0f:8f:0e:f3:05:5b:de:f9:cc:c0:56:29:f4:
                    fa:53:41:36:f2:7b:e7:47:98:e7:91:dc:b8:56:67:
                    9d:a6:7e:18:bc:64:2e:be:fc:97:b8:e3:82:70:f3:
                    73:7d:6e:cf:24:d6:40:29:ff:5e:4c:ab:85:83:af:
                    6b:56:91:ab:73:c9:a9:11:56:76:24:d0:c7:d8:42:
                    d2:ae:3d:da:95:07:28:fa:27:61:9a:66:7c:21:41:
                    e0:b2:e3:6d:b2:4d:43:9b:6d:f2:c1:ea:97:8e:c0:
                    4b:df:e8:82:5f:37:01:df:bd:3c:e0:5c:31:8a:ae:
                    14:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C0:2F:66:31:A2:9A:15:4F:61:C8:EE:DC:34:77:82:AB:F1:E6:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/07616ced-0504-3b41-84fc-172bb80378f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.199.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ea:ec:ce:b6:10:08:2c:b5:87:45:35:d0:21:78:76:31:d6:
         33:8a:a8:97:93:28:04:0c:65:6e:86:d8:86:a7:c4:c3:09:22:
         47:d6:f2:c1:ba:44:b8:dc:81:8f:c8:f2:db:8e:c0:fb:41:06:
         b6:66:4f:54:60:28:d8:32:4b:f3:e3:df:37:c1:fa:f2:09:92:
         d7:1c:57:fc:12:78:5c:55:1b:82:2b:f9:8d:5e:9f:31:80:5c:
         65:d1:5c:bb:a2:df:9e:56:1e:b8:f1:42:84:d1:15:61:36:78:
         4e:cd:bd:be:83:dc:5a:a0:59:86:ab:46:43:f5:81:2d:b3:7d:
         99:7e:ef:e0:14:67:b8:2a:c9:d0:bd:92:51:70:91:bd:41:26:
         08:d7:0e:16:9f:07:a0:fe:7b:29:64:68:8d:3b:f7:7a:2a:a6:
         3a:c5:d9:af:75:5f:15:44:5e:74:17:d2:7c:49:57:df:b7:e5:
         8f:30:cc:cc:14:9b:32:66:70:5c:ba:80:ee:ef:71:03:ff:c7:
         8c:cd:6e:75:df:98:fd:f2:7c:dc:86:cf:bc:04:10:ca:87:2e:
         81:07:da:69:15:7d:9a:0c:97:98:21:84:13:3e:d5:0a:22:e9:
         08:36:25:db:2d:03:73:32:7a:bc:be:6d:28:b5:82:14:c8:8d:
         dd:68:0b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:49:33 2025 by rpki-client