Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/26eaef1a-80b9-36a1-b3e4-ebe5e68309b2.roa
File:                     26eaef1a-80b9-36a1-b3e4-ebe5e68309b2.roa (raw, json)
Hash identifier:          qWzt8MUyS2w0pbWjbmz9eTk+Unk5X0oHvunXRHhHYG8=
Subject key identifier:   98:BB:55:96:4B:6C:27:0F:CB:76:5E:FF:C2:FA:AF:9B:6A:B5:94:F2
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584A6F20804C727DAEA5A2F86140
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/26eaef1a-80b9-36a1-b3e4-ebe5e68309b2.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     15164
IP address blocks:        199.200.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:80:4c:72:7d:ae:a5:a2:f8:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=4cbccbbd-636e-4d75-8862-dc4dde32043d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3a:23:ea:91:00:eb:85:19:58:47:6b:7a:59:
                    b5:c7:09:19:f4:43:e7:80:c4:2a:2b:bb:61:ad:95:
                    f3:7a:68:89:3e:8a:33:bf:3f:35:0a:1d:6f:c0:6f:
                    4f:cd:cd:fc:a0:1f:21:32:9d:4a:47:39:6c:4e:fa:
                    dd:be:b4:36:07:88:78:61:79:26:55:1d:7a:c9:8c:
                    ee:b8:08:6a:88:41:ca:f6:9b:70:23:59:ed:e6:74:
                    36:61:be:d0:66:94:b5:dc:ea:c1:22:95:fa:95:8b:
                    2c:de:24:6c:dc:59:9d:0e:77:19:56:28:d5:c3:18:
                    ed:28:3c:d3:d4:32:54:c5:0a:81:93:9d:f2:ca:84:
                    bd:1f:9a:2c:31:59:80:31:09:27:fc:1c:d0:2a:ab:
                    29:c7:2c:64:1d:e9:86:66:b4:a1:ca:08:5c:1e:b1:
                    7e:26:2b:08:46:08:85:ef:99:c6:7f:59:58:ef:5c:
                    a3:e4:26:cc:0a:b9:aa:a1:b7:ee:db:cd:31:81:91:
                    78:c6:8c:43:61:a5:99:58:46:bf:42:92:b2:93:23:
                    76:52:9c:84:9d:d5:25:94:7f:29:60:d2:63:b4:1d:
                    f6:65:ff:18:48:44:ed:51:66:65:48:21:d7:2f:a2:
                    f5:d9:33:b0:e0:8b:3e:0b:15:78:3b:53:a1:a7:93:
                    99:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BB:55:96:4B:6C:27:0F:CB:76:5E:FF:C2:FA:AF:9B:6A:B5:94:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/26eaef1a-80b9-36a1-b3e4-ebe5e68309b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.200.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b5:d6:85:11:54:02:cb:d2:7a:4c:96:8c:67:10:2a:b6:a4:
         be:2c:75:58:8d:48:28:8b:ed:41:e0:34:c6:7e:b4:f0:8e:20:
         f0:43:f4:8d:ce:da:dc:47:c8:15:ea:ab:9d:9e:c1:9d:a9:62:
         63:81:17:e8:7a:ab:c0:76:cd:e9:f7:97:f1:da:ed:29:74:16:
         c1:42:ac:7a:38:64:17:4c:6c:02:13:41:8b:d5:a7:65:80:39:
         bf:a3:b9:40:c3:3d:c2:ab:fa:ec:3d:d9:e0:0a:fb:28:08:14:
         be:ce:8e:c8:ad:d3:2f:e1:09:6d:19:5d:23:44:86:9b:25:ab:
         2a:cf:0e:8e:39:d2:a7:2a:63:44:3a:2d:bb:02:8b:05:82:8a:
         ee:bc:72:df:94:00:fb:0c:9a:7f:86:57:73:23:3f:20:28:4a:
         77:fe:ae:3c:aa:76:78:c2:5d:27:76:a8:d8:69:8e:95:97:a8:
         87:bc:a2:3c:86:f3:bb:e7:e2:2f:35:58:f8:93:a8:8c:cd:9a:
         3a:da:f2:3b:cf:d5:e8:0c:38:80:3f:73:96:3c:e4:d0:81:46:
         7b:a3:55:54:fc:eb:c2:89:52:a7:cf:23:39:29:4b:73:c2:d3:
         ff:c4:7b:8d:82:ff:01:48:42:c2:8a:97:bf:b8:02:e0:1b:cc:
         c1:8e:80:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:35:21 2025 by rpki-client