Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/32358343-42ca-3c67-b158-df3db2ab5db2.roa
File:                     32358343-42ca-3c67-b158-df3db2ab5db2.roa (raw, json)
Hash identifier:          iFulLIZaHgBYGJ7Afq07bLsgsATZBY5aciAVXDw6xIk=
Subject key identifier:   07:87:DD:22:E6:68:85:BF:A5:1F:FA:CB:56:0D:75:34:CB:44:89:06
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584A6F2076014E65B4E2555B6780
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/32358343-42ca-3c67-b158-df3db2ab5db2.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     15164
IP address blocks:        160.223.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:76:01:4e:65:b4:e2:55:5b:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=1617d1d6-09d6-4e3f-988d-c9790d5a7b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c7:f8:20:1c:e4:34:9f:0c:44:9a:27:ba:57:
                    5c:33:0b:ec:28:d2:0b:30:13:e1:2b:dd:39:7c:71:
                    a5:e1:fb:38:2c:e1:ab:d0:0b:e1:03:c1:73:dd:60:
                    31:0f:0e:ff:f1:e9:09:22:02:5e:39:ad:f9:39:ac:
                    6b:9e:c8:5a:29:87:4e:55:ee:07:fb:bb:95:4a:15:
                    d5:b2:07:ed:dd:75:1e:47:3b:56:a8:c4:91:8f:6b:
                    ed:36:95:26:69:c8:fa:8f:78:c2:1c:d1:0d:f0:a2:
                    0b:5c:7c:c1:d1:ae:1b:69:f5:cc:75:5b:b6:17:19:
                    b6:a5:9f:d9:49:b2:0f:ae:c2:8a:12:24:fb:16:b1:
                    ed:86:6a:e9:0c:50:e6:7f:e4:9b:31:14:97:be:9e:
                    80:dd:31:bd:c5:62:ce:69:dd:e3:36:00:bc:72:85:
                    c3:53:61:cc:36:7c:e1:a4:cc:86:28:67:3c:f1:d9:
                    57:18:3e:29:b0:af:40:02:26:70:37:cf:2e:96:14:
                    af:18:b2:1e:a0:aa:5d:86:07:26:13:ce:ee:48:7e:
                    f6:3c:91:34:e6:54:7e:fb:34:75:7e:66:99:47:01:
                    9d:c7:70:f9:49:c3:19:3c:60:c9:3d:fe:0c:f4:34:
                    da:4a:0b:15:4d:89:5d:4e:dc:99:af:5e:81:72:a1:
                    8a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:87:DD:22:E6:68:85:BF:A5:1F:FA:CB:56:0D:75:34:CB:44:89:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/32358343-42ca-3c67-b158-df3db2ab5db2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.223.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:1f:0d:63:cd:91:b7:98:0c:3b:4e:2c:7b:02:89:3b:40:3d:
         83:b1:a1:2d:48:0e:35:94:26:31:b9:5c:25:18:74:a5:b4:26:
         21:0b:37:bd:07:f8:d4:67:d0:cf:f8:0c:8c:c4:23:5e:9b:57:
         9d:66:1e:44:f9:a2:de:c9:a2:91:0c:5f:23:f9:82:e7:3c:c1:
         f2:42:ba:cc:de:74:0f:1b:f9:64:fe:50:30:98:7f:10:d0:3c:
         cb:a2:d0:a8:dc:71:42:60:d5:65:27:75:c6:1d:ae:31:d0:73:
         3e:b9:1a:ca:e3:cc:91:b4:9f:ea:f9:e1:f8:9c:09:fd:9d:78:
         cd:56:05:63:c4:0d:0c:00:52:4f:6f:0c:85:d5:84:0f:bb:a4:
         21:9c:11:47:20:7c:b4:78:50:44:ca:f0:59:80:8f:17:21:5d:
         50:9b:c4:14:1c:b0:35:22:11:d3:c1:bd:4e:f8:4e:1d:e5:95:
         dc:04:b6:68:0f:65:69:85:2f:c4:fb:ed:87:63:76:40:73:41:
         09:04:9a:e8:a7:3f:db:28:9b:36:fd:b9:88:1e:6a:32:1e:50:
         61:6f:e8:94:20:f1:96:f7:08:ca:58:fb:d2:19:f7:0c:27:62:
         7c:a8:79:67:a5:52:2b:39:a9:ae:5c:2c:ee:77:3e:91:8a:2d:
         8f:36:10:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:58:08 2025 by rpki-client