Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5d3cc9ef-4f92-3787-8755-b634d19dda46.roa
File:                     5d3cc9ef-4f92-3787-8755-b634d19dda46.roa (raw, json)
Hash identifier:          M0ZVn/JOzYWsdYnSuAWaYdKMGDQ+NLcvUNyM4Ozb48o=
Subject key identifier:   84:83:0A:E1:80:1C:31:87:11:73:E8:F6:C1:E6:33:64:89:AF:A8:77
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584A63F5BE398B837FA2D7BA53C0
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5d3cc9ef-4f92-3787-8755-b634d19dda46.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     15164
IP address blocks:        138.199.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:be:39:8b:83:7f:a2:d7:ba:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=3ac36f58-b473-482d-ad52-48edbb61b96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ae:a7:15:37:d1:1a:d0:37:d6:63:d6:ad:d8:
                    aa:f4:a9:d2:4b:17:b9:bf:90:cc:30:23:96:3a:47:
                    97:93:f1:ad:fe:72:2e:61:a5:80:12:cf:74:0e:26:
                    b9:61:2b:62:86:03:96:e7:e3:39:65:49:be:3d:0c:
                    d0:a0:47:21:0f:91:2b:65:c7:36:69:5e:a8:ed:53:
                    9d:a4:3a:06:a4:df:3a:68:61:a9:fb:ad:49:88:ac:
                    70:6d:51:59:dd:93:75:76:32:d8:91:09:be:19:57:
                    2b:c3:f0:3f:86:75:eb:07:c9:f6:00:c1:0e:c8:75:
                    62:56:2e:23:57:52:45:4f:fe:bb:e0:de:4c:46:e7:
                    1b:70:2c:a5:10:67:6e:ed:5e:b1:01:c0:ad:7a:2c:
                    b7:db:7e:a1:cb:43:3f:5c:26:b7:df:68:0b:2d:a2:
                    f0:c8:10:62:c8:8a:40:5a:6f:bd:83:95:ab:55:c0:
                    ca:1c:9a:6e:c1:14:09:83:2d:16:e9:b6:9b:51:27:
                    08:f9:56:cc:1c:43:67:71:ac:e9:83:ee:64:57:6c:
                    f6:34:0b:4d:72:3b:58:7e:c5:dd:ac:67:aa:f5:d5:
                    7f:32:de:8f:cb:1d:e9:7d:a9:72:fd:0a:16:ec:f0:
                    08:07:d2:6a:8c:76:77:8c:0b:28:d8:2a:72:b2:f7:
                    b4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:83:0A:E1:80:1C:31:87:11:73:E8:F6:C1:E6:33:64:89:AF:A8:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5d3cc9ef-4f92-3787-8755-b634d19dda46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.199.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:2f:db:e3:d0:57:4a:be:fe:78:e4:2b:e3:60:03:23:1d:93:
         f0:f3:fb:fa:58:45:bf:21:df:cc:54:23:e6:3c:9a:30:e9:c2:
         04:9e:82:90:0d:a0:d1:00:9f:83:65:bb:cc:91:f7:a9:99:f9:
         b6:1f:21:bc:2f:44:ae:6e:da:09:03:1c:b8:57:4f:9c:09:24:
         b2:2b:94:8d:e1:fc:3f:ac:07:32:24:9f:a3:bb:80:64:d0:bf:
         0f:4b:03:08:bf:1c:bb:21:9e:17:85:6e:32:22:cb:f3:f5:45:
         c3:9f:29:fe:1e:80:49:36:99:76:a8:07:6e:93:45:92:07:41:
         38:c6:34:57:6f:15:ce:0f:f0:25:7b:21:ea:fc:81:d3:32:16:
         31:ce:31:6e:80:89:b0:0b:d3:74:cd:23:d3:fe:48:08:11:ee:
         ed:ab:2e:3d:79:7a:de:74:e1:07:b6:63:ae:14:2c:17:a2:ef:
         a8:d9:79:14:34:7e:73:51:27:a2:49:c6:c3:99:ce:02:ca:bb:
         e4:bf:55:15:09:ac:10:f6:89:21:66:a2:c4:ea:ba:a7:f5:54:
         8a:43:06:7c:3c:0c:e7:ae:17:a1:bf:80:de:6b:c1:4d:34:6e:
         01:a8:fd:9e:98:0f:77:2f:4d:f5:09:3d:76:92:b9:4a:1c:dd:
         f0:30:53:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:43:43 2025 by rpki-client