Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/6cddac52-a8dd-3b87-b490-18149b48f2a3.roa
File:                     6cddac52-a8dd-3b87-b490-18149b48f2a3.roa (raw, json)
Hash identifier:          MF2Y2Zlw5qMu6obf19or7koMsCvPLGs5Q8Kl+biNllA=
Subject key identifier:   31:A9:4D:B7:74:D5:69:56:71:67:FD:7A:CB:AA:1F:ED:0F:DB:9A:6A
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584A6F20807D3C726078A5F05C00
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/6cddac52-a8dd-3b87-b490-18149b48f2a3.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     15164
IP address blocks:        173.244.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:80:7d:3c:72:60:78:a5:f0:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=538d2f58-5680-4167-abb8-ab39fd76b2b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:70:d8:0d:fe:ad:be:2d:9f:7a:66:54:1a:a1:
                    5a:24:59:c3:3a:b9:18:8e:72:e6:d2:5c:1b:41:96:
                    87:c4:d1:12:e7:8d:56:1a:77:6b:f0:19:d7:4a:88:
                    ef:45:d1:f7:71:0b:7c:31:da:4c:a2:f1:14:c7:99:
                    d1:7c:b9:f9:08:87:33:00:fa:89:56:9d:7a:51:d8:
                    cb:7e:ad:91:ca:96:ed:54:be:8f:58:79:4f:03:22:
                    d9:8b:81:26:94:1b:bc:0a:a0:cc:8c:7f:30:07:82:
                    ee:a7:3d:36:47:63:28:0c:5d:b8:36:99:15:da:c2:
                    d2:8d:eb:fb:9f:93:50:b3:7b:40:c3:d9:5d:74:f0:
                    6a:6b:7c:d9:00:25:3e:5f:39:8d:85:55:cb:82:0e:
                    d0:32:74:94:49:a0:f1:5a:98:7e:10:4d:1e:78:ab:
                    e9:40:41:e2:74:e5:3c:14:4e:e8:37:1c:bd:b4:6f:
                    87:a0:43:42:9a:a9:e3:d2:1f:6c:51:49:bc:22:08:
                    8d:15:24:80:52:99:6f:a8:ec:52:06:1a:22:26:32:
                    c6:f9:f2:c0:fd:25:11:5c:21:bf:1c:89:d1:64:66:
                    89:49:ec:6f:f6:73:3f:86:af:fe:6b:d5:63:af:b8:
                    9f:9a:b4:1f:aa:73:b9:1b:02:c5:d3:3f:0d:a0:69:
                    d1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A9:4D:B7:74:D5:69:56:71:67:FD:7A:CB:AA:1F:ED:0F:DB:9A:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/6cddac52-a8dd-3b87-b490-18149b48f2a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ad:3e:d5:72:06:31:6a:ca:48:57:c3:cd:d6:48:68:16:55:
         5f:60:39:5f:e0:69:e2:e9:e7:64:db:0c:09:b7:b6:99:fe:6a:
         76:fc:03:26:ed:bb:29:5e:42:5f:6f:c3:c0:2c:ee:b8:c2:9f:
         1a:a9:39:36:5b:14:00:99:49:ae:16:fb:df:69:98:1d:52:77:
         82:c3:ef:ff:6b:3f:ee:c3:02:34:e6:3d:09:7e:b4:fa:ff:55:
         82:86:2d:5e:4a:79:e0:0f:71:1a:b4:42:eb:8d:5d:c9:1c:f7:
         f5:43:a8:f3:31:99:22:e9:0f:2a:49:79:eb:48:af:7d:57:3a:
         d5:6d:d6:dc:e2:4b:a7:f3:5e:79:f7:b6:ac:e8:de:f6:62:c7:
         f7:75:e0:ee:06:8e:25:b0:ae:c5:d8:3f:ce:3f:14:db:50:ec:
         fe:f6:f7:3f:06:e3:3e:a9:93:6e:c7:5c:19:45:a7:60:fb:22:
         e3:c2:ad:c6:2a:dd:18:f3:2e:5b:6e:54:0d:57:e9:f1:82:db:
         9c:32:3c:82:00:0d:eb:73:b8:8b:4c:c8:98:68:02:0c:69:1e:
         fc:98:a5:2d:12:41:72:df:60:88:55:0b:fd:a2:1d:18:4b:d1:
         13:a6:cb:c1:c3:fe:c6:de:e7:07:59:38:04:98:e8:c2:a3:15:
         b2:82:e7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:48:10 2025 by rpki-client