Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7c0bde24-aeb2-383c-9a11-e15679cb5bde.roa
File:                     7c0bde24-aeb2-383c-9a11-e15679cb5bde.roa (raw, json)
Hash identifier:          R/F99D1xDNRiU0vcNoJ7xJfGtV5d/DEKJR/AkX0Dq7c=
Subject key identifier:   A7:31:4C:3A:81:C8:09:BC:64:F1:36:8A:D4:FC:63:74:4E:47:07:A3
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584A63F5B638F738B00EC9A7D580
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7c0bde24-aeb2-383c-9a11-e15679cb5bde.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     15164
IP address blocks:        138.199.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:b6:38:f7:38:b0:0e:c9:a7:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=80373ef5-c9fb-4734-b872-2e8bbd10697f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:23:ef:fd:db:77:01:a0:f5:70:8c:c2:d1:7d:
                    18:3a:f7:48:c8:1c:95:4f:87:e2:00:5a:91:4b:34:
                    cd:23:52:73:65:58:6f:c2:29:85:b7:33:b4:2a:91:
                    f1:62:4d:8d:d2:91:44:2c:c6:12:40:7f:cc:0d:b2:
                    5d:9b:b8:7a:0b:45:bb:f0:88:5f:6d:0e:4a:1f:ef:
                    0d:d0:7b:c6:e0:2d:23:96:bf:bd:f1:55:9a:63:0c:
                    0e:e4:e9:d8:7d:b2:a8:1d:fd:9d:3e:99:7f:49:8f:
                    a0:4e:79:06:bf:51:56:17:46:c0:9b:3a:dc:7c:4e:
                    9d:50:14:c2:5e:a6:bf:fb:c1:b6:64:51:ac:d5:c7:
                    a0:3a:1c:ec:bf:70:9a:94:3e:e0:01:9d:ea:21:24:
                    c1:2a:7b:71:b7:9f:ea:65:e9:29:7c:83:51:00:45:
                    39:c4:da:2c:83:db:af:1b:31:e0:43:e6:47:ca:29:
                    cf:52:87:69:09:3e:e9:ad:8a:ac:27:99:13:36:9a:
                    5e:9c:7a:ba:78:81:56:cb:2f:46:c5:60:cf:ad:6e:
                    81:a5:c9:16:d5:0d:6a:9e:74:a4:78:8c:14:93:7a:
                    c6:cb:45:a9:ad:19:18:83:c1:0a:48:d8:62:9f:1f:
                    9b:5f:2c:d5:8b:a9:69:ad:99:02:98:cb:33:30:1b:
                    69:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:31:4C:3A:81:C8:09:BC:64:F1:36:8A:D4:FC:63:74:4E:47:07:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7c0bde24-aeb2-383c-9a11-e15679cb5bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.199.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:99:f8:ae:84:41:e6:36:a1:3c:d0:11:14:ee:49:43:8f:23:
         37:32:4c:55:28:51:41:7c:71:eb:c2:4e:bc:21:6f:e4:85:4d:
         49:22:a1:51:59:c3:7e:16:91:2c:7e:00:b4:8c:87:58:78:69:
         92:b5:42:bd:1d:88:ce:3a:69:0a:d7:4e:41:7a:74:c8:a2:e4:
         d4:9d:be:b4:6f:57:16:fe:d1:69:85:b3:bf:65:da:8e:4e:5c:
         1e:0c:55:7e:77:2b:e7:b4:e7:6d:dc:e2:1e:de:77:ec:bf:6f:
         a0:22:e7:67:81:0d:9b:23:18:85:f1:a8:ab:07:66:20:62:4b:
         cc:02:d0:ea:72:4b:24:82:03:b4:20:fd:0a:7a:0f:f9:5b:a3:
         5d:78:15:31:b8:2b:6a:82:be:62:3f:83:bf:55:be:6a:2c:03:
         a2:30:6d:77:58:16:69:36:25:a4:68:d6:34:06:7c:79:a2:20:
         9f:a5:80:8e:67:8e:e9:24:0e:d0:ee:ba:a7:8b:22:35:21:d0:
         95:87:97:ef:34:db:1e:02:fd:5b:44:77:9c:0e:91:e4:67:d6:
         75:1d:c9:da:a4:05:ff:f8:76:7d:8a:60:aa:59:6f:90:16:a0:
         7f:49:9b:87:c5:79:fb:00:9a:6c:9c:c9:41:b4:d7:8e:15:6a:
         06:db:f2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:11:07 2025 by rpki-client