Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/94a2d381-cda6-39f3-9556-b5da4acca95c.roa
File:                     94a2d381-cda6-39f3-9556-b5da4acca95c.roa (raw, json)
Hash identifier:          X5l++i5vrQZLqVTXaeHUFOZpxj5UekCfsA8kOT85h+E=
Subject key identifier:   A8:EE:60:2A:42:FB:F9:FA:49:C1:76:42:9B:B8:00:94:C1:D5:E1:F7
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584A6F20753B7295E32DC6522B00
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/94a2d381-cda6-39f3-9556-b5da4acca95c.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     15164
IP address blocks:        173.244.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:75:3b:72:95:e3:2d:c6:52:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=f8cc5a84-f268-465f-a172-00af3b7ee224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:f0:7d:c7:66:58:3e:76:e6:6c:50:4f:4a:
                    22:3f:3b:3b:32:77:00:f5:66:3f:d4:b6:6e:bf:4b:
                    51:14:4c:cc:4f:13:16:4e:85:ce:5f:d1:5f:cd:fd:
                    cd:34:04:65:73:80:b3:d6:5c:d9:d2:a3:4a:75:19:
                    e3:0d:8b:ef:bb:aa:a7:bc:2e:24:4c:63:e5:bb:35:
                    b7:5e:88:0a:f8:33:2b:ea:2f:ef:7c:20:8d:07:fa:
                    38:b7:60:1b:7f:11:68:9d:8f:ff:af:1a:dd:7b:09:
                    5d:b8:d7:47:4b:d7:07:f1:4f:a9:ce:46:53:fe:75:
                    d3:93:38:b5:73:81:48:a5:33:07:c9:6b:91:95:b5:
                    73:e0:ff:0f:d2:37:71:d5:0e:27:a1:ee:44:34:e0:
                    7c:60:eb:32:18:fd:48:b7:35:f4:9a:3c:ad:3e:52:
                    86:d8:f1:03:9c:d5:6f:16:fa:5b:0f:f7:74:a5:53:
                    a5:90:aa:f5:cb:e1:b5:95:da:78:24:69:d5:03:c0:
                    aa:d1:5f:86:88:5a:c2:0d:62:86:8f:f5:49:e3:b0:
                    8c:05:c4:49:08:02:21:82:40:a8:58:be:a5:8f:d2:
                    c8:cf:a5:60:a8:14:00:c3:5d:88:c7:56:a6:6f:41:
                    34:98:e9:55:d9:a0:35:1b:78:4d:10:b2:58:55:93:
                    03:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EE:60:2A:42:FB:F9:FA:49:C1:76:42:9B:B8:00:94:C1:D5:E1:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/94a2d381-cda6-39f3-9556-b5da4acca95c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:24:59:11:f4:1e:c3:df:7f:dd:f7:ed:87:42:eb:60:93:a4:
         78:e7:16:99:e8:90:4a:9a:a3:92:ad:61:d8:40:73:0f:0c:d4:
         70:d7:e1:f5:a7:44:36:67:f9:40:55:a7:87:78:39:53:f9:df:
         d7:cf:55:8b:9e:a8:2a:7b:38:40:d2:20:10:be:4c:8d:50:ad:
         66:62:f1:d1:76:14:08:64:fa:e8:53:95:dd:c5:f4:fd:37:15:
         22:2a:6f:80:69:de:49:75:95:c9:b8:bf:bf:4d:7f:0f:8c:a5:
         57:e0:37:20:b5:90:87:d7:da:0e:88:d4:64:23:44:e0:ec:83:
         82:e9:6c:9c:f1:67:8c:c3:a3:45:83:75:ec:55:58:12:a1:52:
         31:3c:9b:53:80:a3:22:e5:ef:a7:26:37:88:0a:a3:6c:97:be:
         7b:d3:fb:bf:9e:1d:ee:35:52:c1:4a:25:c6:13:e4:82:a4:a0:
         11:7b:da:a0:6e:d6:2b:42:af:da:f9:8b:25:19:ef:04:a1:93:
         17:f3:a9:5d:86:e8:06:c2:3c:6b:06:ea:a5:ca:a4:1d:7f:49:
         dc:08:e7:2d:7d:8e:1a:4d:dc:1f:21:6e:13:d0:94:7b:46:00:
         da:5c:a6:85:c8:6c:de:e1:3a:b5:57:7a:6f:cf:ec:31:d6:4c:
         5b:31:b6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:48:19 2025 by rpki-client