Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/96e482ab-646e-3f95-b350-c845e7eb8987.roa
File:                     96e482ab-646e-3f95-b350-c845e7eb8987.roa (raw, json)
Hash identifier:          TOzbDv7OYCjyE+o2oRYiWpSJ8Q4+Yg/dGtxQnbo+z/c=
Subject key identifier:   3D:29:EE:54:E8:39:D3:59:C7:2E:1D:01:B1:4D:EF:12:41:E0:70:B2
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584A6F2074C764ECE014C888BAA8
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/96e482ab-646e-3f95-b350-c845e7eb8987.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     15164
IP address blocks:        147.136.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:74:c7:64:ec:e0:14:c8:88:ba:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=5f45f591-df67-4b5d-91cd-a7569297ee1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7c:9f:a3:9c:95:82:d6:12:69:ae:af:f5:10:
                    4a:59:87:fb:98:9b:a5:72:8b:0b:84:ba:b4:1a:b5:
                    5c:10:e8:69:71:fd:7f:b7:9b:df:d6:55:60:eb:90:
                    a2:bc:79:ce:f9:54:72:94:14:1e:16:5d:cf:12:49:
                    d0:2f:ff:7e:c8:e5:13:53:30:94:9e:9e:08:be:0e:
                    f9:70:2b:e1:83:33:c9:20:29:62:3b:e1:4f:da:c2:
                    7d:f9:8f:84:21:73:d6:8e:be:ce:6b:c5:04:ea:cd:
                    33:42:d0:13:6a:c6:72:3c:56:56:a8:ab:18:02:d9:
                    ff:ef:0a:28:27:a2:6d:59:13:8f:ae:36:c7:a6:a0:
                    55:a0:2e:ba:0b:ed:aa:00:19:9a:22:13:50:50:f3:
                    ea:2c:99:fd:34:de:66:3b:01:c2:29:af:f9:cc:bb:
                    00:1d:f7:cd:39:46:93:8b:12:4f:22:65:56:44:5e:
                    3f:41:32:d0:89:41:30:e8:da:9e:52:9d:67:66:93:
                    c6:1e:25:66:5a:55:5f:a0:33:6b:00:ce:65:15:ea:
                    db:84:bb:8c:be:6f:77:b1:b1:7c:33:47:cb:44:76:
                    c1:bc:65:1f:38:91:2d:d2:95:f2:e0:a6:1f:85:55:
                    15:7c:33:93:48:c6:71:60:15:d7:53:91:04:7b:9a:
                    bb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:29:EE:54:E8:39:D3:59:C7:2E:1D:01:B1:4D:EF:12:41:E0:70:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/96e482ab-646e-3f95-b350-c845e7eb8987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.136.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:a9:52:bb:f2:64:75:61:89:5a:54:84:60:a6:a1:f8:f7:46:
         f5:79:4c:74:f3:91:cb:fa:6f:86:44:96:b1:38:0e:be:76:bb:
         6d:29:64:8b:4c:a7:69:fa:33:50:1b:87:d8:8f:a5:2a:63:26:
         b3:a2:de:a1:7d:56:a5:26:7e:d8:95:3d:fe:c5:7e:da:f9:bb:
         47:a5:09:f3:3b:c6:3f:24:42:f7:de:7d:09:62:72:c7:c5:9c:
         c9:56:68:8a:7c:3e:92:95:11:84:0e:e5:af:3f:ee:37:22:e6:
         9c:51:89:60:44:20:2f:84:c1:7c:5e:43:82:79:a1:bb:91:c3:
         25:4e:1b:b0:aa:62:e7:8c:3a:b9:77:ec:19:1e:62:ea:40:9a:
         10:f9:8b:e8:9f:7b:f7:26:3d:36:6f:fc:dd:29:b3:16:50:6e:
         a1:56:50:74:fd:20:2a:04:cb:fe:c8:4e:00:ae:b0:e7:ff:39:
         03:64:7f:db:05:fd:4c:7b:3b:4c:8f:9f:30:ce:4a:7c:e9:b0:
         6d:5a:02:75:14:55:6b:cd:9a:90:bc:72:0b:12:8c:cb:71:30:
         a3:c5:c0:84:cc:27:a5:de:9d:0e:d3:b3:16:04:15:88:33:36:
         79:2a:7d:6b:7e:59:a9:ee:2d:68:24:93:87:6c:3e:2d:5b:c3:
         b9:1e:92:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:10:50 2025 by rpki-client