Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9d09ee14-0bf5-3ccd-a4b5-962589e7ec28.roa
File:                     9d09ee14-0bf5-3ccd-a4b5-962589e7ec28.roa (raw, json)
Hash identifier:          CjJt1xG0WSx2OcdXXY3maowga8i2nfEApZ7KfQL+eXQ=
Subject key identifier:   F5:11:97:15:EA:41:3A:CC:63:55:33:07:AE:B8:9A:BD:37:C6:2B:BB
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584A63F5BEFE57E58DF09982CC80
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9d09ee14-0bf5-3ccd-a4b5-962589e7ec28.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     15164
IP address blocks:        138.199.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:be:fe:57:e5:8d:f0:99:82:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=97e5ed8e-69a1-4769-80f3-68476bd4cd80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fc:b2:00:51:36:04:71:12:91:4f:a4:d8:77:
                    54:9f:02:2c:bc:1a:19:7f:53:1b:e0:49:e3:24:ba:
                    4b:9f:12:dc:91:52:82:7d:b2:ae:e5:06:e0:be:d2:
                    77:03:86:e6:8d:5b:a4:97:0b:0c:27:e4:63:11:89:
                    94:1e:91:50:fa:ff:5e:f5:20:b6:1d:93:d2:c6:5c:
                    8e:b8:1e:23:95:7f:86:b4:44:ff:00:a9:da:59:25:
                    95:8a:68:2b:c9:87:55:db:15:b1:4f:a7:35:ca:8a:
                    a2:de:3d:e8:1f:f9:a8:d1:db:c4:20:1c:0f:07:32:
                    db:de:1b:9e:e3:bd:4a:1f:0d:6c:9f:4c:32:17:df:
                    e8:33:7e:eb:09:ef:56:7d:91:d5:4c:ce:fd:15:f0:
                    be:d4:2b:3c:8e:72:b6:bb:26:33:96:99:a1:27:77:
                    a3:17:c7:9f:06:43:07:22:60:44:f3:26:d5:53:b5:
                    fa:65:ef:bb:43:08:8f:d4:88:4c:eb:f0:3f:01:56:
                    a2:8c:f3:7b:13:84:b3:b9:8d:2b:ed:2b:39:e6:ef:
                    61:cf:1a:31:94:7d:b1:0a:2a:7d:44:ba:c8:b2:dc:
                    03:2c:dd:08:7d:25:c3:55:48:90:05:1a:eb:96:27:
                    2c:b3:76:2d:f0:c3:66:b3:ea:dc:8f:e2:ce:7b:ac:
                    52:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:11:97:15:EA:41:3A:CC:63:55:33:07:AE:B8:9A:BD:37:C6:2B:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9d09ee14-0bf5-3ccd-a4b5-962589e7ec28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.199.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:2e:63:3b:09:2a:1d:86:cf:7a:c7:20:17:fb:29:5f:bd:72:
         90:fc:41:54:4d:46:06:61:61:64:fd:df:72:8c:cd:2a:ad:e6:
         c5:3e:81:dc:ca:5a:12:f4:b9:78:44:c6:7a:8c:7a:c7:46:d8:
         f2:83:9b:72:19:cc:4e:95:78:61:3e:99:c2:e8:dd:4c:c5:cf:
         81:dc:f0:39:64:d0:79:7e:33:92:84:cf:13:ad:4b:90:b0:c2:
         33:05:da:5b:cd:15:90:98:14:71:f1:06:81:7b:8b:0a:3e:8f:
         03:21:d5:dd:47:8f:3b:a6:61:3a:d5:b4:b5:28:a2:85:8f:81:
         78:64:ed:54:22:7c:80:11:87:80:a2:b9:52:d2:f5:08:0a:82:
         84:dd:fb:17:06:6f:76:09:cc:6f:f0:1f:e7:16:e3:b6:6b:10:
         5e:18:04:33:a1:c9:76:b9:82:4e:32:d5:b2:3b:51:cc:5c:af:
         48:99:7a:ba:82:fc:8f:24:c7:26:f9:39:d2:51:04:8e:cc:d8:
         2c:86:d3:39:b7:7e:a3:fe:70:f6:13:d8:bd:01:8e:63:60:fe:
         32:bb:fd:04:4d:d5:ea:b6:44:0c:a3:1b:0a:5e:4f:f3:f9:a6:
         29:94:12:72:55:86:71:7a:a1:42:8d:9a:2a:38:09:7d:03:eb:
         82:05:8d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:03:02 2025 by rpki-client