Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9dec1696-98fe-3f0b-a25f-e01be2b92337.roa
File:                     9dec1696-98fe-3f0b-a25f-e01be2b92337.roa (raw, json)
Hash identifier:          +1S0HGo6JAATIcfl+h2n4r8peF6UfVU8lKrId0XtbIo=
Subject key identifier:   03:90:A7:1F:8F:EF:2F:27:E6:FA:70:F7:95:A8:51:63:0B:B1:2D:14
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584A6F208177B6BB475312C39800
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9dec1696-98fe-3f0b-a25f-e01be2b92337.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     15164
IP address blocks:        208.82.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:81:77:b6:bb:47:53:12:c3:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=bd653c82-7e3c-46d0-a1ad-8e60a861c432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ad:51:d0:0b:08:d4:43:ab:e1:38:0f:ec:83:
                    e8:4b:f2:77:4f:9a:ee:6e:a5:dd:92:ab:4d:e4:71:
                    5a:38:3f:46:1c:62:bd:5d:6f:13:e0:39:ed:39:46:
                    f5:6a:d0:1a:98:a9:dc:f8:39:f7:1c:59:db:1a:62:
                    54:fc:2d:84:c0:1c:52:49:e7:56:e8:2b:95:7a:67:
                    d2:fb:d9:db:87:c6:f2:84:71:b4:5b:60:06:ca:65:
                    57:12:c0:46:32:42:49:c8:5e:db:1b:cd:54:ec:8b:
                    db:d1:ed:6e:8f:8a:de:78:5a:76:fa:37:d6:ae:11:
                    34:49:62:de:4e:aa:bc:42:4d:3a:41:0a:25:8f:6b:
                    ed:6b:01:f0:81:fe:5c:19:cf:6f:78:be:6d:3e:c1:
                    38:d9:a8:95:1f:71:92:9b:97:a1:d8:70:97:7f:0a:
                    2b:31:86:5d:15:45:90:e2:54:fd:08:31:06:94:bd:
                    89:8e:04:aa:21:54:81:49:b9:c2:28:2c:fe:ac:b1:
                    00:4a:10:b3:bd:62:04:0f:01:b0:57:28:c8:c1:fd:
                    14:30:f9:e7:13:7f:21:6d:d9:42:c9:6d:5b:7f:e0:
                    b6:92:3d:9e:6f:9e:c0:1b:b0:cf:fb:1a:9e:7f:68:
                    97:07:ee:32:4a:d8:4f:52:82:30:c0:0e:a4:c2:00:
                    bb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:90:A7:1F:8F:EF:2F:27:E6:FA:70:F7:95:A8:51:63:0B:B1:2D:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9dec1696-98fe-3f0b-a25f-e01be2b92337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:8f:65:8a:9d:ec:ff:f2:cd:11:dd:9f:3a:36:ec:51:94:64:
         06:5b:8b:20:ac:91:74:db:0e:58:a2:19:46:1b:b2:24:ab:1c:
         00:e2:f8:ba:ad:0e:0a:92:7b:33:28:27:c1:a5:bd:50:62:b0:
         f6:79:17:ce:db:23:7f:f1:73:c7:78:3a:7a:fa:fa:43:e2:d5:
         22:96:2a:e3:6b:4a:26:d9:74:4c:e1:a4:17:82:7c:d6:3a:3c:
         84:c5:44:76:4c:7d:e2:d4:d6:8f:4d:9b:7e:0d:44:d8:c0:48:
         88:cc:c2:0b:cc:c0:c0:61:5f:c3:be:90:24:e3:31:10:15:34:
         37:a0:6d:80:95:9a:49:4d:70:df:3e:a9:89:63:ae:6c:bb:36:
         b8:4b:64:64:56:60:df:3f:8d:40:e7:0b:d3:be:2f:ee:69:b7:
         55:22:78:bc:b3:74:54:bd:15:14:3b:a2:00:04:fd:94:54:de:
         72:a8:5e:b4:0b:3d:0c:6b:23:80:a2:32:cb:b6:5a:51:48:75:
         f6:0a:2c:07:8f:ff:67:3b:92:0d:74:4b:86:9d:01:51:59:82:
         45:39:7c:0a:a9:00:6e:f5:0f:07:7f:77:76:da:43:e1:25:19:
         ca:93:70:13:c9:c6:2a:4d:c6:dc:a8:cf:7e:6f:23:f4:e0:56:
         79:c3:f1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:12:37 2025 by rpki-client