Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/acbbae28-c6e0-34cb-892d-d1b045ba028e.roa
File:                     acbbae28-c6e0-34cb-892d-d1b045ba028e.roa (raw, json)
Hash identifier:          F4OP/K2G9nG9K/NbuMsA0dQbdO8G5Q3gfNoVbABq5PI=
Subject key identifier:   B5:AE:17:8C:99:AA:B8:76:5A:19:B7:3E:4F:9A:06:DA:33:E4:B8:FF
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584A6F207F7DE4CEA56709DE61E0
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/acbbae28-c6e0-34cb-892d-d1b045ba028e.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     15164
IP address blocks:        140.82.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:7f:7d:e4:ce:a5:67:09:de:61:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=996d5f73-76f1-4dff-8fba-b9c63c9f76fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9c:1a:04:a7:67:c1:dc:4c:4c:ba:75:48:f9:
                    6c:1b:df:e7:37:d8:69:5f:6f:72:f8:a9:3d:2f:67:
                    35:54:c2:75:c4:bb:a1:d4:93:88:18:c0:07:a5:29:
                    6c:1f:4d:c2:7d:a3:d4:ce:02:73:52:9d:e4:33:e3:
                    1e:d9:f2:9d:0d:ce:91:fd:11:c8:aa:94:ae:ec:70:
                    de:37:4e:b0:76:e1:c5:b6:b9:40:db:12:3a:c3:56:
                    50:2e:23:67:ca:f6:74:56:80:b6:47:ab:b6:2a:3d:
                    98:6b:b0:4c:b7:dd:2e:fe:0a:ec:06:d9:a5:e8:83:
                    47:b5:68:c7:36:32:bf:da:32:b5:f6:e9:8e:42:31:
                    65:26:a0:c8:cb:98:db:e0:ab:fb:fe:5d:3c:4b:90:
                    e6:7e:30:4f:f7:e6:94:39:99:d4:c3:ce:21:ce:d6:
                    dc:d9:c2:51:fa:09:72:7e:8f:5b:36:99:d6:25:53:
                    55:c5:a0:07:40:99:54:45:fe:e8:63:f4:17:8a:33:
                    0f:0d:86:d5:73:9b:52:0a:00:98:42:0b:8a:89:ff:
                    69:1f:58:ec:4c:da:81:45:72:58:90:4d:c2:68:35:
                    35:a7:cf:38:d2:ff:79:9c:91:8c:5e:e3:26:0b:01:
                    93:a8:02:6e:35:f4:20:32:39:1c:30:8b:1c:66:e5:
                    a2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AE:17:8C:99:AA:B8:76:5A:19:B7:3E:4F:9A:06:DA:33:E4:B8:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/acbbae28-c6e0-34cb-892d-d1b045ba028e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.82.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:de:00:3d:d1:b7:4a:67:7a:be:80:87:22:6a:f2:73:50:79:
         07:5f:98:ee:9c:80:2d:eb:53:db:9d:98:28:41:d4:58:dc:2f:
         79:2b:44:0c:17:f4:d2:a9:6f:5b:b3:e0:e9:f8:88:60:45:51:
         32:9a:68:c8:f1:8d:3c:bd:d5:f4:e7:c3:e9:88:fc:3d:3c:5f:
         d5:85:de:6f:bc:e4:ce:df:59:cf:2c:74:27:61:bc:de:7e:99:
         c1:b1:6a:b5:35:19:d0:a5:c9:62:13:24:6c:05:51:e2:ec:d0:
         52:db:e4:26:12:a9:01:df:36:fb:72:1a:70:bb:c6:09:0f:37:
         be:ef:31:1c:5c:82:48:94:de:dc:9e:eb:3a:c4:9f:dc:dd:75:
         41:a2:d2:1c:33:92:08:25:9a:eb:f1:03:04:53:fd:6b:52:dc:
         53:2c:d5:5d:f9:64:f6:c0:66:e9:1c:5e:e5:01:24:de:c9:72:
         42:46:ee:6f:56:ca:31:59:47:d7:e2:ab:e2:8b:2c:90:d4:d8:
         98:9c:ae:ca:87:5d:e4:15:5f:18:11:3a:d7:e6:b7:ae:3d:aa:
         e0:9a:7a:07:16:d7:2f:a0:d7:7c:a1:81:1a:be:45:e1:f3:91:
         4b:97:5f:6d:b7:10:87:cd:91:d7:ee:5e:09:0d:ec:f6:72:44:
         87:00:05:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:52:11 2025 by rpki-client