Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/bd8e69d9-bece-34c3-a39d-93aeeb1e3dd5.roa
File:                     bd8e69d9-bece-34c3-a39d-93aeeb1e3dd5.roa (raw, json)
Hash identifier:          hNf6dynt0en1aQLo8cD/RPO+oWxDYiZtDhFlFIfNF8o=
Subject key identifier:   09:D7:19:B8:DB:77:62:5E:94:0F:93:93:F1:CD:00:B0:74:75:73:89
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584A6F20812891028BF0FF7D6500
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/bd8e69d9-bece-34c3-a39d-93aeeb1e3dd5.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     15164
IP address blocks:        140.82.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:81:28:91:02:8b:f0:ff:7d:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=d498cf2c-4789-4c59-9955-78103789b16e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f7:f3:5f:a3:76:97:a9:28:59:50:ce:08:56:
                    39:17:21:98:d8:71:ba:be:7d:8c:c2:e2:07:c4:cd:
                    b2:47:95:97:2b:b4:30:81:98:13:57:ef:0c:fe:f7:
                    f6:e5:b0:0a:9b:62:3b:c4:9d:18:16:0b:c1:d1:2d:
                    16:3d:e2:b6:32:5c:37:c4:48:d7:60:67:29:43:8e:
                    ad:fa:99:a5:ce:17:8f:46:e7:d4:25:88:a2:63:80:
                    5e:6d:8e:76:c3:75:94:ef:bf:b7:85:0b:b5:d8:ca:
                    c8:d7:45:88:f5:5c:08:42:8b:19:6e:7b:6a:2d:dc:
                    2e:9f:36:28:57:b3:0c:03:05:d8:90:f8:f8:78:f6:
                    e5:a7:06:8f:1a:3b:d2:90:53:ed:65:c9:a1:20:23:
                    e8:fb:61:27:dd:5e:d6:b1:67:b8:1e:86:d9:b5:58:
                    6f:9d:e2:cb:cd:a8:95:ac:e7:fe:bd:5e:48:c5:1c:
                    8c:3b:ae:f5:41:6e:c9:d4:8a:ef:77:bf:1f:bf:f1:
                    3f:99:79:4d:0a:03:ff:0d:b1:05:7f:b8:26:03:5a:
                    be:07:b4:52:73:c2:12:53:5b:20:ea:0a:25:84:ad:
                    93:c1:64:b9:d1:93:92:d9:21:44:ea:bf:bc:fa:c0:
                    08:1a:e8:8a:d5:a6:8d:7f:7c:3d:e3:7a:33:38:c4:
                    b7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D7:19:B8:DB:77:62:5E:94:0F:93:93:F1:CD:00:B0:74:75:73:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/bd8e69d9-bece-34c3-a39d-93aeeb1e3dd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.82.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:27:7e:d8:59:98:62:cd:11:51:49:b0:dc:89:da:4c:f0:c6:
         42:31:bb:f7:f1:5e:75:40:50:78:fb:df:7e:34:06:b6:67:5f:
         57:81:2d:f7:e3:38:ce:fa:8c:f8:3b:3d:eb:96:7b:60:82:68:
         cf:f4:24:7b:1a:3a:1b:dd:6e:09:58:de:fc:22:d3:ce:30:64:
         eb:d8:94:b7:ae:ac:21:f9:49:61:e9:10:90:6e:43:f8:18:74:
         37:29:47:13:2b:03:b9:d0:3b:3b:6e:e4:af:a3:62:29:82:eb:
         1c:2d:af:fa:95:29:40:96:19:92:1f:0b:fc:f2:9b:f3:4b:09:
         b5:d8:a2:9f:5f:4b:f9:cb:fc:c2:37:fd:aa:66:99:03:80:6e:
         10:92:ad:7c:2e:40:27:80:b5:5a:1e:ca:28:98:e6:f2:0f:ac:
         57:0c:08:fc:a2:b2:1e:cd:92:e9:98:c2:37:ac:93:e6:1e:46:
         11:0a:4c:55:fb:28:47:66:95:6e:a1:18:42:d9:4a:28:20:5d:
         56:ed:7b:58:45:08:ed:ec:54:42:c7:c2:cf:6e:0b:9a:21:f5:
         eb:c7:8c:00:d4:74:8c:c5:48:f9:23:d3:17:ea:63:5f:6d:18:
         9b:81:09:63:8d:a4:de:e2:f8:22:82:bb:f8:e3:66:29:c1:d9:
         dd:56:b4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:17:54 2025 by rpki-client