Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/d89dc6bf-f760-34a0-9822-7f13629e97e6.roa
File:                     d89dc6bf-f760-34a0-9822-7f13629e97e6.roa (raw, json)
Hash identifier:          yiGUnCOAdt4G+mvQFIQrGYm64u/BMdAGI7PXOpX5b1s=
Subject key identifier:   5C:04:47:3F:CE:88:C6:7E:58:4A:33:17:A8:F3:2E:F9:9C:FA:98:75
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584A6F2076285911020323E0B800
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/d89dc6bf-f760-34a0-9822-7f13629e97e6.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     15164
IP address blocks:        173.244.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:76:28:59:11:02:03:23:e0:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=766ea084-3df7-4ed2-8a03-c89582a0293b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bb:a2:8c:86:cb:28:7b:63:01:67:44:6a:8c:
                    4e:4f:f7:b3:3e:4f:8f:99:d9:3f:c3:97:74:1e:82:
                    c5:83:29:37:fc:70:50:5e:dc:8f:7b:90:d5:75:dc:
                    de:00:a4:a9:c7:4f:d1:ca:37:c5:95:a5:df:fa:91:
                    95:7c:95:a8:db:c5:e4:eb:de:25:80:24:4e:1a:dc:
                    37:f4:07:3a:b2:69:52:3f:b0:83:ae:1f:5c:aa:c2:
                    16:49:f3:91:bf:eb:31:86:23:93:c1:b8:b7:78:45:
                    5b:ba:01:28:7e:2d:91:fc:3d:f1:59:63:fd:60:71:
                    e4:2b:1a:e8:34:d9:2b:3f:75:1d:a6:07:72:86:1e:
                    3e:0b:e4:e2:69:19:14:b7:ef:ba:b3:3d:e4:ec:dc:
                    f4:01:4f:30:c9:b5:6e:dd:77:a8:22:8c:6d:1e:b4:
                    63:ec:9a:5d:ff:4d:e2:57:f1:4c:8a:bf:3c:02:46:
                    24:f0:5c:02:f8:62:d3:cb:50:52:7d:30:54:bc:be:
                    a2:3f:2d:00:f6:42:a1:11:bc:26:82:c2:28:82:f3:
                    b7:6d:61:a0:e1:5c:17:2b:34:ae:f8:98:3d:09:24:
                    fc:28:ac:60:49:39:54:d8:d0:bf:1c:c2:80:40:fe:
                    c5:8a:af:f1:78:03:b5:30:9a:65:c6:c7:b4:39:7a:
                    6f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:04:47:3F:CE:88:C6:7E:58:4A:33:17:A8:F3:2E:F9:9C:FA:98:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/d89dc6bf-f760-34a0-9822-7f13629e97e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:73:61:f9:be:09:0b:96:34:98:fe:aa:fa:72:c0:6e:32:9d:
         8d:8e:e2:b3:c6:2b:f0:1e:e3:1d:bf:fc:55:9b:28:d4:eb:7a:
         6c:37:b3:f2:a8:92:10:e5:a6:d6:3a:c0:29:8e:5a:d5:1d:15:
         4e:3f:49:c4:bf:2b:99:90:51:9b:ec:2b:86:b2:c5:ae:95:f7:
         bd:3f:0e:17:b4:03:13:80:ad:f9:58:43:9a:98:2d:80:fe:ed:
         f9:25:54:97:36:21:6d:1f:55:35:42:d0:88:9c:49:72:08:52:
         23:eb:92:69:6a:9c:7b:e9:79:40:18:54:0f:09:61:21:ef:63:
         09:c9:08:34:de:a4:d1:48:2c:dd:60:d9:ef:89:b6:ab:1a:61:
         75:be:18:49:13:76:78:f3:14:f0:8c:54:f3:b0:dd:cd:1e:93:
         54:06:97:e7:fc:21:6c:ba:fb:c8:4d:f4:4a:0d:e0:cc:70:15:
         e5:e7:7a:3e:aa:08:30:a2:1e:90:47:8b:01:04:de:5f:f5:50:
         c3:a2:8b:5a:06:ae:83:a2:91:6e:18:1d:71:3d:28:85:87:c8:
         37:72:00:ae:ba:bb:38:9e:01:09:78:cf:44:40:61:90:08:ab:
         4f:98:2d:96:cb:44:f5:85:d0:50:a4:9b:76:65:23:4d:4e:77:
         02:2f:01:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:47:11 2025 by rpki-client