Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/07616ced-0504-3b41-84fc-172bb80378f5.roa
File:                     07616ced-0504-3b41-84fc-172bb80378f5.roa (raw, json)
Hash identifier:          U2iBSDheynpUTCQlePAlpdsWGj3PrRo5SrJibc2k/10=
Subject key identifier:   E6:72:D1:A8:07:82:D3:D8:19:51:5D:A3:A3:D0:44:2E:07:9A:E7:E2
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584B44B1C1456CDCA385912F0C40
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/07616ced-0504-3b41-84fc-172bb80378f5.roa
Signing time:             Sun 21 Sep 2025 13:00:42 +0000
ROA not before:           Sun 21 Sep 2025 13:00:42 +0000
ROA not after:            Sat 20 Dec 2025 14:00:42 +0000
asID:                     15164
IP address blocks:        138.199.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:44:b1:c1:45:6c:dc:a3:85:91:2f:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Sep 21 13:00:42 2025 GMT
            Not After : Dec 20 14:00:42 2025 GMT
        Subject: CN=e230e79b-6792-4f32-a59a-fbf0b38018f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:28:46:2a:e8:d8:e6:3f:fa:dd:d1:dd:6b:ff:
                    38:94:db:41:f2:cd:b9:1c:dd:27:7f:9d:16:bb:3f:
                    cc:d0:ec:06:12:90:1c:62:1a:cb:be:d3:be:2c:e5:
                    de:97:94:12:8d:66:f8:03:49:9e:7f:5b:89:1b:a0:
                    65:d1:c9:54:88:1b:6d:c8:22:59:aa:bd:f4:57:03:
                    73:73:65:a6:11:cb:f0:94:a6:b0:98:51:21:fd:2c:
                    91:57:59:7c:e5:05:50:ac:bf:9a:b4:4e:9c:ba:b8:
                    3c:8c:7e:d8:e4:13:4e:e8:8c:27:99:03:bb:7e:e0:
                    04:bf:eb:91:95:e8:3a:67:7c:83:97:d2:72:6b:b9:
                    e2:d0:8f:c7:29:59:f1:9e:be:68:8c:79:ba:90:f8:
                    fc:91:20:09:64:49:9b:de:3e:aa:38:d2:61:b4:c5:
                    b4:8e:ae:50:90:64:ab:54:09:db:67:88:f0:22:77:
                    3f:b3:f5:fd:90:60:c3:d9:1c:54:49:07:fb:19:cb:
                    be:26:84:f3:cc:98:30:1c:f8:2a:c8:44:b1:6b:f1:
                    be:86:7e:23:8e:0b:97:b7:5b:60:aa:f6:8e:e8:14:
                    8b:bf:ba:37:32:82:bc:a2:a8:19:45:d6:76:fb:47:
                    60:2f:c0:4b:90:8f:17:22:0c:99:91:9e:94:53:67:
                    92:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:72:D1:A8:07:82:D3:D8:19:51:5D:A3:A3:D0:44:2E:07:9A:E7:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/07616ced-0504-3b41-84fc-172bb80378f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.199.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:94:2b:97:38:65:d6:3e:34:b7:8e:f9:ae:49:19:aa:44:3f:
         72:1f:0f:28:d2:82:c7:da:8e:51:bc:ce:c2:5d:da:2e:fb:a8:
         26:28:c7:e7:80:2c:34:6e:1d:1e:a4:9c:1a:e5:87:1c:19:3e:
         18:90:bf:95:2b:a9:11:b2:37:48:db:9b:10:9b:8a:32:65:79:
         da:9b:33:92:eb:b6:a9:e9:47:b8:c4:4e:ea:06:3d:c2:df:07:
         f8:7f:83:ef:88:ab:66:a1:d0:67:04:e5:6f:95:eb:32:61:fb:
         2b:7a:5d:dc:95:b2:de:5c:53:74:4e:ff:ef:28:d2:dc:e7:63:
         ba:2d:85:d3:22:ac:f0:13:98:e3:f8:24:bd:03:0d:3a:2f:29:
         a6:ba:0a:39:bf:09:64:e3:92:d5:f5:fb:9e:3b:47:79:98:77:
         61:2f:49:d5:10:f9:cc:25:8d:17:59:bc:4b:e4:cd:f3:67:7c:
         03:3e:67:47:9e:79:45:cf:08:07:43:1d:d1:db:45:99:2c:a9:
         b9:b4:88:51:f9:fe:f1:52:17:e4:98:32:bf:0b:12:4c:4e:a2:
         5a:cb:7d:1f:d9:af:2f:21:20:66:71:27:16:ca:0d:53:54:8a:
         ab:b9:b2:f4:e1:88:d5:d3:d8:59:6d:bd:51:99:2e:e8:61:ed:
         a1:7b:d6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 11:15:29 2025 by rpki-client