Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1fce5c58-9701-337a-ba1b-8f77ff17d0d6.roa
File:                     1fce5c58-9701-337a-ba1b-8f77ff17d0d6.roa (raw, json)
Hash identifier:          WYtGIbcvhkCBQtNgsUsaXRoxt6QQJgldfi47SML/Mo0=
Subject key identifier:   9F:BF:7F:4D:D2:7C:F4:0D:1A:24:3D:E0:6B:8F:22:65:E7:A8:59:87
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584B4FDC6E229DE1E1FBF97EFF00
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1fce5c58-9701-337a-ba1b-8f77ff17d0d6.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     15164
IP address blocks:        173.244.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:6e:22:9d:e1:e1:fb:f9:7e:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=fe630231-ca7c-4103-bb4a-8006a6bb050d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:99:cd:ce:cf:34:ab:ba:0b:26:3c:3c:07:27:
                    ec:79:c8:79:bd:43:36:f5:fc:16:91:e6:f5:a5:ba:
                    dc:23:86:00:77:cf:4b:81:41:4a:6b:78:82:85:72:
                    49:61:cf:0a:3d:5a:59:9a:92:2b:21:50:ac:de:c2:
                    f6:44:62:e7:63:56:9e:16:28:08:7e:45:06:33:66:
                    f0:8b:95:b1:d9:10:ea:db:d1:f4:e8:aa:12:f5:71:
                    0b:62:98:da:af:5a:f5:c8:e8:a1:17:6d:e0:0b:50:
                    75:8e:db:d1:ee:eb:ad:3f:57:15:8f:fe:fd:13:4d:
                    bf:6f:45:7d:17:ce:a4:86:ab:12:ef:63:60:ee:b6:
                    c7:07:7d:5f:cf:7e:92:36:ff:b0:8c:80:16:c6:1e:
                    8b:2c:e6:3f:b3:58:a4:3a:8c:c8:cc:16:a5:28:ed:
                    da:96:f3:cb:15:92:9d:e0:2a:a4:15:88:9f:b5:43:
                    d7:93:a9:d5:a8:1e:be:06:27:b1:2f:9f:f1:53:35:
                    2d:b7:76:6b:9f:5e:34:b7:99:bd:f7:50:fe:73:80:
                    a4:d2:02:67:ca:22:6b:b2:6f:82:aa:dc:d1:d3:26:
                    d2:6d:12:67:49:00:11:ff:8a:6d:d4:0d:94:e4:07:
                    1d:ea:5c:7e:a1:08:54:97:7f:49:83:b8:81:31:35:
                    e8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BF:7F:4D:D2:7C:F4:0D:1A:24:3D:E0:6B:8F:22:65:E7:A8:59:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1fce5c58-9701-337a-ba1b-8f77ff17d0d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:56:b9:ad:d3:ad:2a:18:ed:6e:8f:d9:38:90:c4:9d:41:f9:
         c4:9b:43:d8:a4:b7:f6:de:87:17:de:f1:19:49:b2:72:7f:86:
         75:05:30:cc:85:c9:69:e6:8a:26:ce:a2:c1:da:13:26:ee:f0:
         e9:1b:b9:aa:09:7d:35:aa:cc:21:04:a9:92:c5:43:8b:3b:d0:
         00:ff:b1:95:93:cb:a1:bf:49:33:d3:7d:e1:5a:b3:fd:60:5a:
         94:bb:df:da:44:01:46:d7:77:a5:a3:43:fe:5e:be:f4:6b:de:
         ac:41:48:b8:82:ec:eb:e8:f8:73:e0:fa:c9:18:17:74:7e:a8:
         80:da:0e:4b:23:2c:75:28:9b:1d:bb:fe:dd:8b:3a:61:a8:e5:
         2c:3d:a0:95:8a:c9:ba:fc:13:4d:0c:05:ae:56:e7:4b:ee:4c:
         d1:f3:cc:81:31:0a:c2:d5:05:bf:8a:65:11:e4:6b:66:69:e4:
         08:8b:99:51:43:54:95:b9:7f:57:bc:4f:b5:18:14:b0:5a:77:
         e1:b9:94:46:90:37:61:ef:8e:0e:c6:32:69:2a:e3:3d:31:b8:
         44:ac:b3:2e:16:a4:50:fa:2f:9b:e5:7a:c9:bc:87:ce:ce:00:
         8e:0b:3f:e8:19:ef:9e:6c:3a:f9:10:e5:5b:01:1f:ff:00:c3:
         9b:3f:3a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 11:11:17 2025 by rpki-client