Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/88476c92-36a6-3bfd-a6c6-7654261976ee.roa
File:                     88476c92-36a6-3bfd-a6c6-7654261976ee.roa (raw, json)
Hash identifier:          X4m4T+KAzepCF2+euoIaCWH/6WbjL9S9g8eQSJvr8Pk=
Subject key identifier:   39:E7:BD:8B:65:1D:30:D1:F1:44:59:A5:92:0A:A3:4F:26:6D:4B:95
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584B4FDC728F19D2EDAA05BA0800
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/88476c92-36a6-3bfd-a6c6-7654261976ee.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     15164
IP address blocks:        140.82.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:72:8f:19:d2:ed:aa:05:ba:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=81a2616b-e4cf-4770-b9e8-3d11649dbad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7d:f5:8f:95:57:58:dc:49:26:e4:c8:56:2e:
                    23:e6:9f:8f:44:51:6c:d6:58:e5:30:50:72:7d:7e:
                    ec:f9:cc:c9:cf:12:ef:f5:3e:95:dc:e6:da:f2:8d:
                    29:24:ce:da:e6:92:51:d1:6c:10:4a:16:2d:93:f1:
                    ba:6d:ec:8e:99:a7:1c:12:93:c3:76:e2:76:26:43:
                    b9:81:76:6f:12:7b:ec:8b:73:48:86:df:1a:76:63:
                    86:e0:19:7d:d4:a4:a5:41:0b:a0:76:7f:cc:57:1d:
                    52:83:6a:d2:cc:65:6a:59:fa:51:34:f1:f9:80:b6:
                    c3:8c:bd:50:36:b0:af:68:24:49:71:30:74:1e:1f:
                    99:d6:1f:cb:db:57:09:c6:fb:06:2e:da:db:88:53:
                    c8:d1:b1:2b:aa:4b:ad:e6:89:a9:3f:27:99:62:63:
                    e2:ab:fb:73:1b:cf:f3:bc:85:28:0d:45:7e:f5:b0:
                    23:d6:91:b5:e4:64:c4:7b:d4:11:61:92:9c:8d:cb:
                    79:bb:f5:e3:0b:9f:39:5e:03:af:25:14:0a:ea:46:
                    20:6e:ce:f9:4e:a9:47:c6:4f:9c:8c:ab:59:55:aa:
                    6f:e5:97:4a:a3:36:96:5f:a8:03:98:5d:31:03:4e:
                    2c:eb:c4:82:d7:dc:a7:88:7d:a4:79:02:20:e6:34:
                    a7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E7:BD:8B:65:1D:30:D1:F1:44:59:A5:92:0A:A3:4F:26:6D:4B:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/88476c92-36a6-3bfd-a6c6-7654261976ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.82.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:8d:7d:d6:8f:fe:b8:25:8b:f2:39:03:d8:94:ab:58:67:37:
         ad:d1:e9:e4:98:78:50:28:a6:18:8f:99:52:db:7c:55:1b:bc:
         ad:bf:e9:6f:c8:99:da:d9:11:11:63:71:e9:31:13:06:32:d4:
         75:82:e6:57:d3:27:7a:df:09:8d:6e:40:73:24:35:00:fc:71:
         6f:fb:3c:c1:4f:24:eb:d6:4b:2a:2e:0f:b9:b1:06:81:c2:30:
         0a:47:c1:5f:5c:7e:76:73:b0:70:01:42:7b:c1:f5:03:17:c4:
         e6:da:4f:b4:d6:9c:d2:6c:97:bb:8a:38:13:4f:c2:35:3c:be:
         e5:85:d4:07:64:a6:ec:d5:7e:d5:b6:07:51:9a:2c:2d:d8:b8:
         35:9d:e2:a1:3a:54:b7:1e:1b:cb:1e:0a:66:c8:49:51:1b:a7:
         88:92:ef:93:fa:98:67:2d:24:b5:62:c9:e0:b5:79:18:cb:b0:
         2e:a0:35:12:71:a9:ef:8d:bb:3b:7c:2e:0f:f3:ad:9b:f0:61:
         07:1b:8b:ab:aa:49:05:3f:a8:df:cc:f1:09:90:f1:4e:2d:3f:
         c5:b3:35:77:75:5b:95:a0:26:87:ee:f4:f0:90:cb:de:db:35:
         db:fd:0c:a8:ea:43:83:ee:84:c8:15:02:31:73:6b:f9:38:5c:
         60:42:e8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 11:15:30 2025 by rpki-client