Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a30db407-116f-3eae-858f-a2a4c84444ed.roa
File:                     a30db407-116f-3eae-858f-a2a4c84444ed.roa (raw, json)
Hash identifier:          CjSUvdX2mZdRkXbyrSqf7DLgy6ORsFvuH62skuWTwE0=
Subject key identifier:   C0:68:4A:B4:A1:BA:58:80:4B:68:EA:F8:6D:C8:B3:A8:2E:24:66:19
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584B44B1B71817E62844EC86A180
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a30db407-116f-3eae-858f-a2a4c84444ed.roa
Signing time:             Sun 21 Sep 2025 13:00:42 +0000
ROA not before:           Sun 21 Sep 2025 13:00:42 +0000
ROA not after:            Sat 20 Dec 2025 14:00:42 +0000
asID:                     15164
IP address blocks:        138.199.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:44:b1:b7:18:17:e6:28:44:ec:86:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Sep 21 13:00:42 2025 GMT
            Not After : Dec 20 14:00:42 2025 GMT
        Subject: CN=f6f397a5-8689-489d-b20e-ce22a55ef6cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:38:a9:64:f4:8c:7c:8c:72:9b:f9:1b:fa:8c:
                    50:ff:01:47:ac:44:a3:15:13:31:51:41:7b:31:44:
                    9e:e3:ae:03:89:fa:9c:73:1d:43:8f:9e:fe:43:a3:
                    98:3d:95:a0:8e:a6:43:5b:56:84:fd:03:3e:72:b9:
                    87:58:95:c9:f2:5e:87:dc:18:59:24:90:12:08:32:
                    97:58:69:a5:59:d8:e5:a1:9f:13:52:bf:c1:d4:71:
                    19:3c:4b:7d:f5:4b:54:e9:31:4e:31:d6:41:b0:80:
                    09:99:36:73:ab:eb:6f:dd:fe:d8:cc:4e:b7:1d:4d:
                    39:f8:bf:54:45:d0:d4:8a:1c:ce:93:34:a6:8a:07:
                    ac:f3:cd:4b:11:ea:35:52:8f:08:b1:41:eb:3d:07:
                    9a:4c:96:26:20:69:9c:4b:4c:8e:a0:44:64:ee:54:
                    73:8b:b0:c3:69:d3:a6:4e:60:8a:2c:75:91:0f:b8:
                    62:63:3c:3f:d0:57:c8:f2:a9:10:3d:f2:74:d7:11:
                    7a:b8:97:ed:2b:ff:a0:46:55:6c:82:43:fb:00:a4:
                    30:4d:3d:fe:be:a6:d8:38:b1:81:8b:63:17:d4:f8:
                    1d:6a:57:50:53:56:7f:bd:e8:e4:a5:cc:5f:8d:68:
                    b3:12:6e:25:2e:7a:de:ac:92:f1:ae:8d:7d:32:81:
                    bf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:68:4A:B4:A1:BA:58:80:4B:68:EA:F8:6D:C8:B3:A8:2E:24:66:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a30db407-116f-3eae-858f-a2a4c84444ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.199.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:c6:3b:3f:e2:4a:df:c4:b2:71:57:c6:a3:53:44:5d:08:66:
         e0:f1:d5:fc:96:e2:82:cd:49:13:55:f3:a3:b7:c7:ec:a7:be:
         42:0b:46:7a:df:aa:01:52:c7:b3:7a:9a:ed:4b:b5:0e:ee:99:
         58:65:cf:c6:4e:4b:11:75:7a:80:b0:ed:56:e1:d9:a4:d4:20:
         78:f3:b6:d2:d3:00:b4:32:58:48:67:05:d8:f8:99:da:42:a8:
         b5:34:db:0b:a0:36:82:5c:f4:6d:ff:9e:20:2d:63:c5:24:de:
         41:e0:38:de:af:eb:41:16:7b:3a:ca:8f:a9:08:69:38:cf:3e:
         29:48:d4:97:95:1f:1e:f2:f4:72:e5:a4:87:26:38:da:95:a9:
         0e:6f:23:31:b4:a4:b0:9a:69:11:74:b0:77:04:cf:8a:1b:ed:
         a5:ef:7e:e3:7e:45:84:35:86:1a:f9:09:d4:90:df:1a:f8:3f:
         1f:47:15:7f:63:87:fd:dc:78:3e:4c:fb:94:28:eb:a0:5d:70:
         a2:30:03:60:ed:3f:45:7e:70:63:3d:b8:53:59:5d:b0:88:7e:
         34:44:82:e0:60:80:86:52:0e:f1:c9:10:bc:a6:e3:e7:4e:36:
         80:c5:07:c4:99:27:09:10:c7:df:61:a9:df:15:c0:cc:98:55:
         0c:e5:b2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 11:11:33 2025 by rpki-client