Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/eea08d9f-303a-3b6d-8490-f09157849fd5.roa
File:                     eea08d9f-303a-3b6d-8490-f09157849fd5.roa (raw, json)
Hash identifier:          BTq3g5WWASHxAKGRXVx5rmoqeyQSPyC1UH9WtHi2tv8=
Subject key identifier:   4B:F4:FD:E2:EC:FF:3A:6D:F7:1B:D3:8D:A5:CE:85:20:30:95:61:C0
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584B44B1B5A29A401052AB427200
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/eea08d9f-303a-3b6d-8490-f09157849fd5.roa
Signing time:             Sun 21 Sep 2025 13:00:42 +0000
ROA not before:           Sun 21 Sep 2025 13:00:42 +0000
ROA not after:            Sat 20 Dec 2025 14:00:42 +0000
asID:                     15164
IP address blocks:        138.199.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:44:b1:b5:a2:9a:40:10:52:ab:42:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Sep 21 13:00:42 2025 GMT
            Not After : Dec 20 14:00:42 2025 GMT
        Subject: CN=c1e86957-ee96-4e80-a361-4c0c87b527d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4a:a7:08:6b:d5:27:44:0f:f0:a4:24:83:c0:
                    cd:07:1f:ed:8c:25:ed:0e:39:ba:b3:73:ff:db:3f:
                    36:7a:1a:f0:e9:5c:28:eb:7c:05:ed:95:a0:5a:87:
                    a1:db:31:7f:93:65:68:bb:3b:cf:83:97:b8:87:0a:
                    aa:31:a8:0c:fb:ee:51:5b:eb:51:b3:4a:d0:e6:81:
                    d5:df:ec:75:f1:4e:6a:34:54:c9:3d:00:0d:1d:82:
                    91:5d:d6:1e:fd:a3:f0:65:6e:93:a2:6f:2b:29:b7:
                    00:d1:10:a4:a2:12:fb:a6:d1:0c:0f:7e:9a:e3:79:
                    f8:97:de:e3:88:ed:ec:59:66:9c:61:4e:2b:fa:fb:
                    90:24:f1:8a:47:ac:5e:4e:da:d5:47:f2:dc:94:d9:
                    7f:5d:d2:d9:6f:75:99:2b:47:86:f4:2c:cb:eb:69:
                    e0:0b:cf:62:03:3a:4b:67:4c:3c:98:3d:84:c9:eb:
                    e3:00:54:4e:13:6d:dc:d0:bf:eb:82:43:a1:56:bb:
                    cb:25:52:37:a9:d1:11:58:9e:bb:71:d1:a7:ac:b8:
                    07:b2:b3:02:0e:3f:ca:9c:1f:ce:da:f9:32:b4:97:
                    40:ff:bc:57:63:e0:db:0f:cf:4e:23:97:74:15:f4:
                    49:7c:7b:b5:b4:46:4a:14:18:6c:13:fb:ca:0d:9b:
                    d0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F4:FD:E2:EC:FF:3A:6D:F7:1B:D3:8D:A5:CE:85:20:30:95:61:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/eea08d9f-303a-3b6d-8490-f09157849fd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.199.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:a1:a8:2c:1f:13:a6:99:81:05:68:91:bf:4d:7f:3d:1d:c0:
         03:61:78:d4:77:75:31:12:47:75:ab:c2:21:87:42:ae:af:35:
         0e:8c:4f:ab:f3:89:8e:85:1d:d4:08:6b:7b:fb:60:8b:6a:54:
         ac:9d:a2:03:10:83:1a:ee:ce:00:a7:23:81:3d:9e:f2:be:bf:
         90:4f:3c:64:41:d5:87:b9:c1:2d:10:24:72:64:f3:02:3f:50:
         3d:54:19:60:7c:aa:2e:30:d4:16:85:3b:61:9b:68:c0:95:54:
         a8:ae:fc:77:12:4b:d8:98:8b:77:e0:82:e2:85:ea:84:cc:50:
         f3:5f:28:40:b0:e8:21:11:ae:06:1f:21:ca:f0:9b:68:21:8d:
         73:a6:a7:15:64:f6:f0:6e:0d:5f:32:20:e5:2c:cd:ed:1d:9a:
         d5:e3:a2:10:48:de:01:c7:c8:70:06:d6:37:04:7c:e3:53:12:
         97:a0:95:5e:94:79:03:1e:c2:98:f9:5e:1c:b7:99:f0:21:0f:
         c6:63:7e:dd:7e:b9:7c:60:14:c6:c4:51:ff:8c:3d:ba:27:09:
         66:a2:ea:1f:d8:27:1b:20:76:cc:84:2c:2e:05:08:32:d9:be:
         9c:ea:ff:31:6b:ec:18:0e:d4:a7:df:64:ea:a8:43:e3:12:50:
         11:b0:c5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 11:11:34 2025 by rpki-client