Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/34af5eb6-f03b-3ebd-bcc1-9c4e3010903a.roa
File:                     34af5eb6-f03b-3ebd-bcc1-9c4e3010903a.roa (raw, json)
Hash identifier:          ZAjdB2XsGmkNUQPUOvlL7DyKbjFo5KVJRqXmS2sMSvM=
Subject key identifier:   99:96:5A:41:50:D5:72:C1:E8:A7:39:5A:78:72:E2:DC:71:BC:6D:6E
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584A6F20818BC5695D8C7319F400
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/34af5eb6-f03b-3ebd-bcc1-9c4e3010903a.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     15164
IP address blocks:        173.244.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:81:8b:c5:69:5d:8c:73:19:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=78fbb91d-05f6-4699-87dc-d89ee618ffe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:b8:40:c6:d5:c1:95:2d:56:06:52:72:a6:
                    98:8a:e3:06:41:0d:ee:0f:9d:aa:69:23:e8:3b:dd:
                    ec:92:2a:cf:ca:1a:57:80:f5:84:1e:dd:88:57:4a:
                    7b:7f:54:2a:6f:1c:2c:c7:23:ae:71:af:b1:f6:54:
                    21:24:be:ae:30:c7:18:db:a6:55:50:85:b4:0a:69:
                    31:f1:fe:a8:bd:be:c0:a3:25:4d:f1:1e:5c:89:75:
                    2b:fc:f4:d4:3c:ea:c6:68:8e:4f:17:70:4d:05:7b:
                    e5:01:a6:34:45:8e:f4:a0:82:9a:42:c6:11:76:81:
                    be:ec:8b:23:a9:f0:ed:a7:5f:04:97:0d:29:8d:35:
                    9c:70:a2:cf:c2:28:5e:c9:57:28:0f:30:10:35:83:
                    cd:c4:27:9e:c4:43:48:b9:96:73:57:14:f4:69:aa:
                    51:13:8e:f2:57:e4:59:a0:14:bc:9b:6f:5b:58:74:
                    d0:5e:97:21:6a:3b:75:e0:96:d4:36:d9:a4:f0:51:
                    7c:72:fc:0e:25:e1:ca:18:65:d4:6a:37:a2:98:b5:
                    b4:5b:9a:81:e9:44:0b:9a:3a:7a:cd:0a:28:64:cb:
                    dc:98:52:da:7e:0b:8b:96:17:6b:1c:29:23:8a:95:
                    bb:63:e2:be:d1:0c:3d:90:cf:07:92:8c:ba:fb:cc:
                    3b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:96:5A:41:50:D5:72:C1:E8:A7:39:5A:78:72:E2:DC:71:BC:6D:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/34af5eb6-f03b-3ebd-bcc1-9c4e3010903a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:70:03:c8:d3:0b:61:d5:45:5d:6c:8f:cd:28:d5:fd:ec:da:
         80:b3:b7:63:bd:1c:61:d5:cc:c7:37:63:6d:b1:ad:8f:d8:a6:
         86:da:7b:ba:16:2d:fd:36:0d:43:5e:29:c3:4d:1f:6d:f2:e2:
         ef:2c:bc:80:58:bc:0a:5c:9e:b2:8f:34:f4:d6:ec:65:94:81:
         e1:36:52:bd:a4:2f:f7:d6:6f:ed:0a:22:6a:4a:93:59:c6:7a:
         3b:f9:aa:c8:ae:d7:38:7b:58:e3:58:f2:02:ff:86:28:6d:35:
         6d:0c:98:bf:66:60:8c:de:99:bb:34:d6:37:5d:7e:c9:f8:ff:
         b3:84:f8:0e:54:d4:d9:aa:61:39:82:81:92:96:07:62:92:4e:
         a2:47:35:7b:64:17:e7:5c:67:02:8c:78:85:a6:75:9c:0f:7f:
         68:32:83:bf:f1:cf:df:03:ff:98:54:b0:df:66:06:85:47:ac:
         60:1c:c7:91:58:2a:28:47:a7:21:56:eb:f5:f4:b9:cf:26:b0:
         4e:8e:0f:42:6e:1b:25:2a:c8:bd:47:b1:25:c1:a0:b0:69:b0:
         53:d3:25:cb:5b:f3:08:5e:d0:02:8f:e3:d4:0c:f5:67:de:42:
         7a:21:ed:11:ad:ca:a7:10:58:6b:7f:88:62:a0:a7:3c:1c:6c:
         7d:ba:ec:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpvIIGLxWldjHMZ9AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk
NzhmYmI5MWQtMDVmNi00Njk5LTg3ZGMtZDg5ZWU2MThmZmU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM24QMbVwZUtVgZScqaYiuMGQQ3uD52qaSPo
O93skirPyhpXgPWEHt2IV0p7f1QqbxwsxyOuca+x9lQhJL6uMMcY26ZVUIW0Cmkx
8f6ovb7AoyVN8R5ciXUr/PTUPOrGaI5PF3BNBXvlAaY0RY70oIKaQsYRdoG+7Isj
qfDtp18Elw0pjTWccKLPwiheyVcoDzAQNYPNxCeexENIuZZzVxT0aapRE47yV+RZ
oBS8m29bWHTQXpchajt14JbUNtmk8FF8cvwOJeHKGGXUajeimLW0W5qB6UQLmjp6
zQooZMvcmFLafguLlhdrHCkjipW7Y+K+0Qw9kM8Hkoy6+8w7VwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJmWWkFQ1XLB6Kc5Wnhy4txxvG1uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMzRhZjVlYjYtZjAzYi0z
ZWJkLWJjYzEtOWM0ZTMwMTA5MDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfSIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJJwA8jTC2HVRV1sj80o1f3s2oCzt2O9HGHVzMc3Y22xrY/Ypobae7oW
Lf02DUNeKcNNH23y4u8svIBYvApcnrKPNPTW7GWUgeE2Ur2kL/fWb+0KImpKk1nG
ejv5qsiu1zh7WONY8gL/hihtNW0MmL9mYIzembs01jddfsn4/7OE+A5U1NmqYTmC
gZKWB2KSTqJHNXtkF+dcZwKMeIWmdZwPf2gyg7/xz98D/5hUsN9mBoVHrGAcx5FY
KihHpyFW6/X0uc8msE6OD0JuGyUqyL1HsSXBoLBpsFPTJctb8whe0AKP49QM9Wfe
Qnoh7RGtyqcQWGt/iGKgpzwcbH267GM=
-----END CERTIFICATE-----
Generated at Thu Aug 21 07:21:30 2025 by rpki-client