Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ae5d7b83-4b48-33b2-a0c2-ab030b3473f1.roa
File:                     ae5d7b83-4b48-33b2-a0c2-ab030b3473f1.roa (raw, json)
Hash identifier:          LlGknLLNT1LUY3Xt7odyv51wV7SrqcUZZ4DUyRg34Ow=
Subject key identifier:   BF:47:AF:87:26:12:C7:6C:33:47:32:5B:55:06:68:0F:BA:8F:8F:BD
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F43285848A488B69E07DCF21C8D624A40
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ae5d7b83-4b48-33b2-a0c2-ab030b3473f1.roa
Signing time:             Thu 23 Jan 2025 18:34:55 +0000
ROA not before:           Thu 23 Jan 2025 18:34:55 +0000
ROA not after:            Wed 23 Apr 2025 17:34:55 +0000
asID:                     15164
IP address blocks:        138.199.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:88:b6:9e:07:dc:f2:1c:8d:62:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jan 23 18:34:55 2025 GMT
            Not After : Apr 23 17:34:55 2025 GMT
        Subject: CN=265bb72d-d0e3-462e-b216-7e865614ed40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:10:33:5f:30:80:b2:13:6a:b3:dc:2d:5e:74:
                    38:42:b2:4b:b9:0d:30:fd:ca:e8:a8:06:c5:93:26:
                    8c:10:95:96:0b:5f:38:26:55:9b:22:a1:20:35:eb:
                    3d:36:bb:3a:fb:47:2c:c9:82:8a:d6:fb:39:09:42:
                    e8:eb:07:b5:b2:91:2c:24:fe:c3:95:62:25:43:37:
                    e0:80:e4:63:7e:ba:8e:e9:9e:8d:52:73:44:53:30:
                    b8:fe:c6:d0:a4:a6:d0:d5:78:db:0a:17:c7:cb:72:
                    be:77:1c:2b:ad:17:ab:4f:7e:77:df:1b:33:62:ad:
                    8d:88:8a:23:9b:6a:42:51:1b:e5:a4:72:d7:09:56:
                    52:3a:54:20:9d:3f:1e:86:af:b5:8f:ac:f1:d3:af:
                    93:6c:6d:10:5d:f8:87:1b:c4:08:66:68:a8:d1:63:
                    20:bd:18:9f:d1:44:c6:a9:c7:5d:45:3a:d4:d7:f3:
                    c0:d3:6a:c1:3d:99:f0:2a:82:50:1e:2b:4a:3d:b2:
                    c8:a9:68:56:a4:04:95:86:4d:d1:c4:fd:9a:96:3b:
                    08:53:32:38:56:15:1d:79:68:d9:6b:4b:af:36:07:
                    a9:81:6f:7d:56:60:ab:0c:8c:16:0f:38:6d:20:3f:
                    3f:1c:42:4d:99:58:67:a3:e8:0a:5a:9f:f4:26:e4:
                    06:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:47:AF:87:26:12:C7:6C:33:47:32:5B:55:06:68:0F:BA:8F:8F:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ae5d7b83-4b48-33b2-a0c2-ab030b3473f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.199.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ab:d3:54:b7:d2:dd:6a:3b:2a:fd:ab:47:47:33:29:f4:52:
         82:0f:83:5b:e8:d6:62:dd:d3:4d:10:fe:69:28:6b:6f:97:04:
         b5:36:0d:b4:ac:76:20:bf:98:eb:28:23:bf:de:ea:8f:ab:2f:
         72:38:ab:d6:c4:c9:4b:75:70:39:78:84:83:ee:c4:08:a6:79:
         ab:77:26:6a:93:ca:47:c1:5c:c6:0c:d5:b5:16:85:85:a0:7d:
         50:4f:c9:cf:9d:6f:4b:5a:0b:84:1b:17:13:05:f7:96:17:38:
         a9:3f:46:d9:4e:43:90:b3:0e:47:29:2e:c3:d5:b0:29:f3:b3:
         b7:89:66:80:b9:77:c5:b1:8d:28:f3:f3:70:a4:48:fd:14:92:
         2a:eb:5b:9b:dd:48:bb:49:0d:52:f1:63:09:35:3f:07:33:89:
         62:a9:35:6c:3a:7c:ca:64:9b:06:97:73:dc:97:25:e3:dd:00:
         0d:81:75:36:2f:0d:cd:e1:71:d2:da:01:7b:c7:15:84:33:c5:
         c2:e7:5d:2d:65:ff:1a:a5:78:5d:ea:33:bf:72:24:f9:c6:29:
         b5:8a:8f:be:a0:df:21:83:98:83:af:76:94:38:41:5a:db:99:
         44:dd:1a:36:ba:b9:41:7f:d3:02:01:0e:f9:82:2b:e7:12:1a:
         5a:1e:c3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:33 2025 by rpki-client