Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/35189265-9445-3c2e-8f70-424cb23562b3.roa
File:                     35189265-9445-3c2e-8f70-424cb23562b3.roa (raw, json)
Hash identifier:          iiPSKg4zdYn05VuvxiLaQWYOQzrw/6VHwmStrU9UXEk=
Subject key identifier:   88:C5:71:23:C9:EC:57:C1:66:51:05:B7:83:40:63:F5:66:43:D7:62
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F432858498FC9B2D23D8DECF4B0E80300
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/35189265-9445-3c2e-8f70-424cb23562b3.roa
Signing time:             Fri 18 Apr 2025 01:00:47 +0000
ROA not before:           Fri 18 Apr 2025 01:00:47 +0000
ROA not after:            Thu 17 Jul 2025 01:00:47 +0000
asID:                     15164
IP address blocks:        140.82.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:c9:b2:d2:3d:8d:ec:f4:b0:e8:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Apr 18 01:00:47 2025 GMT
            Not After : Jul 17 01:00:47 2025 GMT
        Subject: CN=24b9ed26-215a-4ab5-af8d-11a472b804b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:06:91:eb:da:9f:7e:96:03:ee:2f:79:77:72:
                    bc:a9:32:4c:db:29:95:50:01:1a:a2:c6:55:5f:3b:
                    75:4b:ce:0c:12:6f:d4:6a:eb:39:81:ce:c8:61:1d:
                    1a:37:3a:35:dc:6c:a1:e5:e3:bc:4b:8f:94:67:44:
                    36:dd:43:ea:d0:86:36:4b:ad:93:60:5e:6f:f2:a6:
                    38:0f:5a:4e:86:fa:29:6a:3f:dd:ee:6a:9c:fa:a1:
                    c9:95:81:0b:50:a4:65:fa:5c:87:0c:8c:19:cb:1d:
                    19:ac:eb:e7:40:8f:5c:a6:13:bf:4b:d7:e1:7f:5d:
                    05:a9:5f:d6:b4:b7:2d:17:40:83:cf:47:f3:2a:7f:
                    5e:2b:f4:dd:45:de:88:3f:c6:5a:11:9e:63:6d:aa:
                    0a:d9:fb:97:ee:6f:a7:ef:af:51:c0:f8:a1:92:bd:
                    1f:f0:03:2d:11:48:4f:39:c7:b7:52:9b:f1:5a:c1:
                    3d:13:3c:f0:f1:35:de:a0:a7:38:53:f8:f8:b4:7a:
                    b8:24:03:f3:b0:ca:dc:64:ce:bc:d1:71:a8:9e:d5:
                    08:57:1b:f1:fc:18:0b:b6:82:93:bd:19:74:1d:7c:
                    0d:ba:2f:02:6f:65:55:8f:db:f0:33:bd:09:05:df:
                    22:36:3c:d6:12:f9:d5:69:36:a9:82:8e:4c:b7:ae:
                    3e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C5:71:23:C9:EC:57:C1:66:51:05:B7:83:40:63:F5:66:43:D7:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/35189265-9445-3c2e-8f70-424cb23562b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.82.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:86:7c:37:75:06:05:c5:cd:1a:9c:a1:c9:74:a2:bd:46:f9:
         c7:43:9e:eb:1e:1a:77:a1:e8:d4:67:34:d8:df:dd:f6:90:19:
         9d:4a:70:41:11:8b:8a:97:7f:76:50:2b:bd:ee:11:c8:d6:d3:
         35:50:5b:c3:6e:3b:a0:80:2a:63:75:51:09:2e:ba:61:e5:f0:
         a5:46:34:8e:64:25:cf:d8:a0:53:a6:5c:bd:1b:04:c8:21:1a:
         4f:c1:d8:95:ed:d3:5b:5a:07:57:1c:07:c1:b8:d5:a6:bb:6f:
         be:ac:6f:73:bf:59:bd:13:2b:25:51:68:d1:0a:20:e6:17:0f:
         6d:f5:43:eb:b8:4b:98:e8:2b:1c:16:3f:10:45:9a:35:79:39:
         72:b8:bb:51:3e:41:5b:4c:9f:cb:c6:16:45:29:f8:9e:9f:26:
         83:3e:7e:f3:15:e9:87:ac:6b:0b:4d:1d:2b:ec:8e:98:c4:74:
         a6:e6:b1:83:67:0c:ae:2e:88:57:13:cd:9c:89:19:69:ed:f4:
         66:20:54:ad:1e:49:00:e8:40:75:b9:c7:3c:ee:16:a1:cf:8f:
         a3:0b:07:65:f5:ed:79:f4:2e:77:98:0f:e5:28:d5:81:ad:f2:
         1c:c6:e7:f4:49:ca:97:c1:e0:4b:1e:bd:73:af:68:50:04:c9:
         12:23:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:53:33 2025 by rpki-client