Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/96e482ab-646e-3f95-b350-c845e7eb8987.roa
File:                     96e482ab-646e-3f95-b350-c845e7eb8987.roa (raw, json)
Hash identifier:          0mq+dpAgxDfG1A8sGRrQypvNVv2zhY8jQinCM3jDpSs=
Subject key identifier:   C9:45:31:FA:29:AD:7E:54:FC:28:76:42:78:ED:91:FC:59:C6:73:D7
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F432858498FC9B554A18A855172D19EC0
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/96e482ab-646e-3f95-b350-c845e7eb8987.roa
Signing time:             Fri 18 Apr 2025 01:00:47 +0000
ROA not before:           Fri 18 Apr 2025 01:00:47 +0000
ROA not after:            Thu 17 Jul 2025 01:00:47 +0000
asID:                     15164
IP address blocks:        147.136.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:c9:b5:54:a1:8a:85:51:72:d1:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Apr 18 01:00:47 2025 GMT
            Not After : Jul 17 01:00:47 2025 GMT
        Subject: CN=3b31c24c-06a5-4737-9ff5-3e7b66db6803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1b:ac:6d:af:db:5a:49:c3:d6:e1:5d:6a:9b:
                    58:ad:89:75:76:34:fc:30:d8:6c:82:ff:78:ed:9f:
                    aa:34:ef:7a:33:bd:83:df:d7:ad:2d:76:11:2e:f1:
                    b9:2c:09:ed:f6:47:54:6c:44:9b:79:ee:67:64:3e:
                    f1:df:d4:44:43:f9:0c:0e:34:1d:85:e7:11:96:74:
                    9a:ce:ad:48:43:63:75:e9:12:be:8e:7c:08:58:99:
                    be:ed:21:38:1e:31:22:27:bb:7d:af:cf:15:0d:93:
                    26:9f:a7:d8:89:c3:55:89:9a:a5:69:36:d5:6b:61:
                    e8:48:97:f9:30:16:28:69:df:a5:c1:3b:97:2a:d4:
                    7b:b9:e5:8c:c2:ef:32:a6:2b:b1:75:9c:07:d5:59:
                    f9:c6:5f:ca:50:cd:ad:db:4e:1b:91:19:4d:56:c5:
                    d4:6a:d7:43:31:0b:01:4b:9e:98:50:52:b0:1b:dd:
                    e5:bd:fb:36:a2:37:51:38:a2:eb:fd:75:79:68:8d:
                    2d:e0:03:7f:17:b2:3f:b4:61:32:ca:ce:a8:70:41:
                    3b:e9:53:d2:d2:80:3e:e9:61:95:17:2e:9d:38:5e:
                    41:1d:df:0c:dd:77:da:4c:16:f8:22:73:df:06:39:
                    3d:9b:24:09:2d:d9:2c:86:6c:81:29:cf:a5:a9:21:
                    09:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:45:31:FA:29:AD:7E:54:FC:28:76:42:78:ED:91:FC:59:C6:73:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/96e482ab-646e-3f95-b350-c845e7eb8987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.136.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:c7:2e:93:e8:81:ba:a5:41:36:1d:43:e7:fd:5b:f2:a2:51:
         b6:47:1b:7c:6c:7b:bf:bf:2f:76:8e:8f:4e:d9:cc:7c:37:ef:
         aa:bc:f3:cb:b9:cd:05:fb:3b:19:e8:6f:1f:53:75:dd:a8:4e:
         98:44:64:cb:b0:c1:48:c4:fc:da:ba:31:08:bd:3f:a3:bc:b1:
         ef:46:8c:4c:53:69:8c:fd:fe:b8:fc:38:61:22:e3:c4:bd:82:
         d5:d5:1b:22:b4:57:28:21:c8:29:2a:81:64:53:1a:50:9b:95:
         5a:fa:9a:dc:3b:e4:49:b8:44:54:cb:c4:2c:5e:f8:88:47:5b:
         09:69:c8:4f:55:c3:59:6b:65:6d:e3:d4:fa:a4:db:7d:8f:58:
         ba:28:1f:8d:78:aa:e3:14:5e:6a:7a:46:54:2e:51:28:46:80:
         6a:21:ee:b8:ad:c0:9b:f4:47:cf:52:65:50:6c:d8:9d:fc:e4:
         dd:e4:17:3c:a7:64:f6:e7:d2:d1:7d:75:32:ea:08:1e:7c:90:
         55:79:ba:46:98:c6:c0:a0:43:9e:22:90:22:ac:d7:1b:83:32:
         c1:94:12:f8:70:44:69:ca:7e:de:76:d6:20:82:33:58:8b:25:
         35:d3:8a:2c:7a:53:91:1d:4d:48:46:4e:37:21:17:ff:d1:28:
         cd:0e:98:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:26:40 2025 by rpki-client