Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a30db407-116f-3eae-858f-a2a4c84444ed.roa
File:                     a30db407-116f-3eae-858f-a2a4c84444ed.roa (raw, json)
Hash identifier:          NC2dUaigZyD9qz4jfOfeIP4oKhsbh3Du8J7JOueDrOI=
Subject key identifier:   A5:CD:BF:DD:96:D0:E7:B1:BF:37:D4:9C:89:B4:AE:90:2A:55:0B:A6
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584A63F5B6268AC49C2DA683D280
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a30db407-116f-3eae-858f-a2a4c84444ed.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     15164
IP address blocks:        138.199.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:b6:26:8a:c4:9c:2d:a6:83:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=a7c61743-1a3d-4728-80d3-c02ad06aa326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:31:8e:c1:b0:5a:f9:03:5a:01:5a:f9:61:73:
                    34:e9:14:e2:1b:76:a6:4a:c5:91:01:69:fb:ee:46:
                    3a:c8:f0:d3:82:5a:85:f9:e9:ea:19:44:87:bd:e6:
                    1c:83:e3:02:28:b0:9c:80:63:e2:c5:28:11:24:9d:
                    0a:86:ca:76:7d:5b:52:39:bf:4e:48:0b:bd:db:a7:
                    85:39:0e:3e:2e:9d:c9:73:c9:57:1a:c3:3c:a0:85:
                    a5:22:ca:7f:f8:7a:6f:49:ea:c3:19:94:d3:08:e8:
                    52:d5:41:3b:23:e9:99:0d:13:b3:ba:40:8a:fa:53:
                    7e:9b:87:7e:22:fa:41:11:9d:f9:12:18:52:d9:f3:
                    90:a0:12:9b:60:34:69:1b:e0:3f:ac:68:55:4f:6f:
                    60:46:07:74:37:d6:23:e2:74:ac:ad:11:48:36:fb:
                    cc:4e:14:76:a8:ce:bd:77:fc:2b:a6:c2:b1:75:08:
                    df:e4:5c:a9:cc:87:0e:9e:83:99:bb:cf:e7:9d:f6:
                    1f:b0:0c:30:b2:f7:75:23:4d:88:f5:07:a3:96:2f:
                    7d:2f:3b:6e:39:92:0e:9b:92:d5:46:3e:60:7f:38:
                    1f:12:05:76:52:46:17:e6:67:bd:61:79:49:d4:81:
                    10:18:cf:35:db:27:09:a8:6a:a8:1b:da:b1:d1:10:
                    e4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CD:BF:DD:96:D0:E7:B1:BF:37:D4:9C:89:B4:AE:90:2A:55:0B:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a30db407-116f-3eae-858f-a2a4c84444ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.199.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d3:ec:6f:46:d7:c3:36:d8:18:fe:f4:6d:49:95:e8:d4:11:
         74:b8:82:d9:cd:c0:3f:e8:17:7b:2c:45:f3:ec:22:3d:31:e8:
         d6:fe:c6:6b:39:e8:8b:a1:2f:1e:9c:1a:a9:da:6c:70:5c:87:
         56:3e:a2:39:ea:5a:d9:3b:66:74:d8:a4:52:28:07:93:1e:33:
         ac:99:cc:9b:93:ce:d6:93:8c:c3:86:52:10:66:7c:6f:16:a5:
         aa:05:df:c6:a2:66:e9:e7:7a:36:9a:99:c4:d0:0e:4a:9a:08:
         c9:e6:aa:e7:6a:df:b3:a3:49:11:c5:4f:d8:0c:b2:1f:1c:0d:
         10:71:8f:aa:eb:04:40:ab:54:0b:e1:e1:9a:52:4b:09:30:16:
         5e:99:f6:d1:c2:ba:9f:71:ec:61:7e:42:c1:98:2b:a0:91:87:
         0d:66:98:46:94:f2:8e:1c:f4:4f:f1:cf:78:e2:87:70:71:30:
         a1:b1:0e:c0:f9:73:67:62:93:55:fd:6c:bf:cc:ac:2c:5a:6e:
         49:d8:0f:01:1e:71:6f:66:74:b2:c3:aa:84:3b:6a:5e:bb:37:
         f1:41:52:fc:d2:d9:3f:65:54:f8:4a:b5:f4:72:67:52:ef:fc:
         f1:8e:10:8d:cc:ac:ee:2f:8f:61:7f:ad:cd:85:eb:a2:70:7d:
         57:ca:b9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:19:33 2025 by rpki-client