Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0609aee8-be76-3063-9d65-d282b41f7e4b.roa
File:                     0609aee8-be76-3063-9d65-d282b41f7e4b.roa (raw, json)
Hash identifier:          npa8izieOKIc57JJfM1HfmXI3caCx6BchDU2wssBbUc=
Subject key identifier:   4F:9F:A4:71:DF:A7:59:30:47:AA:C9:5D:3E:15:E0:84:43:12:CC:E2
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584DE2B5EF2BCD1B772FEDC01140
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0609aee8-be76-3063-9d65-d282b41f7e4b.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     15164
IP address blocks:        74.51.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:ef:2b:cd:1b:77:2f:ed:c0:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=2537e19d-b597-4958-a5f6-c686ce817189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:d1:48:11:d4:bc:5f:ca:bd:fb:dd:dc:03:
                    91:67:22:90:5f:e9:18:03:2b:fe:21:d0:7d:62:a4:
                    95:2c:25:d4:95:70:82:ab:91:88:05:7d:65:b9:53:
                    44:52:a8:de:25:f7:ff:e0:80:ff:54:b2:d6:8f:40:
                    d5:1b:84:cf:af:b8:4a:66:cd:b3:62:b2:42:2c:18:
                    52:85:aa:85:e9:d6:85:a8:67:5b:b5:34:05:dc:52:
                    ed:96:46:86:f7:34:b9:26:4e:ed:d2:fd:e0:89:d7:
                    55:43:c2:a7:60:cc:b5:0b:30:3a:c4:ab:ee:0f:94:
                    9e:be:c2:11:a5:d6:eb:1a:4a:60:f2:57:2e:a7:28:
                    af:e4:8f:53:9d:f2:27:30:90:93:0e:78:1e:62:c3:
                    61:08:cf:56:df:90:4f:ac:f2:eb:bd:62:53:2b:9b:
                    aa:c1:cd:96:e5:c5:81:22:98:15:2e:21:5e:16:8d:
                    a2:f3:a4:3c:36:5a:75:ea:8a:8e:38:2a:98:a6:46:
                    e3:eb:26:a9:27:d2:0b:f9:72:f3:e2:84:0e:9f:18:
                    b3:50:10:57:7a:86:24:a4:80:5f:94:78:d3:bf:83:
                    86:1a:d0:2d:4b:18:5b:5c:db:68:bc:03:16:c5:93:
                    fc:2e:00:63:d9:7e:73:b3:1a:6a:09:b2:c4:5f:4d:
                    4d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9F:A4:71:DF:A7:59:30:47:AA:C9:5D:3E:15:E0:84:43:12:CC:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0609aee8-be76-3063-9d65-d282b41f7e4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.51.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:21:13:be:59:b5:6c:fa:c2:3c:21:09:4e:e2:cd:96:ed:8b:
         35:5d:7a:2c:d5:a2:77:85:a6:b2:d1:48:b2:b1:3d:0a:8e:42:
         48:67:c9:80:78:9d:c4:d1:0c:70:a2:8d:20:3b:dc:70:ad:84:
         33:96:e9:d2:1e:c5:6d:88:37:88:da:b4:7e:fe:f7:d7:b6:b9:
         c6:c5:7d:fa:6a:72:d0:6b:aa:ed:b0:4e:bc:05:c1:57:3f:ef:
         7f:a3:ab:23:8d:44:2d:6d:b6:16:89:7a:f7:0b:35:35:ca:4f:
         ca:ea:62:69:d8:8f:fe:60:cf:8f:04:ee:d3:07:f7:37:ce:1b:
         00:94:eb:2f:06:51:fc:47:7a:fa:c2:7d:a4:68:e4:c1:0e:ee:
         df:6d:d0:26:ec:28:19:d1:17:fa:04:15:b0:06:9b:2e:c6:1f:
         d9:f4:5d:70:42:b4:8a:0f:19:ec:c7:08:6b:5f:1b:08:b8:ab:
         d7:57:b6:d4:ff:3e:17:ca:66:57:5b:47:a7:57:73:74:2b:32:
         e1:f1:bd:9b:35:0f:62:1e:5a:03:cd:90:c5:da:61:93:85:0d:
         73:e0:c5:e2:e2:8e:d2:87:06:0d:28:ac:a4:6d:34:f8:8e:20:
         e7:49:df:59:a9:88:f6:a5:ad:83:f7:f6:f1:7d:b5:a4:98:17:
         92:65:e0:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ite8rzRt3L+3AEUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk
MjUzN2UxOWQtYjU5Ny00OTU4LWE1ZjYtYzY4NmNlODE3MTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn/RSBHUvF/Kvfvd3AORZyKQX+kYAyv+IdB9
YqSVLCXUlXCCq5GIBX1luVNEUqjeJff/4ID/VLLWj0DVG4TPr7hKZs2zYrJCLBhS
haqF6daFqGdbtTQF3FLtlkaG9zS5Jk7t0v3giddVQ8KnYMy1CzA6xKvuD5SevsIR
pdbrGkpg8lcupyiv5I9TnfInMJCTDngeYsNhCM9W35BPrPLrvWJTK5uqwc2W5cWB
IpgVLiFeFo2i86Q8Nlp16oqOOCqYpkbj6yapJ9IL+XLz4oQOnxizUBBXeoYkpIBf
lHjTv4OGGtAtSxhbXNtovAMWxZP8LgBj2X5zsxpqCbLEX01NdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE+fpHHfp1kwR6rJXT4V4IRDEsziMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMDYwOWFlZTgtYmU3Ni0z
MDYzLTlkNjUtZDI4MmI0MWY3ZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjPTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkhE75ZtWz6wjwhCU7izZbtizVdeizVoneFprLRSLKxPQqOQkhnyYB4
ncTRDHCijSA73HCthDOW6dIexW2IN4jatH7+99e2ucbFffpqctBrqu2wTrwFwVc/
73+jqyONRC1tthaJevcLNTXKT8rqYmnYj/5gz48E7tMH9zfOGwCU6y8GUfxHevrC
faRo5MEO7t9t0CbsKBnRF/oEFbAGmy7GH9n0XXBCtIoPGezHCGtfGwi4q9dXttT/
PhfKZldbR6dXc3QrMuHxvZs1D2IeWgPNkMXaYZOFDXPgxeLijtKHBg0orKRtNPiO
IOdJ31mpiPalrYP39vF9taSYF5Jl4OQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 01:45:36 2026 by rpki-client