Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/09123ace-0161-3859-8f63-f647fb1bbe09.roa
File:                     09123ace-0161-3859-8f63-f647fb1bbe09.roa (raw, json)
Hash identifier:          uC99OkS1hGNBxKUDnauPuhRADruj7pB+skNKsFJPwEI=
Subject key identifier:   15:C8:63:81:0E:47:57:8E:2E:34:5D:9E:DD:22:1B:28:8C:20:C2:36
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584DF0AB43156F9C1932E53F8CDB
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/09123ace-0161-3859-8f63-f647fb1bbe09.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     15164
IP address blocks:        140.82.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:43:15:6f:9c:19:32:e5:3f:8c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=6258872a-9b84-4e13-b737-7d23871753b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cd:c5:84:d9:6e:b3:6e:4f:08:7c:e2:08:b9:
                    0d:a4:35:0f:98:ef:ba:5c:f5:ca:74:2b:79:95:30:
                    23:54:a2:17:df:96:e7:f3:8f:dd:20:e7:45:76:ca:
                    83:65:cf:10:f0:e6:81:51:64:31:d3:cd:90:d0:61:
                    16:52:de:9c:55:6a:9d:f0:6a:ee:7b:09:cf:9b:10:
                    a0:0f:55:05:6e:5c:e4:4a:b3:5e:a5:f1:1f:79:0f:
                    43:08:a2:55:f6:0a:5f:42:e4:3b:5e:71:ae:b9:8f:
                    11:aa:03:e6:8a:10:16:39:0f:87:fc:51:75:ab:95:
                    c2:11:e6:72:6c:a6:3f:12:bc:fb:aa:ae:b4:f8:d4:
                    c0:35:aa:df:84:fd:d1:c4:79:0a:1a:24:24:0b:7c:
                    aa:e3:47:20:09:14:51:a2:b9:0c:e3:6b:57:de:36:
                    ee:4a:01:0c:bd:b5:82:ed:0b:d8:fe:91:cd:c7:e0:
                    a9:f4:5e:eb:dd:ac:8f:85:0a:57:f5:fe:80:5c:f2:
                    a6:58:ba:45:e4:22:f7:f6:0e:a9:5e:51:75:32:fa:
                    cc:34:c0:97:15:fa:a6:2a:9e:32:a7:ee:6d:22:a7:
                    02:df:5a:e9:b3:06:7c:ac:c7:d2:d8:ef:3c:a4:ec:
                    ff:b9:28:ee:b7:8e:5f:9a:b9:c6:bf:65:9c:a5:b2:
                    43:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C8:63:81:0E:47:57:8E:2E:34:5D:9E:DD:22:1B:28:8C:20:C2:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/09123ace-0161-3859-8f63-f647fb1bbe09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.82.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:58:04:2f:1c:04:e1:4f:29:aa:77:8c:37:d4:db:bd:9a:76:
         e2:77:0d:9b:4c:1b:02:ac:b0:90:2a:99:0a:56:0d:2e:b9:59:
         12:5a:4f:36:3b:97:03:51:bd:e5:e5:7d:28:48:dd:36:44:a2:
         b2:3e:b7:71:de:58:80:5c:64:fb:84:42:1e:ce:4b:0f:04:ef:
         e5:9f:88:c9:ed:68:9e:97:82:dd:c4:1f:46:65:88:74:47:28:
         ae:1a:f7:a9:0a:1a:55:2e:24:73:9c:5b:d2:7c:13:34:48:1e:
         24:f4:ba:2c:f6:eb:af:c4:e7:83:79:3b:8d:1f:b3:7a:80:bc:
         da:df:81:47:96:1c:2f:a5:09:95:e7:a1:f6:a3:59:19:f5:a0:
         cb:be:7d:d4:b3:a0:10:64:f1:16:f5:c0:8a:7d:ff:0b:71:35:
         4f:05:4c:47:72:ae:eb:40:27:ce:b9:72:09:e4:e0:0b:f5:eb:
         31:51:c3:63:1e:17:88:fd:04:67:c6:fa:07:59:59:a5:a0:81:
         da:4d:be:9f:78:b8:c0:ac:eb:15:8b:90:75:05:14:bc:dd:7f:
         6c:e4:38:42:b4:7a:bc:6b:5c:3e:7d:27:38:c5:cc:ce:89:29:
         cf:09:8b:6a:f7:ee:84:67:17:30:5b:64:dc:22:a6:5d:6f:91:
         80:5a:f5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:52:42 2026 by rpki-client