Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/528bc511-2204-34bf-8f74-f0ffed7dcdf6.roa
File:                     528bc511-2204-34bf-8f74-f0ffed7dcdf6.roa (raw, json)
Hash identifier:          PXdcqNSnus5RrP8cLmDvXik+SNA0ITTmSMKrZx6uJe4=
Subject key identifier:   88:FD:1B:42:02:74:E5:1E:BA:A7:4F:C4:85:2D:0B:3F:74:C3:6C:B7
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584DF0AB3AEBA496DCC02F1F6430
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/528bc511-2204-34bf-8f74-f0ffed7dcdf6.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     15164
IP address blocks:        199.200.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:3a:eb:a4:96:dc:c0:2f:1f:64:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=f3f11d7b-1cbc-479c-8e93-f161be58a6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7c:ca:6e:59:6b:3c:1a:0f:75:97:4f:aa:c0:
                    27:49:67:24:93:e4:f9:97:06:49:40:82:b9:78:7a:
                    c2:d1:d4:74:f6:3f:c1:fe:c0:84:db:a4:b8:d6:ed:
                    94:a1:08:d5:e4:1e:77:fd:a6:d8:2b:05:af:c4:ff:
                    8d:52:50:54:c8:62:11:ec:fb:82:d0:01:d8:0c:ad:
                    65:98:56:46:f9:8e:3b:2a:d1:dd:30:98:be:13:f0:
                    91:7b:31:45:74:03:e1:e2:12:b5:3d:dc:4f:df:6f:
                    24:87:76:c7:4e:df:10:f6:d9:00:5d:1b:a6:64:e7:
                    ac:cc:5a:03:1b:9e:cc:ab:9c:c6:e5:1c:a5:c2:d0:
                    7b:8b:06:44:cc:4d:18:9e:eb:de:c6:92:f5:b2:fc:
                    4d:f9:cd:28:75:c6:18:cc:95:a7:d2:42:93:16:02:
                    09:f6:13:b3:eb:fa:64:6c:f3:1c:3b:9c:d3:12:27:
                    c6:d7:ab:63:6d:5e:c1:8c:29:fb:9b:cf:8f:83:4d:
                    e1:36:3f:ed:12:d6:6a:93:82:c6:93:b7:35:76:53:
                    01:76:4f:10:ad:49:17:47:ef:94:74:1b:96:c0:0f:
                    e4:0d:12:f4:87:77:35:21:55:6e:6b:bb:e5:7c:18:
                    7d:d7:d9:15:81:c4:8b:a5:e5:82:69:45:d3:31:d4:
                    95:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FD:1B:42:02:74:E5:1E:BA:A7:4F:C4:85:2D:0B:3F:74:C3:6C:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/528bc511-2204-34bf-8f74-f0ffed7dcdf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.200.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:74:5b:5d:43:21:ca:2a:23:ce:28:76:d6:45:9b:c4:18:b7:
         38:89:19:82:30:b8:51:d5:c2:72:9d:fa:c7:37:4c:b1:58:f5:
         53:98:83:e2:68:9a:00:2f:79:c6:9e:8e:a9:46:64:77:6f:f6:
         ac:cb:31:65:91:cd:7b:1b:29:e7:d7:27:34:7b:50:66:bf:a6:
         a3:df:8c:2d:7d:b6:2e:20:74:95:b7:73:98:62:7d:f3:10:66:
         61:86:7c:87:3d:5b:8c:47:43:88:62:02:8f:4e:c5:35:f0:39:
         1a:5b:7c:63:44:fa:ab:72:3e:83:5f:43:64:11:1a:77:cd:3c:
         e0:be:55:e4:e4:7f:9d:5d:f7:99:0c:5c:b1:3b:8b:8c:5d:c3:
         4a:ec:ad:fc:80:fa:19:89:1c:e8:c5:29:58:f9:35:23:01:a5:
         fb:79:73:3e:93:30:67:a1:6d:9f:53:ee:f4:cf:c8:d7:70:2d:
         d1:c2:f7:8a:e7:90:9c:5f:8e:69:77:52:bf:d9:10:ee:95:73:
         78:12:a5:cc:b0:34:0d:f3:2a:7e:20:51:13:12:53:08:6a:0d:
         13:76:1e:8d:fb:de:bf:c6:ef:50:b3:17:d8:a9:dd:70:9a:d1:
         79:89:7c:29:5f:eb:ae:38:1a:7e:aa:b0:cf:de:46:12:6a:c3:
         61:43:e8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:50:07 2026 by rpki-client