Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/6cddac52-a8dd-3b87-b490-18149b48f2a3.roa
File:                     6cddac52-a8dd-3b87-b490-18149b48f2a3.roa (raw, json)
Hash identifier:          kNUlAFr+oSsj6EEOlX9nZamL4+8RSTtjV3+YVMtACho=
Subject key identifier:   76:19:5B:5F:58:7D:84:6A:E9:A3:6F:62:61:00:BA:90:D8:6F:90:91
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584D100D02FFD71F3C77A639FA80
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/6cddac52-a8dd-3b87-b490-18149b48f2a3.roa
Signing time:             Thu 05 Mar 2026 02:00:32 +0000
ROA not before:           Thu 05 Mar 2026 02:00:32 +0000
ROA not after:            Wed 03 Jun 2026 01:00:32 +0000
asID:                     15164
IP address blocks:        173.244.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:10:0d:02:ff:d7:1f:3c:77:a6:39:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Mar  5 02:00:32 2026 GMT
            Not After : Jun  3 01:00:32 2026 GMT
        Subject: CN=b11d5fc3-a020-4f2f-bfdf-877e3d462757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:be:f6:8c:5c:0a:2c:9a:a3:2f:72:91:47:
                    df:59:79:ea:e5:59:64:9f:e9:bb:ea:69:ba:66:4a:
                    f1:6b:4d:c9:90:c1:12:f9:6b:ba:dc:c9:f5:20:4e:
                    40:0f:de:66:40:9d:f9:6e:1a:20:3c:43:f6:cc:4f:
                    bf:96:ec:91:65:d2:ea:20:44:39:94:54:91:fe:52:
                    28:89:21:23:73:3c:1a:29:29:11:14:cd:a9:8a:b8:
                    3a:61:60:07:b1:a5:7f:7f:54:e3:fe:f2:50:62:ad:
                    09:98:96:cb:79:99:81:05:f4:80:b8:32:22:d7:60:
                    41:e6:fd:2a:bb:e3:0a:97:a2:a4:ff:18:14:95:1b:
                    4f:b4:2d:b5:23:c7:f3:7f:a2:ff:ec:c3:41:77:84:
                    cb:d2:a9:28:69:54:58:28:98:4d:35:e9:a6:4c:08:
                    d6:f7:86:49:4e:50:62:3d:31:55:09:f1:dd:4d:cc:
                    ba:bb:f5:d6:d7:ea:f4:d5:07:7e:7a:8c:fe:e4:0b:
                    03:b5:f5:e6:46:f4:17:5f:58:4a:5e:de:55:01:4b:
                    71:dc:79:78:b1:7b:8b:bc:23:8c:70:26:7c:57:3c:
                    77:ee:ff:5b:5e:9d:33:50:01:e1:02:76:82:f9:3d:
                    8d:6c:ca:e4:49:a7:1b:0f:1b:df:61:4f:ba:4f:c4:
                    0c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:19:5B:5F:58:7D:84:6A:E9:A3:6F:62:61:00:BA:90:D8:6F:90:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/6cddac52-a8dd-3b87-b490-18149b48f2a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:74:8b:b2:b8:ce:bc:40:88:1b:ae:07:3b:2a:a0:30:c0:5b:
         4a:33:15:b6:63:04:cd:19:6f:87:17:4a:b6:30:8f:68:01:a0:
         22:0b:de:86:59:39:b0:0c:66:d2:dd:66:96:21:98:91:3a:83:
         db:72:a3:60:0c:e1:8a:12:b3:60:f4:f1:c4:82:80:59:d8:13:
         af:c1:f8:5f:80:ba:fe:87:58:a0:4b:e3:7e:ef:a3:ef:e2:fb:
         b5:fc:17:e9:41:91:c2:4d:b7:bf:2e:9f:be:16:2c:83:44:e8:
         43:d5:87:00:9a:10:ea:41:f2:34:72:14:c8:1e:9e:10:d5:95:
         e2:86:f7:89:3a:5f:7d:71:88:d2:3b:f5:42:9f:d7:ae:96:35:
         93:45:cf:96:58:f9:5a:11:06:61:ad:f1:fa:84:b1:3b:e1:17:
         6b:ad:55:31:a1:cd:6c:a3:c6:a9:10:ea:00:19:bd:9f:1c:16:
         57:97:00:71:e6:89:b5:88:b4:6d:61:c8:39:4e:8f:39:2a:01:
         57:18:2a:a3:11:b3:d5:e3:f9:36:72:6f:c3:9d:ac:7b:c0:05:
         93:cb:ac:6c:88:1a:2f:be:c7:70:54:4c:14:ca:41:30:12:fa:
         08:f9:f8:87:41:a2:57:87:62:ae:cc:9b:ab:d8:6d:5e:cd:10:
         d6:c2:cf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:35:16 2026 by rpki-client