Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7de221c7-5944-3adc-a030-be9f096a9c13.roa
File:                     7de221c7-5944-3adc-a030-be9f096a9c13.roa (raw, json)
Hash identifier:          kL0gFjOFH1ULQUL+Iz/w4nPj/jk6cMyCYHyPJMiQ/T0=
Subject key identifier:   67:02:66:1B:36:D7:15:1E:37:8F:37:21:AA:ED:AE:1F:1D:6F:DB:60
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584DF0AB3ACCBDC45D09F4FBE3D0
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7de221c7-5944-3adc-a030-be9f096a9c13.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     15164
IP address blocks:        140.82.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:3a:cc:bd:c4:5d:09:f4:fb:e3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=bcc0f975-7f0f-4c80-94dd-b4844db510f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:82:53:3e:4b:43:42:39:e3:c3:13:90:cd:c5:
                    04:37:f2:e1:16:78:81:8e:b5:82:6b:3b:b2:3d:85:
                    e9:df:00:04:b8:3f:cd:9e:a7:ad:18:f2:f4:e7:fe:
                    b2:48:c4:b9:be:74:a0:4a:50:be:3f:d2:bd:68:22:
                    fc:6b:a9:74:d0:36:4b:a8:6e:af:d9:8c:75:00:27:
                    3a:84:3c:d9:d0:22:41:3c:63:4f:2e:a4:1b:c3:e2:
                    46:d4:47:c9:ec:9b:73:73:30:ea:e6:d3:d0:88:a5:
                    9c:0e:a4:94:38:a7:bd:be:72:e4:01:8f:39:4c:6b:
                    d8:a6:c9:df:54:bb:ea:84:aa:23:d6:b8:bd:45:52:
                    be:c2:7a:28:81:85:83:0b:05:17:78:f7:28:13:95:
                    97:c8:ec:2f:5b:2a:25:6d:cc:44:f2:aa:a0:7e:bf:
                    b8:73:6c:5c:63:d6:cb:2d:fe:33:fc:da:3f:d0:ab:
                    7b:f4:0b:7e:d1:7c:0a:83:b1:fa:b7:ed:49:fb:4c:
                    6e:d8:c6:7a:75:0b:4d:ce:5b:09:87:fa:85:d9:a2:
                    47:22:55:f0:2b:17:fb:10:45:fc:13:3a:04:fd:2c:
                    e9:6a:58:ad:b5:9a:c0:6c:f8:3f:6a:8e:3f:f3:69:
                    8e:11:e4:d2:3b:22:e4:fe:ad:ea:ed:4c:80:b5:e4:
                    57:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:02:66:1B:36:D7:15:1E:37:8F:37:21:AA:ED:AE:1F:1D:6F:DB:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7de221c7-5944-3adc-a030-be9f096a9c13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.82.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:82:54:33:10:ed:f1:d0:d1:12:08:4d:7a:63:6e:ef:da:e7:
         36:7e:66:77:15:6b:02:ab:94:2a:9d:e7:08:e2:3c:ad:c2:05:
         95:88:4a:7f:97:bc:42:66:d2:27:1c:e6:f1:c3:33:86:e7:4a:
         5c:c2:0c:f9:fd:ae:6e:7e:d6:1b:c1:d2:5c:4e:8d:35:b5:1c:
         3d:ed:c4:9c:21:cb:ab:3a:a1:41:dc:51:ff:40:75:31:3d:c5:
         b5:28:6e:36:06:a9:6d:b7:87:7b:9a:f7:aa:58:35:1f:0e:fc:
         de:69:5b:40:43:aa:e0:f1:38:23:4d:e6:11:f9:bc:65:8e:ec:
         99:2f:a4:2d:a2:cd:84:44:a6:c8:82:4f:1a:9e:7a:9e:49:3b:
         f1:20:ef:92:56:2e:fc:88:48:2b:9f:a1:c0:9c:d4:bc:3b:9d:
         b7:d1:87:ed:e7:a6:b2:13:36:2e:53:9e:d3:dc:c7:2b:86:34:
         25:a1:3f:3e:96:bc:36:62:10:44:49:4e:fa:cc:b9:6b:15:c6:
         76:bd:a2:4b:a7:9b:59:6c:ab:65:f0:32:43:e3:ea:d6:b3:5f:
         a9:6a:ff:73:bb:f6:78:ac:82:f5:60:9b:25:d8:d7:f0:af:c0:
         38:64:04:00:9b:bf:02:30:c1:6a:39:d7:80:bf:96:bf:25:67:
         94:57:a2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:50:15 2026 by rpki-client