Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/81623733-dfbf-3eec-a164-33eab5be81c0.roa
File:                     81623733-dfbf-3eec-a164-33eab5be81c0.roa (raw, json)
Hash identifier:          0WdIZxtLi3BocjUsSUmyyBz0o2iXM+y9cMWlBJI3i/A=
Subject key identifier:   E1:DC:15:CE:2A:45:87:4E:4A:73:CC:23:66:B7:EB:EE:F1:DB:0F:01
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584FA1E41870676917C65F8A9D00
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/81623733-dfbf-3eec-a164-33eab5be81c0.roa
Signing time:             Mon 26 Oct 2026 17:20:11 +0000
ROA not before:           Mon 26 Oct 2026 17:20:11 +0000
ROA not after:            Sun 24 Jan 2027 18:20:11 +0000
asID:                     15164
IP address blocks:        64.251.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a1:e4:18:70:67:69:17:c6:5f:8a:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Oct 26 17:20:11 2026 GMT
            Not After : Jan 24 18:20:11 2027 GMT
        Subject: CN=d0cef556-259d-4f58-aa00-684b5ff90007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7c:40:6d:90:fc:dc:12:7b:9b:f4:43:cf:f8:
                    83:e1:12:93:f3:8b:e6:f3:6c:cc:05:31:32:64:3d:
                    1e:c2:58:d5:f9:b7:bf:d3:8c:0c:8a:9e:b3:9a:42:
                    c9:6a:84:50:db:cc:ad:1b:1c:cd:5e:79:cc:6d:23:
                    06:2b:66:d9:1c:6d:c5:8b:f5:26:7f:45:ab:ec:b6:
                    ea:5c:a3:f2:8b:2d:bf:01:56:b9:64:e1:84:3f:f6:
                    82:da:ca:b3:d5:3d:03:4e:bf:fe:2f:55:5f:04:f9:
                    fb:04:99:0d:c2:c3:8e:89:53:36:4b:aa:1b:1d:10:
                    55:8e:38:ee:12:95:fc:b1:3c:5b:ac:ee:dd:12:9c:
                    7f:6e:a1:1b:b3:30:b3:5e:12:fb:94:23:dd:35:d1:
                    69:fd:6b:57:0f:02:c9:8a:90:34:31:62:bf:b8:54:
                    1a:dd:d8:9c:99:12:60:b6:91:ed:c9:be:1f:69:e7:
                    6d:4e:f3:bc:c4:0d:c8:8d:52:75:4c:b7:48:93:15:
                    54:aa:aa:c1:92:7c:c8:15:f0:cb:60:a7:4c:ea:4a:
                    fd:0e:d8:80:35:83:84:75:dd:f2:ce:03:09:2e:52:
                    fc:98:42:49:ff:44:dd:5c:11:7d:07:f6:56:ff:33:
                    9c:88:2e:2b:04:7f:95:01:0f:79:85:06:bb:a4:37:
                    c7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DC:15:CE:2A:45:87:4E:4A:73:CC:23:66:B7:EB:EE:F1:DB:0F:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/81623733-dfbf-3eec-a164-33eab5be81c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.251.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:2f:2c:08:5e:16:73:ec:7b:0b:6f:f8:9a:9d:bb:f7:7c:7c:
         d7:bb:60:e4:ad:5c:1a:ae:76:84:69:b6:d5:ba:a1:ec:6c:02:
         9c:7a:f1:92:5a:4b:50:6d:c4:ac:bd:10:07:60:ee:f9:eb:6f:
         6a:2e:f3:5a:92:a3:6a:d1:87:43:1a:04:c7:88:4d:98:01:3b:
         13:c8:a3:78:14:55:a1:00:ea:14:df:95:eb:3c:e5:17:a5:8e:
         ad:95:27:4e:ba:a9:2f:e0:86:ab:0c:78:e8:dd:f4:42:c0:b6:
         92:f7:26:77:b7:14:b5:f1:7c:c5:23:07:ea:0f:c7:a8:11:ce:
         21:bf:a5:9d:c2:1f:5b:ca:7c:7d:77:00:40:23:a6:1b:45:b9:
         7a:04:b6:d1:0b:c9:10:5e:ec:90:d3:33:e1:6a:f2:69:40:9a:
         43:23:47:8d:0e:b0:e7:4f:74:98:6a:ca:86:d8:14:91:b7:fe:
         7c:3e:27:a5:bd:2e:60:d1:88:39:5f:80:6c:17:56:be:e5:f5:
         3a:b6:bc:a9:70:e6:1d:f4:7b:26:3b:d0:93:c9:80:3f:a9:03:
         5d:10:92:01:45:be:e0:65:21:a5:72:b1:7c:7c:be:6a:c4:d4:
         85:c3:21:10:6e:c9:65:bf:fe:21:ac:88:6c:4f:f8:46:05:21:
         58:2d:23:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:01 2026 by rpki-client