Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91fa892b-4aa8-3064-91a1-9cc04154d1ad.roa
File:                     91fa892b-4aa8-3064-91a1-9cc04154d1ad.roa (raw, json)
Hash identifier:          dZUNH9Ziv3YxXIYK3ozr3cjnrqGE9HfriLA8e8iQkag=
Subject key identifier:   BA:B4:6E:1B:32:5C:DE:C4:E2:E9:34:E2:F2:2F:84:F4:9F:5F:AB:E0
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584D100CFECF0357DB76E9DDE980
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91fa892b-4aa8-3064-91a1-9cc04154d1ad.roa
Signing time:             Thu 05 Mar 2026 02:00:32 +0000
ROA not before:           Thu 05 Mar 2026 02:00:32 +0000
ROA not after:            Wed 03 Jun 2026 01:00:32 +0000
asID:                     15164
IP address blocks:        147.136.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:10:0c:fe:cf:03:57:db:76:e9:dd:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Mar  5 02:00:32 2026 GMT
            Not After : Jun  3 01:00:32 2026 GMT
        Subject: CN=c2e5bb96-7b81-43a7-91a3-eb074a237017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:20:17:09:78:0d:b8:f5:3c:18:85:c3:c1:16:
                    9e:cf:bb:6d:67:ec:24:4d:43:55:de:5c:93:f0:ab:
                    53:0d:b2:bd:07:b5:8a:b3:60:c9:6c:26:d6:af:98:
                    a6:0c:26:61:56:d1:1d:44:80:2f:3b:3c:d9:04:e6:
                    5e:3e:4b:a9:c6:17:02:34:70:2d:24:93:72:70:22:
                    a3:08:d4:ad:20:60:2b:c4:21:f2:ed:44:a7:d6:c4:
                    cb:56:47:f5:c1:b8:12:59:8d:7d:4f:6f:82:93:bf:
                    06:84:27:4a:33:d8:f6:32:b2:5f:ec:5a:46:18:65:
                    12:46:fd:e2:fa:5a:cb:92:1b:1b:bc:a1:6f:9f:d3:
                    b0:cb:76:bf:40:f4:07:e7:2c:8a:c0:84:15:dd:9e:
                    d8:6f:32:0c:eb:3e:36:89:3e:b4:ff:f6:95:c0:2b:
                    43:25:6f:e2:aa:c7:00:cf:08:54:ab:d5:63:ec:d1:
                    1b:48:4b:8e:4b:6d:be:81:95:3b:76:7c:57:36:57:
                    24:05:ad:9b:4e:eb:2e:82:96:a6:78:5d:6f:05:b9:
                    df:02:a1:c9:16:57:34:f5:fc:ef:8e:ba:92:e2:ee:
                    84:ac:bf:f4:d9:70:70:ce:7e:a0:7a:77:83:02:f5:
                    da:d6:de:aa:f0:66:62:e2:91:20:91:31:60:bc:23:
                    b8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B4:6E:1B:32:5C:DE:C4:E2:E9:34:E2:F2:2F:84:F4:9F:5F:AB:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91fa892b-4aa8-3064-91a1-9cc04154d1ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.136.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:cd:01:0c:85:5d:5b:c8:60:4b:37:4b:e5:95:91:ad:5d:32:
         09:35:57:47:3f:5e:c3:cf:6e:5f:6e:41:c1:23:6e:db:f0:4d:
         2f:a1:f5:4b:c6:15:85:5b:f0:ee:0e:37:19:d1:b3:91:22:9c:
         67:66:75:c2:d6:c4:53:35:60:96:75:6d:a1:55:e1:d1:bc:38:
         a5:93:08:3f:76:db:4b:95:40:da:97:22:10:92:99:90:6c:8f:
         02:d8:c0:eb:5c:02:3d:75:c9:ee:75:9b:b7:ae:33:79:78:38:
         54:e1:7c:81:e5:96:3a:86:fc:7b:a5:c4:d6:51:35:51:7c:bd:
         52:7c:99:b0:d5:46:8b:62:b3:98:df:08:81:04:d8:2e:cf:40:
         1f:44:2d:3f:db:95:ff:1a:f8:c9:e0:d9:4a:82:e7:c9:32:1f:
         dd:b2:23:29:6b:0f:08:f2:88:18:3e:66:31:58:f4:4a:5a:6f:
         f2:4f:d7:05:28:99:ad:a5:44:52:00:00:e2:ee:42:76:7c:7a:
         64:8d:77:1d:32:95:70:7c:64:b8:7b:19:12:8a:8d:e2:bf:50:
         43:65:46:66:6a:55:25:6f:11:eb:70:a6:f5:7b:b5:fe:fb:02:
         64:41:ad:4e:34:41:f4:ce:e3:14:bc:79:c7:0f:21:3e:0a:24:
         29:34:de:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:35:11 2026 by rpki-client