Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/957f7958-7609-3f47-b3c6-ee76d895db0a.roa
File:                     957f7958-7609-3f47-b3c6-ee76d895db0a.roa (raw, json)
Hash identifier:          ddazrZ+9R5J4FYL9aYYGgZwXHsCdj349h9UfCQYvbzM=
Subject key identifier:   F4:11:25:F3:6B:CA:75:60:13:77:8E:03:4E:C2:EA:7D:4E:73:B3:9B
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584ED001CF720D8DABCFD7742800
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/957f7958-7609-3f47-b3c6-ee76d895db0a.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     15164
IP address blocks:        205.184.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:cf:72:0d:8d:ab:cf:d7:74:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=39a5607e-ef72-4602-8b7e-27db11f8a576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9f:e0:49:95:03:1a:7a:f4:e8:ff:24:d7:1c:
                    e6:73:d0:7c:b4:7c:da:3b:59:8f:24:56:ff:03:66:
                    4e:75:78:17:11:af:a7:bf:01:82:99:1d:87:34:13:
                    b8:2f:53:83:e8:8c:5b:bc:e2:3b:94:4a:74:9b:5c:
                    86:a1:fd:f5:c9:2c:50:e9:2c:fa:fb:ec:3c:f1:74:
                    ee:93:5f:19:a2:91:38:18:73:43:78:29:23:a6:a8:
                    f5:14:7d:8e:ab:55:f0:35:e8:6f:9e:ac:09:2b:1e:
                    10:0d:e7:aa:66:57:ff:12:de:8b:72:02:0f:ee:24:
                    b1:01:4c:f0:66:ad:80:8f:bb:14:94:df:76:3e:0a:
                    48:00:49:83:fe:a5:55:3f:43:0e:13:25:4b:98:84:
                    3f:6d:c5:88:fc:ae:7f:0a:90:80:71:dc:af:cd:08:
                    29:45:1e:c9:da:f7:54:31:39:74:a2:0d:52:24:a6:
                    5a:a8:1c:c8:cd:8c:56:c8:f5:58:25:49:55:88:d3:
                    69:79:11:5a:d2:55:70:aa:52:d0:3b:de:7a:54:4e:
                    43:fc:60:55:18:21:92:3b:87:95:26:06:15:10:b6:
                    61:cb:66:67:f8:37:ca:70:24:36:81:bd:3d:aa:96:
                    bd:b9:83:df:f9:40:e6:b0:52:06:3f:91:67:be:b8:
                    c9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:11:25:F3:6B:CA:75:60:13:77:8E:03:4E:C2:EA:7D:4E:73:B3:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/957f7958-7609-3f47-b3c6-ee76d895db0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.184.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:f2:e8:af:3c:e2:e6:22:e0:be:02:ff:ee:c9:49:00:5e:9e:
         0b:c0:17:ef:fa:89:c6:6b:18:9b:ad:c1:6d:71:3c:29:1b:a8:
         8b:91:d7:a6:c0:5a:4b:cc:33:0a:6c:ca:5a:0c:a2:b3:b1:75:
         14:bc:f3:29:bb:92:62:00:44:f8:17:14:f1:e0:0b:c4:b6:bf:
         e5:67:aa:3b:98:93:de:da:dc:17:4f:24:d2:4d:ec:ab:ab:a6:
         0e:7c:c5:ca:07:55:5d:78:05:21:8b:7d:a2:f3:74:8a:93:07:
         7e:be:2c:85:7c:d5:c4:c7:07:6d:b7:b1:99:24:d5:69:b6:54:
         5c:1c:36:ae:ff:ba:42:a6:20:4e:47:04:56:8e:be:53:63:de:
         3c:7e:6e:7e:00:ad:a9:86:34:c4:05:29:b3:9e:de:89:a2:a8:
         43:c8:67:44:bf:c0:fc:f6:07:96:b3:ae:ab:8b:72:77:a6:1b:
         a2:74:ac:09:85:04:56:01:cd:21:46:64:cf:04:13:7e:d8:cc:
         21:a6:c7:e6:c4:e1:f2:66:02:e0:30:7f:0c:68:1c:a2:b5:2b:
         ef:7a:c0:15:bf:72:83:1c:e5:64:0a:9b:30:22:c8:f5:71:54:
         8b:37:da:5f:b3:25:8c:9f:a2:25:4c:03:7b:fa:2a:35:4d:2a:
         8d:6e:a4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:51:48 2026 by rpki-client