Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9d09ee14-0bf5-3ccd-a4b5-962589e7ec28.roa
File:                     9d09ee14-0bf5-3ccd-a4b5-962589e7ec28.roa (raw, json)
Hash identifier:          JCmMc2u6CJRBgQkTVdJOHHUhWzdiORbDVjkvcDrg4F4=
Subject key identifier:   B6:91:72:F0:B4:F3:82:33:F2:F4:75:D0:52:A9:93:5E:50:D2:E4:98
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584EA7915FA019EAC3C1DFB379E0
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9d09ee14-0bf5-3ccd-a4b5-962589e7ec28.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15164
IP address blocks:        138.199.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:5f:a0:19:ea:c3:c1:df:b3:79:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b0d50654-8ae0-40c6-8365-e360a7ffbde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:0a:f6:dd:97:13:d4:81:51:eb:4b:a4:7c:
                    3e:f1:7b:09:7b:91:4f:8f:02:07:d5:8e:b3:bf:0a:
                    e0:b8:3d:06:ec:ef:11:c2:2c:b4:24:ea:92:b2:2d:
                    e4:4a:ae:01:6a:42:1b:3f:3f:da:a5:35:bc:1b:7d:
                    3c:90:44:ca:09:f5:03:a0:53:5e:db:5b:4a:b5:df:
                    e6:f6:93:05:5a:ec:b5:6f:2d:db:55:b5:9c:08:e3:
                    d1:f3:df:7b:60:3c:4b:3e:c0:83:a1:e6:67:f3:bf:
                    91:ee:67:61:2e:b4:2a:ff:4e:5d:b3:67:e4:04:f3:
                    62:14:67:37:dc:28:76:c2:cc:ae:eb:2d:ee:0d:a0:
                    9e:fd:8e:e4:dc:6a:06:1b:95:01:8c:6a:55:02:67:
                    cd:57:3d:0e:e4:ac:df:8c:15:bb:0b:65:2f:8d:23:
                    c7:01:3a:76:f0:9b:12:03:37:a4:cd:c7:5e:b1:63:
                    a4:13:7f:38:0b:66:45:b0:a5:87:bc:9a:59:64:56:
                    cd:60:c9:bb:b6:90:4f:dc:d0:9b:dc:d0:43:97:f3:
                    9e:c9:e8:ef:79:c8:cf:c8:0d:ef:6d:7a:bc:33:a9:
                    f7:6f:40:08:e6:c2:1c:1e:b8:9f:96:30:23:bf:a2:
                    61:b5:64:9a:9a:9c:a0:9b:82:b2:e8:90:ce:b5:ea:
                    ac:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:91:72:F0:B4:F3:82:33:F2:F4:75:D0:52:A9:93:5E:50:D2:E4:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9d09ee14-0bf5-3ccd-a4b5-962589e7ec28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.199.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c0:7e:87:ed:c5:73:d9:36:2e:6f:37:f1:b9:c2:f5:88:6e:
         b5:b5:92:45:b6:8e:23:8d:68:ce:33:59:64:0f:16:08:a2:8a:
         0e:e9:a1:47:b1:fe:7d:d7:86:38:60:8c:44:ac:fd:1a:60:bd:
         a3:9b:07:ad:cd:8e:ad:19:e9:45:23:dc:fa:70:e7:8d:1c:48:
         2a:8b:83:81:ca:3b:4e:8b:e9:f3:04:27:b2:c6:7e:c7:47:61:
         9a:93:c1:66:20:ee:99:ac:2d:51:d9:68:75:33:8a:f7:92:e7:
         68:e1:8e:03:3a:df:27:f3:2e:64:00:f6:ef:5a:e1:a1:1f:b0:
         16:c9:15:cb:2e:e6:af:73:d8:49:94:2d:fa:c2:00:e4:09:b8:
         4d:6e:dc:57:34:55:50:e7:d8:a0:dc:35:d6:b5:0f:ac:c9:5c:
         b1:36:c0:84:bf:19:99:64:60:42:50:fb:aa:70:16:10:51:a8:
         fa:d4:86:f3:73:a4:6a:76:49:be:44:73:a4:c4:ca:fa:bd:38:
         e6:f5:7f:6c:5c:a2:a1:85:87:83:42:96:94:9a:67:bb:3e:7f:
         4a:23:6a:8b:cc:eb:f3:ee:a0:26:b2:89:84:62:91:49:9a:36:
         e9:3b:22:0b:3e:9f:5a:36:d3:c6:c2:0a:27:4f:ff:43:f7:96:
         0d:d0:84:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 22:44:05 2026 by rpki-client