Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a30db407-116f-3eae-858f-a2a4c84444ed.roa
File:                     a30db407-116f-3eae-858f-a2a4c84444ed.roa (raw, json)
Hash identifier:          kRF76r1hVS/Lj2C1O8NliHOZaEfcNTy/qU8KRKNH2oE=
Subject key identifier:   E0:1B:D1:04:E7:18:27:19:00:F8:5A:01:CE:89:8F:3C:F0:2B:39:8C
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584DE580812D699510521855C800
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a30db407-116f-3eae-858f-a2a4c84444ed.roa
Signing time:             Wed 20 May 2026 13:00:31 +0000
ROA not before:           Wed 20 May 2026 13:00:31 +0000
ROA not after:            Tue 18 Aug 2026 13:00:31 +0000
asID:                     15164
IP address blocks:        138.199.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:80:81:2d:69:95:10:52:18:55:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: May 20 13:00:31 2026 GMT
            Not After : Aug 18 13:00:31 2026 GMT
        Subject: CN=50f0e0e5-4392-496b-9a05-19b668791876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4d:29:d9:22:af:1f:d3:03:be:30:ec:cb:75:
                    83:07:51:aa:0e:11:12:49:59:9a:89:7f:34:ba:94:
                    38:5d:cf:a6:5b:66:82:dc:af:b6:2d:1b:bf:bc:93:
                    ec:2c:fc:9a:17:d5:85:88:9e:33:92:b7:22:68:e5:
                    3b:10:b0:2a:31:bc:44:eb:06:23:bc:03:df:ec:62:
                    d6:7a:ed:75:7f:94:1d:f8:2b:15:e4:18:bd:85:80:
                    c6:59:d0:e0:b4:a4:ec:19:c7:99:df:6b:c8:18:c0:
                    b8:12:f7:f6:6c:bb:ae:d0:1a:e1:6f:d7:a5:41:a3:
                    b0:83:93:bb:55:db:5e:f8:9b:04:db:bf:3e:cb:c5:
                    a1:8e:68:ed:a2:10:7a:63:c7:25:a9:f3:1a:aa:7a:
                    18:36:6a:b2:6c:75:1a:00:06:e2:49:1e:73:88:b9:
                    f1:79:1e:9e:e8:0b:97:3c:ff:2d:fd:73:fe:2e:df:
                    5f:db:c6:2d:a0:87:97:44:19:57:ab:dd:f3:ce:26:
                    c1:20:6d:b4:a4:35:6d:1a:7f:1a:41:b3:2f:16:0b:
                    2c:7e:96:6e:78:89:6a:de:b9:0e:ce:a8:9a:e1:7e:
                    e7:f6:ce:71:64:7d:17:3f:8c:f0:12:6f:e3:85:22:
                    3c:27:c3:f3:fd:ec:ab:c5:ee:c4:21:71:c8:1e:65:
                    f8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1B:D1:04:E7:18:27:19:00:F8:5A:01:CE:89:8F:3C:F0:2B:39:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a30db407-116f-3eae-858f-a2a4c84444ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.199.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:e7:f8:9f:ba:dd:34:13:b4:34:8f:5d:fd:1e:bf:6c:d9:51:
         8e:d8:2b:67:83:cf:01:84:74:31:57:85:da:2e:1b:ad:11:54:
         18:36:8d:37:f2:00:6d:bf:63:bb:29:7c:e8:99:b3:72:d0:d2:
         1c:14:c7:ce:55:ce:06:d8:e3:68:16:46:98:80:e0:ea:b6:1c:
         6e:f3:f2:99:29:a0:cb:5b:fa:96:da:45:b3:54:76:a3:a5:cd:
         ac:34:a3:14:6b:f3:18:5d:77:eb:7c:b5:be:55:b8:8d:fc:e6:
         24:aa:a0:6c:f1:8f:3a:a8:7c:5c:c2:c8:76:a0:c7:64:fe:b7:
         48:34:fb:5a:0d:d6:3e:24:3c:6b:a4:b8:9c:a2:85:68:b9:fe:
         22:d7:2e:fa:34:f0:de:7a:c5:4b:94:2b:fe:dc:f4:c2:15:da:
         0d:66:44:1b:89:4b:a2:77:ce:cb:d5:a8:2f:4b:d7:67:73:eb:
         33:c8:31:01:3a:f9:71:c2:6b:f5:7a:47:eb:11:03:74:b8:1b:
         0d:c2:ff:b4:9d:2e:8c:b6:82:aa:c3:3c:4b:67:9f:07:c0:5c:
         6a:57:9f:51:75:87:f6:69:81:2c:3a:45:b7:2e:d5:ab:86:8b:
         79:b0:8f:f9:ed:ab:93:a9:b8:49:6b:d2:25:f8:f7:78:a0:9c:
         c8:69:9f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:44:01 2026 by rpki-client