Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a75f9891-0a10-3b72-af67-7097e70802fb.roa
File:                     a75f9891-0a10-3b72-af67-7097e70802fb.roa (raw, json)
Hash identifier:          j6PoaODDPTsdaEqE3YV/iT8Uf6PS/Wk/WxpwJRTQtXU=
Subject key identifier:   F7:EF:C9:C5:65:41:06:4C:E4:3F:71:E5:51:4F:C5:03:96:96:7A:83
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584ED001D42A6761510E9E22AB80
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a75f9891-0a10-3b72-af67-7097e70802fb.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     15164
IP address blocks:        205.184.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:d4:2a:67:61:51:0e:9e:22:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=76920c57-f44a-44fc-826c-0a42e10ed55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f5:61:94:6c:e2:9f:4c:d5:03:0f:7c:01:0c:
                    9e:70:cc:33:73:e5:ea:8c:43:c1:d2:42:7a:16:05:
                    1a:63:a3:9e:61:10:3d:e8:dd:9d:29:f0:ff:2b:a2:
                    d6:b3:fc:89:eb:c0:05:ff:de:05:50:32:d5:e3:92:
                    6c:57:5b:82:3a:8f:d0:13:84:df:83:2e:89:0f:2a:
                    b7:72:b8:a5:fa:c7:92:39:ae:79:be:09:42:03:ef:
                    51:67:c1:28:70:f7:70:b5:7c:59:a6:0d:06:34:aa:
                    b3:df:3c:62:99:94:b5:0b:43:ae:bb:99:bd:e1:3a:
                    7c:69:91:70:0d:61:6a:0c:de:ad:48:87:3f:31:3b:
                    6a:00:42:e0:64:18:97:18:1c:ff:5d:63:42:3a:5f:
                    54:8e:c6:26:0b:f8:04:2c:7b:d4:2d:e3:a8:6d:39:
                    26:7d:2a:21:cc:8c:bc:8b:6c:2c:f0:20:08:8b:15:
                    5a:3f:bf:39:2d:f1:50:9b:04:4f:d9:04:68:8f:d1:
                    c3:e7:4f:ba:cd:c9:bb:a3:6f:16:0e:fe:ff:39:40:
                    32:cf:dd:bb:3f:de:78:d5:87:7b:47:47:a1:b3:21:
                    c2:ea:4d:d2:0d:c5:ff:45:ba:ff:4b:79:f9:bf:58:
                    af:49:a1:c9:0c:ca:2e:41:80:5a:2f:49:15:81:4b:
                    37:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EF:C9:C5:65:41:06:4C:E4:3F:71:E5:51:4F:C5:03:96:96:7A:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a75f9891-0a10-3b72-af67-7097e70802fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.184.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:9d:fd:0f:d9:23:b1:ee:05:4b:8a:89:bc:9b:e6:51:62:84:
         46:cd:ed:28:be:11:29:b8:6c:d9:ae:d8:fc:6e:62:4a:de:85:
         33:7e:2e:55:8c:75:79:9d:ea:ef:29:96:6e:7d:3c:fd:51:bc:
         c3:62:0b:b0:22:9e:aa:6e:de:fa:58:e4:37:64:2b:67:2a:ce:
         75:21:6e:60:6e:c0:1c:3b:fa:4a:95:d5:cc:72:d3:df:e5:d8:
         3f:cb:56:a6:e2:c7:48:d9:d4:73:15:2d:83:48:d8:a3:8f:c6:
         2a:d0:fe:a7:12:7d:d2:93:c6:ba:66:c2:eb:42:e5:26:17:21:
         af:0d:e0:9b:83:75:11:0c:b9:54:55:c9:5d:01:1b:f7:ec:d8:
         77:8e:80:99:94:c8:b7:8c:83:83:bd:cf:51:3f:42:9e:53:7e:
         56:ac:fb:a9:44:28:2a:d5:01:2f:1d:a7:6a:0c:7d:d9:63:5d:
         57:c4:5b:c5:91:89:31:cd:70:a4:ea:bb:6d:73:1a:05:ff:70:
         3b:27:8b:9f:5c:ac:61:21:b6:c4:ec:53:f9:d0:55:08:de:ef:
         83:a1:c4:fd:47:f7:14:83:7b:65:36:ac:22:e3:b3:57:f5:b9:
         89:e2:4a:f7:51:b3:50:73:ec:41:d7:2b:da:65:8f:82:1c:7c:
         85:e9:22:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAdQqZ2FRDp4iq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk
NzY5MjBjNTctZjQ0YS00NGZjLTgyNmMtMGE0MmUxMGVkNTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fVhlGzin0zVAw98AQyecMwzc+XqjEPB0kJ6
FgUaY6OeYRA96N2dKfD/K6LWs/yJ68AF/94FUDLV45JsV1uCOo/QE4Tfgy6JDyq3
cril+seSOa55vglCA+9RZ8EocPdwtXxZpg0GNKqz3zximZS1C0Ouu5m94Tp8aZFw
DWFqDN6tSIc/MTtqAELgZBiXGBz/XWNCOl9UjsYmC/gELHvULeOobTkmfSohzIy8
i2ws8CAIixVaP785LfFQmwRP2QRoj9HD50+6zcm7o28WDv7/OUAyz927P9541Yd7
R0ehsyHC6k3SDcX/Rbr/S3n5v1ivSaHJDMouQYBaL0kVgUs3RwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPfvycVlQQZM5D9x5VFPxQOWlnqDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYTc1Zjk4OTEtMGExMC0z
YjcyLWFmNjctNzA5N2U3MDgwMmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzbhWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2d/Q/ZI7HuBUuKibyb5lFihEbN7Si+ESm4bNmu2PxuYkrehTN+LlWM
dXmd6u8plm59PP1RvMNiC7Ainqpu3vpY5DdkK2cqznUhbmBuwBw7+kqV1cxy09/l
2D/LVqbix0jZ1HMVLYNI2KOPxirQ/qcSfdKTxrpmwutC5SYXIa8N4JuDdREMuVRV
yV0BG/fs2HeOgJmUyLeMg4O9z1E/Qp5Tflas+6lEKCrVAS8dp2oMfdljXVfEW8WR
iTHNcKTqu21zGgX/cDsni59crGEhtsTsU/nQVQje74OhxP1H9xSDe2U2rCLjs1f1
uYniSvdRs1Bz7EHXK9plj4IcfIXpIjA=
-----END CERTIFICATE-----
Generated at Sun Sep 13 15:05:32 2026 by rpki-client