Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ad3e4c5b-b1f6-3015-85df-4eddf398ee85.roa
File:                     ad3e4c5b-b1f6-3015-85df-4eddf398ee85.roa (raw, json)
Hash identifier:          KtuAwHABof2HGzAIISqat/czOWZdLN+Bkd2+2M453PY=
Subject key identifier:   2B:00:99:4B:DD:7F:16:C1:52:EE:15:84:1D:DB:E3:5E:AD:D1:C6:84
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584D100CF6B0955CCADFF6EBBB80
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ad3e4c5b-b1f6-3015-85df-4eddf398ee85.roa
Signing time:             Thu 05 Mar 2026 02:00:32 +0000
ROA not before:           Thu 05 Mar 2026 02:00:32 +0000
ROA not after:            Wed 03 Jun 2026 01:00:32 +0000
asID:                     15164
IP address blocks:        173.244.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:10:0c:f6:b0:95:5c:ca:df:f6:eb:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Mar  5 02:00:32 2026 GMT
            Not After : Jun  3 01:00:32 2026 GMT
        Subject: CN=e021d383-0e75-489b-a647-3648abfbc61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9e:d3:d0:fc:2a:24:70:ee:e6:4b:71:4c:f7:
                    fb:57:e2:49:f6:f2:ac:1d:58:e1:ed:13:91:cf:5b:
                    a7:20:db:a1:44:12:91:09:c4:26:44:4a:9c:75:af:
                    a0:f3:d8:c7:79:66:a8:d2:5f:03:48:e5:7e:24:ff:
                    26:83:0f:12:45:44:7b:61:1a:5d:47:3f:00:39:a5:
                    a4:f2:ec:c9:8c:4a:3e:39:38:c5:cb:48:69:8b:86:
                    7e:ca:a6:50:5f:62:9e:c9:23:c5:30:93:d4:51:3c:
                    88:41:0a:e4:0b:44:a2:bd:ce:8f:08:c4:ad:3f:eb:
                    93:f5:c1:f8:10:fc:c7:a1:79:5a:52:48:73:09:64:
                    0e:4d:e0:31:85:f8:88:38:60:94:0e:b5:2a:9e:19:
                    da:92:b4:1c:71:a4:45:5b:f4:2b:78:98:41:7c:24:
                    85:1c:8e:69:82:ff:9f:40:61:8a:80:16:90:bc:53:
                    24:e3:6a:ff:4c:bf:b9:ad:32:dd:a4:8b:31:85:91:
                    ee:8a:f3:4a:d9:65:93:49:77:12:0a:36:9d:7a:5e:
                    a3:76:93:fb:7b:5c:e7:fa:ff:59:65:45:56:1c:20:
                    5e:8e:38:02:59:3a:6e:de:d7:2f:20:39:9b:68:12:
                    c0:6d:1e:6e:52:05:53:d7:8e:81:8b:98:da:45:57:
                    b3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:00:99:4B:DD:7F:16:C1:52:EE:15:84:1D:DB:E3:5E:AD:D1:C6:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ad3e4c5b-b1f6-3015-85df-4eddf398ee85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:cd:1c:82:1f:fe:c4:0f:db:60:3b:9d:cf:12:86:2e:2d:bd:
         c4:62:49:45:c3:9c:27:cd:a9:97:15:01:94:66:d9:88:9b:34:
         48:ce:74:bb:d9:da:44:2a:be:81:67:fe:88:93:ce:c7:c8:7a:
         35:18:fd:04:20:57:84:ce:a3:36:c4:eb:ce:32:e3:0e:b1:16:
         12:a9:d0:35:39:77:11:bf:0a:ef:02:63:ee:c4:cb:4c:51:78:
         ff:18:98:80:ea:85:d4:60:46:ad:0b:3e:1a:76:37:0f:27:bd:
         60:f9:f3:60:a5:78:3a:53:ea:ab:e0:04:e9:3e:8d:87:98:9f:
         c4:a8:75:e8:00:1c:38:96:31:3e:e3:8e:e5:86:58:11:81:c2:
         e5:61:4a:a9:ba:45:d1:05:6d:06:47:d0:9b:08:63:e2:0d:27:
         f2:f0:c8:82:58:6c:ff:7c:da:58:8b:8d:30:6a:cf:3c:a1:2c:
         87:c2:52:23:fb:fa:3d:3e:35:36:01:cd:4a:56:4e:98:c4:47:
         c1:5e:45:e8:80:47:49:ad:c6:96:6d:a7:19:37:aa:1f:b7:3b:
         cb:78:db:c5:b7:e1:1f:14:74:b3:61:92:a2:60:13:e9:d9:1c:
         53:2b:cf:f4:08:10:81:04:42:19:3d:bf:12:02:fa:45:76:04:
         bb:fd:6d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:33:30 2026 by rpki-client