Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/baf36f1f-7681-3019-9422-c187c0a3a355.roa
File:                     baf36f1f-7681-3019-9422-c187c0a3a355.roa (raw, json)
Hash identifier:          uNzW4sN6q+qx6hYzkQk/m8Vstgko4gtA/BepgY4z3QE=
Subject key identifier:   6F:4E:E2:AE:B8:1F:FD:8B:BB:D1:25:96:9B:64:27:06:62:09:F2:FD
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584D100CF204B6ABCD85F43F0840
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/baf36f1f-7681-3019-9422-c187c0a3a355.roa
Signing time:             Thu 05 Mar 2026 02:00:32 +0000
ROA not before:           Thu 05 Mar 2026 02:00:32 +0000
ROA not after:            Wed 03 Jun 2026 01:00:32 +0000
asID:                     15164
IP address blocks:        173.244.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:10:0c:f2:04:b6:ab:cd:85:f4:3f:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Mar  5 02:00:32 2026 GMT
            Not After : Jun  3 01:00:32 2026 GMT
        Subject: CN=29404fe9-2f0f-4402-9b65-6c0315d18103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:46:39:7d:b3:dd:92:3a:92:21:58:5c:42:4c:
                    55:6b:3c:15:ef:cb:bf:70:bc:26:27:b5:27:d2:ca:
                    22:38:18:68:33:b1:53:c8:b1:ca:fd:2d:7a:4d:23:
                    ae:0f:e7:c0:19:36:a3:a2:cc:0c:79:25:4e:d5:64:
                    a3:be:a3:5c:03:bb:31:34:9c:3c:d1:45:e1:3e:0c:
                    05:bf:a6:46:0b:ef:1b:2d:ba:a1:a9:cb:23:c6:a7:
                    e4:ba:7a:c6:2e:f4:f5:8a:74:d4:39:6e:b8:38:70:
                    73:7f:6e:2f:84:5a:85:89:21:51:ab:34:f9:ac:3d:
                    2c:4d:45:d9:e2:d9:36:37:ce:16:dc:a2:54:1f:9f:
                    5b:3c:84:d5:6a:34:f8:f6:8b:ec:42:84:3b:13:32:
                    5d:e9:39:8d:d7:83:82:f1:c1:c2:a6:8c:87:cd:79:
                    ed:8e:44:ac:f7:ae:d9:a1:14:38:99:12:01:7a:1e:
                    7f:82:cb:2a:bf:d2:b3:48:44:c8:12:27:ce:af:22:
                    95:29:ea:8f:e8:29:61:03:94:0a:d5:97:d7:53:7c:
                    80:c5:c7:ee:30:ac:48:6e:28:1b:8f:d6:20:a0:84:
                    5a:eb:99:1f:72:2a:ee:02:47:d4:e9:4d:fc:8f:e5:
                    24:6a:28:c9:6c:7d:0c:f7:13:b9:3f:5c:07:57:a0:
                    90:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4E:E2:AE:B8:1F:FD:8B:BB:D1:25:96:9B:64:27:06:62:09:F2:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/baf36f1f-7681-3019-9422-c187c0a3a355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:70:c6:82:d5:bd:62:2f:bf:db:1f:d6:b6:9c:0c:38:e7:60:
         ab:25:be:91:a0:9b:3e:eb:06:fe:6b:c3:d1:77:0d:8c:7b:6e:
         2c:43:92:c9:4c:19:33:92:73:4d:20:2b:ef:e4:0b:b9:89:f8:
         48:07:4a:0b:4c:8e:1b:18:50:8f:4d:84:96:f0:7f:24:ce:14:
         3c:f6:47:cc:01:c5:34:55:b0:bc:eb:80:04:86:e8:a6:7f:d9:
         f4:13:97:ee:1e:c4:64:76:60:3c:56:7d:9d:54:2d:b8:19:ad:
         58:24:b6:36:74:72:08:1d:7b:48:34:01:81:db:de:e4:38:03:
         37:6c:4e:1b:52:89:be:be:d5:d5:cd:7f:1c:1a:9c:d9:1d:53:
         ea:7d:ef:61:fe:0c:5b:52:04:2a:da:80:4a:8e:5f:bd:de:2c:
         6e:48:36:02:3f:48:67:a0:ad:3c:6c:1d:4c:30:16:5d:f0:89:
         86:38:1d:07:50:c8:7f:c0:34:c9:77:40:1a:9a:fc:1c:28:13:
         9b:07:c7:9d:fb:a0:44:d4:e5:b4:b0:ad:84:4f:a8:3c:12:84:
         81:19:fa:0f:cc:b2:4f:ac:3e:95:12:53:56:d3:d7:b1:1d:46:
         95:14:a3:54:85:75:7d:ba:6f:40:7c:59:ea:90:f3:4e:28:fb:
         ba:0d:89:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:33:27 2026 by rpki-client