Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/eea08d9f-303a-3b6d-8490-f09157849fd5.roa
File:                     eea08d9f-303a-3b6d-8490-f09157849fd5.roa (raw, json)
Hash identifier:          v87uZaEdWt+qYYcBbY6SN2Mql/CX4DXCRzdbUulvFvg=
Subject key identifier:   24:0E:0C:22:EB:0A:BE:1B:83:8F:3A:EF:93:BE:79:41:06:CE:77:CF
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584DE5807DCB224FC11AB1B42780
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/eea08d9f-303a-3b6d-8490-f09157849fd5.roa
Signing time:             Wed 20 May 2026 13:00:31 +0000
ROA not before:           Wed 20 May 2026 13:00:31 +0000
ROA not after:            Tue 18 Aug 2026 13:00:31 +0000
asID:                     15164
IP address blocks:        138.199.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:80:7d:cb:22:4f:c1:1a:b1:b4:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: May 20 13:00:31 2026 GMT
            Not After : Aug 18 13:00:31 2026 GMT
        Subject: CN=52704a5a-3a10-403f-a0d9-8696f8521970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4a:33:8d:35:87:3d:ba:62:f2:0d:1b:9b:1d:
                    3f:71:e1:d7:82:d0:ad:59:96:84:e3:01:0e:3d:c1:
                    0c:e4:50:f6:8b:75:a7:96:c2:12:f8:b8:f8:b6:45:
                    a1:63:64:d1:81:60:c4:57:87:fe:b4:b1:11:6d:7a:
                    c1:81:38:fd:3c:33:15:d7:d5:c9:cd:3f:f8:bb:34:
                    3d:04:a4:27:0e:2b:e6:a2:26:2e:5a:1c:99:6e:6a:
                    ea:cf:05:22:02:64:1f:8e:76:9a:54:05:cd:94:68:
                    98:95:8f:01:87:ad:3c:3e:80:3a:4f:e8:28:4d:81:
                    a6:e5:2c:c3:ac:be:40:ed:de:76:b5:51:c3:d9:21:
                    8f:c3:d1:33:74:5d:a0:3e:17:f1:9a:bf:e4:4f:42:
                    fc:a9:f7:12:f9:4c:cd:9b:5b:5e:7c:1f:06:78:c9:
                    a9:5a:23:5c:08:4d:2d:6a:af:1b:35:9f:57:39:c2:
                    b2:d2:67:cb:9a:eb:1b:3e:95:ff:a3:f9:27:25:12:
                    65:fa:db:52:a7:d1:5a:21:00:9d:8e:72:59:81:97:
                    df:a2:a3:33:e2:9f:9b:8c:04:74:2e:8c:51:cf:ee:
                    79:20:9b:9e:6c:2c:dd:b8:7f:40:b4:3a:a1:58:6e:
                    c8:3c:c4:c2:f3:9c:ad:e3:22:e5:38:0e:15:04:9d:
                    2a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0E:0C:22:EB:0A:BE:1B:83:8F:3A:EF:93:BE:79:41:06:CE:77:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/eea08d9f-303a-3b6d-8490-f09157849fd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.199.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:ac:6d:15:38:24:40:d0:33:03:84:fd:a0:81:9b:11:17:42:
         48:da:ac:27:96:e5:a6:5e:cf:3a:c2:fc:61:50:fe:1e:dc:9b:
         43:ac:f6:d4:a0:b5:e8:7e:6b:84:45:e0:44:5f:ae:68:3e:70:
         86:0d:8b:01:93:47:59:85:27:88:77:5c:ae:fa:30:05:39:1d:
         6c:13:78:09:be:24:a3:89:9c:07:b9:2a:b8:81:eb:56:ef:39:
         d6:49:a0:1b:e6:f0:75:99:61:c6:37:91:a2:7e:4c:42:91:1d:
         4c:d6:e3:ba:3b:50:17:ee:e9:49:d7:07:99:e2:2f:3f:78:c4:
         17:99:d7:5c:ac:48:ee:a2:55:c6:91:58:93:dc:45:14:97:2d:
         84:79:d4:7f:55:e5:f1:33:8a:ef:4a:02:40:32:23:c4:e0:d4:
         0e:6b:8d:4d:b0:d4:b8:a7:d2:ac:1f:de:4d:2b:2b:b3:57:30:
         19:c0:7d:3a:62:2f:16:37:1f:c6:cb:aa:fe:f7:43:49:39:93:
         15:dd:7a:72:c7:7d:44:bf:21:d6:cc:81:46:67:c9:74:1a:d4:
         d5:70:46:44:e8:35:51:2d:18:11:2a:fa:23:1a:b2:de:b8:ca:
         da:98:70:0e:38:20:4a:09:f2:7c:44:82:f4:32:50:5d:be:4f:
         ab:78:22:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:52:26 2026 by rpki-client