Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/fe87d53e-d268-37b4-b4ef-d6318b6ded87.roa
File:                     fe87d53e-d268-37b4-b4ef-d6318b6ded87.roa (raw, json)
Hash identifier:          QidSjCg+gnKbhdtwSMxJ1JISC5B79/gvtP09bO3j1OY=
Subject key identifier:   5D:68:78:5C:B6:EB:EF:FB:7E:13:E2:E9:A1:41:8B:F8:F9:82:10:52
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584EA7903F4A8C15ED49517C7640
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/fe87d53e-d268-37b4-b4ef-d6318b6ded87.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15164
IP address blocks:        74.51.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:3f:4a:8c:15:ed:49:51:7c:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d6f1d00b-c8d1-45cb-99af-90bcea0cc893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5c:aa:50:8c:0b:72:19:80:a0:c2:07:73:74:
                    d0:70:db:cf:0b:65:2d:96:c5:68:50:15:12:ff:9a:
                    f9:ce:2e:2b:44:1d:01:54:57:75:b3:a4:aa:c4:19:
                    c4:b6:43:6e:4d:87:8d:19:c2:54:fa:a7:e8:b7:55:
                    61:c0:e5:ca:33:90:cb:c1:75:45:e0:94:e2:62:0b:
                    9f:78:32:36:a6:25:44:48:23:65:e0:be:f4:68:57:
                    39:ad:e4:b4:91:46:a9:d9:54:b7:69:ba:72:7a:c0:
                    15:35:99:a2:ce:e2:94:b5:90:48:30:9a:91:10:2a:
                    f1:56:43:69:65:68:24:ac:45:33:da:0f:dc:3b:1d:
                    30:b8:1e:7b:a7:2c:61:18:04:4a:bd:88:a7:20:f8:
                    cb:13:5e:88:27:a8:5d:f3:c3:e6:9f:21:79:5e:71:
                    b7:40:6f:5f:b8:b3:7a:2a:4c:45:2b:10:19:62:63:
                    32:d3:53:24:d5:79:c2:4d:10:bf:21:65:0a:ba:b3:
                    33:a7:c8:2f:3b:d5:28:88:a9:d4:ac:63:62:ed:70:
                    e5:68:b4:8d:fa:95:42:d7:57:eb:1b:6e:70:ea:83:
                    00:6e:78:98:a2:c4:73:4a:41:05:85:16:3e:5d:7d:
                    82:96:11:90:c1:a8:3c:01:8a:03:99:ea:d5:14:1d:
                    29:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:68:78:5C:B6:EB:EF:FB:7E:13:E2:E9:A1:41:8B:F8:F9:82:10:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/fe87d53e-d268-37b4-b4ef-d6318b6ded87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.51.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:18:f1:2e:b0:3e:74:74:5f:0e:8d:e3:47:e6:44:1b:bb:5f:
         fb:9e:b7:6a:54:e3:6a:26:d5:d2:8f:a0:c1:36:f4:8b:de:56:
         b7:5c:c7:9e:4d:81:6c:81:3c:b3:f3:07:29:df:5c:0f:98:cd:
         88:38:8c:35:de:10:68:e9:32:44:13:88:ca:5c:fd:a4:58:7d:
         00:ba:67:0c:4c:37:ba:3e:94:dc:b5:e6:10:d2:ce:6d:4f:c3:
         98:8a:0d:60:fd:22:15:b8:a7:d9:1b:99:2f:34:de:35:35:81:
         0b:7f:09:ea:66:03:be:e2:eb:fc:40:69:7b:c8:4e:09:30:5c:
         46:2b:76:2c:ad:ac:31:fe:20:c3:9e:82:0c:00:e5:40:52:c1:
         ad:88:de:14:ea:6c:db:de:34:86:13:9e:09:6a:15:91:eb:7b:
         03:fa:ce:e7:d5:ac:d4:75:5b:76:0e:c3:6e:da:bb:f3:ea:12:
         62:db:04:6d:cf:a5:55:32:98:f5:6e:ad:d3:e1:51:6e:84:75:
         e9:3e:d4:24:5d:8a:f6:ba:a6:f8:1d:8e:e6:87:a3:ed:fa:68:
         26:18:53:24:80:24:87:41:84:72:1a:7b:d6:67:95:b8:e3:a1:
         14:23:d4:0d:96:a8:c8:c8:57:8c:96:d3:8f:d5:ca:08:f7:c1:
         a1:0c:da:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkD9KjBXtSVF8dkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZDZmMWQwMGItYzhkMS00NWNiLTk5YWYtOTBiY2VhMGNjODkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lyqUIwLchmAoMIHc3TQcNvPC2UtlsVoUBUS
/5r5zi4rRB0BVFd1s6SqxBnEtkNuTYeNGcJU+qfot1VhwOXKM5DLwXVF4JTiYguf
eDI2piVESCNl4L70aFc5reS0kUap2VS3abpyesAVNZmizuKUtZBIMJqRECrxVkNp
ZWgkrEUz2g/cOx0wuB57pyxhGARKvYinIPjLE16IJ6hd88PmnyF5XnG3QG9fuLN6
KkxFKxAZYmMy01Mk1XnCTRC/IWUKurMzp8gvO9UoiKnUrGNi7XDlaLSN+pVC11fr
G25w6oMAbniYosRzSkEFhRY+XX2ClhGQwag8AYoDmerVFB0pUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF1oeFy26+/7fhPi6aFBi/j5ghBSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZmU4N2Q1M2UtZDI2OC0z
N2I0LWI0ZWYtZDYzMThiNmRlZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjPXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcY8S6wPnR0Xw6N40fmRBu7X/uet2pU42om1dKPoME29IveVrdcx55N
gWyBPLPzBynfXA+YzYg4jDXeEGjpMkQTiMpc/aRYfQC6ZwxMN7o+lNy15hDSzm1P
w5iKDWD9IhW4p9kbmS803jU1gQt/CepmA77i6/xAaXvITgkwXEYrdiytrDH+IMOe
ggwA5UBSwa2I3hTqbNveNIYTnglqFZHrewP6zufVrNR1W3YOw27au/PqEmLbBG3P
pVUymPVurdPhUW6Edek+1CRdiva6pvgdjuaHo+36aCYYUySAJIdBhHIae9Znlbjj
oRQj1A2WqMjIV4yW04/Vygj3waEM2gs=
-----END CERTIFICATE-----
Generated at Wed Jul 29 22:44:05 2026 by rpki-client