Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/91f5ede9-1fd1-311e-9f3b-af971f1ec1b2.roa
File:                     91f5ede9-1fd1-311e-9f3b-af971f1ec1b2.roa (raw, json)
Hash identifier:          s90RFLjgaftbtjLXh+euqn6qldDonapABbBrs9z1PCk=
Subject key identifier:   B0:C1:6E:9E:49:52:75:01:6D:F6:F8:AF:5C:17:BC:7A:86:EB:63:66
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584ED86498B0AFEDF76B45759740
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/91f5ede9-1fd1-311e-9f3b-af971f1ec1b2.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     55256
IP address blocks:        158.95.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:98:b0:af:ed:f7:6b:45:75:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=021e8819-a943-4e56-98d2-0c140b42de0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:12:d0:e6:86:54:8b:e9:e4:bb:29:20:b9:4f:
                    12:ff:32:c5:16:ce:40:ec:12:9a:3e:3f:49:7e:01:
                    60:6c:5b:56:eb:cf:17:3b:9b:73:62:ea:82:0f:f8:
                    7f:a0:97:e8:2e:21:52:01:b2:8b:32:a2:7f:41:56:
                    49:0c:2d:6c:83:ed:c0:9b:71:c6:b5:0c:aa:91:b8:
                    12:0a:a4:b4:24:32:14:3b:1a:02:3b:67:51:66:4b:
                    ac:e0:f4:88:1e:31:48:a9:88:1a:35:f9:73:d9:98:
                    45:a7:45:51:f1:46:8f:54:a8:6d:6e:c2:e2:d0:e5:
                    43:ff:83:92:c4:0b:4b:f2:67:0a:81:42:19:a2:b8:
                    4d:09:79:9d:d4:fe:5b:c2:13:ca:51:ad:97:cf:75:
                    af:89:64:d1:2a:43:d7:b9:fc:29:8b:d4:90:7f:ea:
                    08:69:e9:22:59:b8:54:0d:ba:10:5f:bb:2c:d5:70:
                    d0:76:3c:72:e1:0b:d2:da:8d:22:69:39:5e:fd:ea:
                    73:9b:4e:86:62:45:ca:8e:d2:68:c8:b6:37:78:41:
                    0a:45:ec:b8:7d:cb:c7:ba:cb:9a:19:27:e7:30:ed:
                    bb:d4:1c:93:59:18:61:91:73:fa:df:c3:a6:a2:5c:
                    8a:cd:d7:2c:4d:38:9e:d1:95:7d:da:85:cb:45:a5:
                    45:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C1:6E:9E:49:52:75:01:6D:F6:F8:AF:5C:17:BC:7A:86:EB:63:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/91f5ede9-1fd1-311e-9f3b-af971f1ec1b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:2f:0c:4c:49:59:92:bf:16:0e:7f:81:b1:4f:39:a7:34:9c:
         bc:e8:a5:38:b7:c8:f1:e0:c1:86:aa:3d:e8:5b:c6:0c:92:26:
         06:28:f5:50:8c:7d:d0:ac:23:80:61:bc:91:41:a0:ae:5b:75:
         bb:3c:3b:1c:b0:d4:e9:bd:4e:4b:63:f1:d5:1d:c5:6b:c0:18:
         dd:69:e1:bf:14:6f:11:92:69:1d:66:99:f8:3d:37:3f:a3:69:
         fa:6b:eb:96:61:55:85:85:aa:29:cf:2a:f8:96:f3:0c:cb:0b:
         69:93:d6:7f:f3:a9:d5:cf:77:f4:06:50:c0:77:5c:ef:6e:9f:
         18:a3:0b:c8:e7:51:52:9f:ff:21:54:60:c1:bd:14:99:2b:da:
         83:3a:e0:84:20:bd:cc:5e:53:f5:f1:6d:bb:8a:9e:60:85:db:
         cf:fe:91:76:69:16:78:b8:9d:bf:5d:40:e9:ef:0e:bb:8f:80:
         27:49:a8:02:6d:f6:5a:92:2c:20:bf:d1:f8:1f:d3:7c:17:e2:
         2d:23:9f:90:87:cd:96:d9:e3:30:6d:19:bc:a2:a3:5b:c6:92:
         d5:d8:c9:18:87:0b:87:12:e9:f2:2d:3e:68:8b:a5:39:8c:c0:
         a5:5a:c8:ca:9d:ab:e1:63:5b:07:b9:b1:01:a7:0c:0a:4f:c5:
         2f:df:79:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:46 2026 by rpki-client