Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/09123ace-0161-3859-8f63-f647fb1bbe09.roa
File:                     09123ace-0161-3859-8f63-f647fb1bbe09.roa (raw, json)
Hash identifier:          Z3zUbnjC6G2HF4p+BdyVkrx6JzD5TFr22P73jgIpEOg=
Subject key identifier:   15:D3:B4:27:52:7C:8F:A6:E9:08:9E:5F:8F:E3:8E:D2:20:F0:07:DE
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584EA79502DE461C0A16E0192E00
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/09123ace-0161-3859-8f63-f647fb1bbe09.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15164
IP address blocks:        140.82.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:02:de:46:1c:0a:16:e0:19:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=13f53f9b-af46-4a0a-ab81-8b4f567848d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:70:d5:81:5a:26:8e:69:55:ac:b9:fc:22:
                    71:81:7c:85:c3:2e:e9:93:0d:f1:90:58:0b:57:fc:
                    6c:eb:08:17:81:db:74:ef:1b:2e:24:d6:6c:1f:5d:
                    3f:73:8d:1f:d3:d6:50:63:b5:8e:c9:3e:a5:51:79:
                    44:57:36:ef:26:09:d1:32:4d:de:1e:77:89:8e:51:
                    13:b2:44:80:b7:7a:a7:99:a6:37:d3:4f:75:ee:a1:
                    cd:92:e7:7e:d6:90:ae:1f:a6:b0:34:7c:b3:2b:4e:
                    df:6d:bc:77:07:ab:3b:11:53:ec:c7:12:51:c8:ec:
                    a7:a0:ac:97:7b:b8:78:30:41:a8:d7:4a:0c:e1:84:
                    59:60:12:5a:62:84:69:b0:ed:de:0f:b6:c8:d6:18:
                    6f:f0:82:4e:ae:ee:fa:0f:0e:5d:ba:56:68:1d:0b:
                    f2:35:11:ee:ad:c3:64:3d:14:58:71:17:64:0d:3c:
                    9d:5c:ca:1c:60:fd:1f:aa:61:d9:2a:e8:45:ae:a3:
                    e7:98:c8:3f:b1:0a:39:53:1f:0c:20:51:89:26:ae:
                    e1:79:2b:ba:34:9e:5d:62:7e:7e:7f:63:d2:c7:7a:
                    1f:30:87:7d:72:53:06:27:31:f2:c9:a9:6f:98:16:
                    61:06:47:a6:be:3f:2b:1a:1b:42:1b:23:11:ea:97:
                    0c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D3:B4:27:52:7C:8F:A6:E9:08:9E:5F:8F:E3:8E:D2:20:F0:07:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/09123ace-0161-3859-8f63-f647fb1bbe09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.82.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:fc:28:ee:9f:66:e7:f7:03:fa:47:fe:a9:91:0e:71:8b:a3:
         6b:a3:6a:cc:e4:95:06:fe:aa:07:40:17:b7:6f:48:af:7c:ae:
         c1:bb:12:51:63:ae:fb:a7:8d:94:60:0b:16:8c:ff:39:1b:f0:
         08:d5:40:ae:1d:7c:96:15:eb:d8:a9:ab:36:5b:5d:87:53:46:
         bd:e1:87:84:a4:a3:8f:03:62:9a:ab:a1:ce:e9:0b:8e:8e:c1:
         89:2f:e1:54:30:64:43:9f:7c:59:83:bc:18:61:54:4f:c5:82:
         b8:92:4c:72:83:e3:5a:89:f0:9d:a3:f8:79:58:c0:44:5d:b8:
         fa:a7:75:cb:08:06:ac:81:22:ae:72:d8:47:27:8b:14:b2:b6:
         f7:1d:de:e0:24:16:f3:62:56:03:91:e1:28:8e:97:2d:6a:d2:
         6b:eb:0b:14:e8:01:31:47:b3:11:9c:1a:bd:69:eb:0c:2c:b5:
         2c:0b:c3:91:73:2a:7c:d3:69:b1:af:05:d6:e6:1f:dc:6d:32:
         7c:03:44:3d:1e:52:70:da:bd:59:fd:23:c5:e0:0b:2b:65:5e:
         28:d1:fc:c8:23:0a:3a:65:08:c0:ca:55:b8:df:90:75:58:5b:
         da:31:68:db:05:66:30:db:cc:83:e0:64:9a:2d:51:37:d7:98:
         8e:9d:83:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlQLeRhwKFuAZLgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MTNmNTNmOWItYWY0Ni00YTBhLWFiODEtOGI0ZjU2Nzg0OGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteZw1YFaJo5pVay5/CJxgXyFwy7pkw3xkFgL
V/xs6wgXgdt07xsuJNZsH10/c40f09ZQY7WOyT6lUXlEVzbvJgnRMk3eHneJjlET
skSAt3qnmaY300917qHNkud+1pCuH6awNHyzK07fbbx3B6s7EVPsxxJRyOynoKyX
e7h4MEGo10oM4YRZYBJaYoRpsO3eD7bI1hhv8IJOru76Dw5dulZoHQvyNRHurcNk
PRRYcRdkDTydXMocYP0fqmHZKuhFrqPnmMg/sQo5Ux8MIFGJJq7heSu6NJ5dYn5+
f2PSx3ofMId9clMGJzHyyalvmBZhBkemvj8rGhtCGyMR6pcM2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBXTtCdSfI+m6QieX4/jjtIg8AfeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMDkxMjNhY2UtMDE2MS0z
ODU5LThmNjMtZjY0N2ZiMWJiZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFKsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEf8KO6fZuf3A/pH/qmRDnGLo2ujaszklQb+qgdAF7dvSK98rsG7ElFj
rvunjZRgCxaM/zkb8AjVQK4dfJYV69ipqzZbXYdTRr3hh4Sko48DYpqroc7pC46O
wYkv4VQwZEOffFmDvBhhVE/FgriSTHKD41qJ8J2j+HlYwERduPqndcsIBqyBIq5y
2EcnixSytvcd3uAkFvNiVgOR4SiOly1q0mvrCxToATFHsxGcGr1p6wwstSwLw5Fz
KnzTabGvBdbmH9xtMnwDRD0eUnDavVn9I8XgCytlXijR/MgjCjplCMDKVbjfkHVY
W9oxaNsFZjDbzIPgZJotUTfXmI6dgzQ=
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:03:45 2026 by rpki-client