Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0e6ec426-a719-3e67-982c-355a030d61f1.roa
File:                     0e6ec426-a719-3e67-982c-355a030d61f1.roa (raw, json)
Hash identifier:          gy89QeFPHxVLKhkLNEh2PjJr31eFl5ZUFs55ripmaUQ=
Subject key identifier:   90:75:45:B8:78:CD:FE:F8:5E:0D:FD:DE:BC:13:7D:CE:EA:22:FA:A7
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584DE2B5F85FC7C5FF4DA80E8400
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0e6ec426-a719-3e67-982c-355a030d61f1.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     15164
IP address blocks:        104.218.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:f8:5f:c7:c5:ff:4d:a8:0e:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=70eb272c-f84f-4cd7-804a-fde4cf1909af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:73:d2:be:a3:9d:ee:28:05:2d:a8:25:95:32:
                    7c:8b:ec:19:ae:9e:5c:60:49:7d:2b:8d:42:c8:bf:
                    8d:2f:3f:14:aa:d3:21:da:c4:42:16:c4:b0:7e:01:
                    8b:3d:51:fc:c1:84:62:3c:d8:9a:a3:6b:31:00:34:
                    c8:be:8b:75:16:3f:de:e7:47:a8:91:b3:07:ee:cd:
                    ff:d3:88:2e:ef:15:20:6b:ee:73:3c:67:01:38:28:
                    c7:1f:ca:38:93:2c:0c:74:2b:95:19:3d:6e:5a:83:
                    6f:20:4d:32:d7:bc:7f:d0:cb:a9:63:2d:55:00:85:
                    de:f0:4e:5b:b2:b2:11:4b:47:73:1a:da:0b:09:da:
                    c3:7b:8b:a5:7f:cd:12:3d:5a:59:5b:2d:50:74:fe:
                    ac:ba:28:d2:48:33:86:d3:ee:84:61:0b:03:40:d5:
                    75:e9:4e:c2:32:0d:2f:47:ee:13:ee:5f:55:02:d1:
                    da:1f:8f:f3:7b:a4:d8:e8:85:42:9c:1e:0a:3a:96:
                    6d:2d:c4:f6:1e:a4:86:78:a2:c4:82:62:b3:c6:10:
                    fe:c8:a6:30:08:23:10:cb:60:07:0b:8a:80:b8:94:
                    01:1a:18:75:4a:6d:80:12:62:67:0b:d3:d5:58:c2:
                    cf:9f:43:b4:bb:c2:6c:c1:f9:5a:b1:79:c7:b8:c5:
                    bd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:75:45:B8:78:CD:FE:F8:5E:0D:FD:DE:BC:13:7D:CE:EA:22:FA:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0e6ec426-a719-3e67-982c-355a030d61f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:be:d8:13:4d:f3:8b:20:61:d8:7a:1d:24:68:18:eb:f0:c6:
         0a:b1:43:c8:0a:0d:4b:38:75:bf:8c:bf:2f:20:eb:7f:c9:99:
         a2:ec:22:8a:4e:8d:95:c1:96:1a:fc:b8:9b:60:ba:2a:79:63:
         ea:66:ba:d3:45:03:96:f8:ad:d3:7a:ea:ad:39:69:44:62:f8:
         2a:0c:ba:84:21:fd:49:68:11:7e:b3:6e:f7:2a:3e:75:02:68:
         a3:2d:8f:7e:2b:e7:bb:71:a1:eb:7a:68:12:25:6b:2f:60:f6:
         09:32:3c:4d:f9:90:49:82:33:1c:0a:23:b5:f6:82:24:5b:cf:
         17:38:e0:3a:2a:75:26:29:ff:af:90:36:26:13:60:c3:2d:42:
         45:a8:c9:00:e2:3a:24:dc:fe:f5:ef:76:ba:a1:7b:f7:26:33:
         92:2b:48:ee:f1:a3:00:09:70:c3:f3:4f:3c:83:d4:f2:97:5d:
         1a:2e:a3:9e:80:53:b9:a9:2a:07:ca:63:0a:8f:4a:69:5e:78:
         93:bc:05:c8:6f:5a:f1:2f:ba:7a:2c:05:65:12:2f:56:80:6a:
         f9:7b:d1:12:01:f6:1b:50:45:59:45:52:a5:48:ef:87:be:59:
         f2:d4:50:27:38:5a:ae:1c:63:fe:41:6a:2e:37:7b:75:89:45:
         d9:36:04:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:33:39 2026 by rpki-client