Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0fb8d185-8807-3545-b937-e9d0bbfc0285.roa
File:                     0fb8d185-8807-3545-b937-e9d0bbfc0285.roa (raw, json)
Hash identifier:          z4M2+PksWNu1HP4ORKiIes1dVnrZC1Si8KjLopPxBB0=
Subject key identifier:   EE:3E:B0:75:C7:10:99:E4:A7:5E:A8:C7:E4:0E:91:CB:E2:71:A0:EE
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584DF0AB48D1FFD806305C7465E0
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0fb8d185-8807-3545-b937-e9d0bbfc0285.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     15164
IP address blocks:        158.247.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:48:d1:ff:d8:06:30:5c:74:65:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=a149b74b-fe69-44a4-9d93-29a632d7f595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:17:fd:88:4f:c7:04:2e:38:da:34:62:bf:aa:
                    0f:f2:65:6f:54:d2:18:78:1d:ec:ac:29:4f:dc:67:
                    84:b0:77:4d:a6:30:21:5e:9a:a9:b2:33:df:51:59:
                    f7:1e:64:2c:73:52:0e:ba:56:51:78:51:0d:bb:25:
                    79:6a:54:ed:ac:20:df:1c:d1:9d:50:c1:18:33:5e:
                    92:51:70:10:89:4c:46:df:02:a5:1a:80:61:30:18:
                    08:47:63:2c:65:21:93:23:bf:0d:e6:a2:74:2e:2c:
                    dd:95:f3:0c:0e:69:f6:4f:de:4d:7b:9b:bb:3a:96:
                    63:60:79:7f:f8:99:ad:79:70:5e:f3:2d:dc:c5:ad:
                    e6:e0:40:34:ca:43:3e:88:77:f1:e7:fd:1f:0c:3f:
                    6e:9a:c8:32:6d:ad:12:5a:ee:b0:13:35:44:3f:5c:
                    e3:55:af:b8:bb:f2:f9:9d:dc:5d:1e:08:0e:b4:cc:
                    40:cb:a0:ea:6c:16:bd:29:a7:cc:ac:1f:52:b5:7c:
                    38:9c:42:79:08:8a:d3:d5:55:dc:44:60:8b:65:87:
                    9a:d0:24:c8:51:b5:ed:c0:38:89:13:da:3f:06:0a:
                    04:21:e8:56:6b:37:c7:27:a5:71:8f:72:ac:48:25:
                    3f:ca:2f:81:a1:ec:2c:75:ac:31:68:16:da:b4:1e:
                    74:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3E:B0:75:C7:10:99:E4:A7:5E:A8:C7:E4:0E:91:CB:E2:71:A0:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0fb8d185-8807-3545-b937-e9d0bbfc0285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.247.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:4d:d1:45:d6:72:02:0a:c0:76:ec:d6:40:c0:e8:72:0f:78:
         7c:19:e2:d1:74:d5:e2:a7:2f:71:67:96:1c:c6:9d:72:74:2a:
         0a:01:9f:dc:fe:02:23:8e:f2:6b:9d:6d:40:ca:97:90:77:7e:
         85:81:84:79:51:18:97:7b:81:42:4a:48:91:96:62:0b:4b:37:
         bd:00:97:3b:5d:ee:46:c2:07:53:85:ca:c2:ff:33:ae:27:95:
         f5:f5:c9:27:87:44:f6:ab:7b:aa:6a:c1:df:b0:64:14:a1:46:
         3a:b1:1c:9f:45:2d:6c:4c:8e:78:b6:9a:61:3d:cf:01:92:b0:
         41:4e:d8:cc:04:79:ea:02:81:1a:cd:34:aa:f5:c1:d8:9a:af:
         34:74:7e:60:50:61:de:38:24:ec:79:14:79:4d:af:a1:b4:84:
         13:1c:18:4a:9c:6d:e6:82:5b:01:ae:06:2c:a0:ce:05:d0:fb:
         1d:61:2a:e3:ff:ff:04:d4:4d:9b:8d:4a:43:7f:16:cc:45:55:
         7e:8f:e6:ff:cb:8e:6f:7b:6f:12:7c:44:5a:f0:28:41:87:53:
         a2:ce:f2:23:b5:1f:5c:5a:62:6f:b7:a5:5a:17:93:c9:4a:5d:
         78:b6:02:e3:af:e8:58:19:2f:43:70:9d:c0:0b:56:37:d9:38:
         72:40:4c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:47:03 2026 by rpki-client