Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/27f09594-e78a-3022-b223-cd9ae76c00da.roa
File:                     27f09594-e78a-3022-b223-cd9ae76c00da.roa (raw, json)
Hash identifier:          7dyYLeE5BEMU+2bQVPAgqbVdr0KpnmW0KVpPgNWe9fo=
Subject key identifier:   71:F2:8D:9D:3E:B4:B0:2E:29:4D:84:27:89:F3:A6:6A:90:6E:26:B1
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584F49731D9200940DE750765480
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/27f09594-e78a-3022-b223-cd9ae76c00da.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15164
IP address blocks:        138.199.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:1d:92:00:94:0d:e7:50:76:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d4addeca-334a-4ba4-991f-7176fec0c7e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:07:11:96:8d:1a:15:6b:e3:e8:2f:cb:91:51:
                    be:3f:26:a5:f6:5a:98:f0:a2:6f:9f:4b:e1:11:e3:
                    d4:d6:dd:86:e2:67:2a:dc:6f:ab:a4:87:b0:52:45:
                    75:2a:2d:e6:bb:fb:90:c2:55:ae:86:53:a1:f2:9f:
                    39:03:fe:78:bc:0e:2e:17:5f:9d:56:32:5e:ad:68:
                    5e:e3:30:cc:88:d0:72:ae:2c:49:f7:43:11:79:3f:
                    1b:27:5e:eb:41:5b:e3:96:ef:2d:38:dc:b1:47:62:
                    87:93:89:67:da:54:88:2a:94:19:6a:6b:00:8f:58:
                    f8:fb:6b:0a:25:aa:a6:5c:54:5a:38:c5:ba:fe:91:
                    5a:44:7c:7c:33:cd:27:da:63:5c:8a:28:75:0d:0b:
                    9a:2c:0a:45:04:de:3d:d4:a0:8a:f8:6c:26:5c:70:
                    34:04:8f:8d:43:b8:40:ca:64:b2:8d:34:73:78:50:
                    28:43:e4:88:34:31:86:0d:b2:a5:fd:31:94:bb:05:
                    c8:bf:c9:45:05:cc:d5:03:3b:28:d7:35:d3:69:c0:
                    90:53:84:7a:ee:e1:89:66:43:22:cd:c9:e3:4c:c7:
                    c0:d8:b7:82:3d:46:48:85:fc:26:29:45:17:ae:41:
                    3a:ab:4e:8b:e0:58:2b:0a:a7:e7:af:1d:23:1e:f4:
                    11:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F2:8D:9D:3E:B4:B0:2E:29:4D:84:27:89:F3:A6:6A:90:6E:26:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/27f09594-e78a-3022-b223-cd9ae76c00da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.199.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:48:77:aa:8d:7c:8c:42:49:3b:9b:31:0b:33:68:7e:40:8f:
         f9:31:35:fb:d2:54:fb:5d:61:57:c5:c0:c6:a3:6f:9d:bc:46:
         a8:d0:e1:0c:37:3a:22:54:97:2c:25:f1:76:d3:ad:20:c5:98:
         59:a5:d8:d1:f2:33:05:ec:0f:6e:31:24:09:0d:79:85:84:5a:
         d0:ee:a5:96:60:f6:88:86:29:bf:ff:87:ca:0e:8a:93:3b:be:
         34:35:b9:60:af:5b:7f:55:82:45:45:f0:79:92:c1:91:69:da:
         0d:53:54:32:29:91:2e:f7:3d:76:b1:2e:ff:e9:b0:f9:80:18:
         e1:14:86:2b:d1:68:bc:8d:be:96:df:89:a6:f9:3a:32:26:17:
         b5:65:83:fa:15:70:76:be:54:7c:52:4b:db:23:2b:df:16:8c:
         77:2b:2c:ee:18:7e:98:bc:a7:4f:5f:06:fb:37:a8:ff:f8:96:
         c0:b1:55:7d:2e:50:46:9b:b0:fa:a7:61:93:db:b3:c5:68:9c:
         7d:b6:5b:c9:aa:11:4d:e7:76:c3:69:73:44:8e:58:98:84:34:
         32:8e:71:3c:6e:ae:3b:75:87:56:e4:6f:97:37:77:f3:41:a9:
         13:33:7f:7f:01:2d:39:bc:cd:48:ba:c7:09:d2:be:87:d2:8c:
         f2:fc:4a:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcx2SAJQN51B2VIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZDRhZGRlY2EtMzM0YS00YmE0LTk5MWYtNzE3NmZlYzBjN2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgcRlo0aFWvj6C/LkVG+Pyal9lqY8KJvn0vh
EePU1t2G4mcq3G+rpIewUkV1Ki3mu/uQwlWuhlOh8p85A/54vA4uF1+dVjJerWhe
4zDMiNByrixJ90MReT8bJ17rQVvjlu8tONyxR2KHk4ln2lSIKpQZamsAj1j4+2sK
JaqmXFRaOMW6/pFaRHx8M80n2mNciih1DQuaLApFBN491KCK+GwmXHA0BI+NQ7hA
ymSyjTRzeFAoQ+SINDGGDbKl/TGUuwXIv8lFBczVAzso1zXTacCQU4R67uGJZkMi
zcnjTMfA2LeCPUZIhfwmKUUXrkE6q06L4FgrCqfnrx0jHvQRfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHHyjZ0+tLAuKU2EJ4nzpmqQbiaxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMjdmMDk1OTQtZTc4YS0z
MDIyLWIyMjMtY2Q5YWU3NmMwMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBisdwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABdId6qNfIxCSTubMQszaH5Aj/kxNfvSVPtdYVfFwMajb528RqjQ4Qw3
OiJUlywl8XbTrSDFmFml2NHyMwXsD24xJAkNeYWEWtDupZZg9oiGKb//h8oOipM7
vjQ1uWCvW39VgkVF8HmSwZFp2g1TVDIpkS73PXaxLv/psPmAGOEUhivRaLyNvpbf
iab5OjImF7Vlg/oVcHa+VHxSS9sjK98WjHcrLO4Yfpi8p09fBvs3qP/4lsCxVX0u
UEabsPqnYZPbs8VonH22W8mqEU3ndsNpc0SOWJiENDKOcTxurjt1h1bkb5c3d/NB
qRMzf38BLTm8zUi6xwnSvofSjPL8Suc=
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:20:53 2026 by rpki-client