Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/34af5eb6-f03b-3ebd-bcc1-9c4e3010903a.roa
File:                     34af5eb6-f03b-3ebd-bcc1-9c4e3010903a.roa (raw, json)
Hash identifier:          QbejiG48bkiHwm/c/sLSfKzri1LTH7IqDhI3Id1FOy8=
Subject key identifier:   1C:C0:2C:99:6E:0A:A4:EF:5E:2E:CE:25:D0:A9:2E:91:25:FE:4C:B7
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584DF0AB498B6738DA3C10884180
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/34af5eb6-f03b-3ebd-bcc1-9c4e3010903a.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     15164
IP address blocks:        173.244.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:49:8b:67:38:da:3c:10:88:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=ffab6a92-94de-4f28-af55-8f22e438aa57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e9:70:62:b3:8f:a3:32:2a:7f:76:29:46:58:
                    b3:5f:49:57:0f:87:a7:de:55:02:9d:16:f3:f6:73:
                    ae:4a:21:e3:0c:16:ce:5a:e8:28:63:54:19:35:7f:
                    bd:ca:e6:3a:9d:c3:b9:d0:c7:d5:4b:e8:3b:93:9f:
                    c5:db:6b:66:d4:7d:d9:19:75:ad:4e:86:77:36:b6:
                    3c:a7:cc:80:b5:43:d8:6b:c0:37:fe:92:02:26:c5:
                    6f:2a:1a:8d:3b:c1:48:4b:e2:bb:d6:1a:b4:d4:5a:
                    8b:ea:bc:8a:bd:99:0c:df:0f:3c:e1:4f:82:05:fe:
                    db:4d:8b:64:e3:4a:e7:ef:6c:0f:b9:d8:4c:b7:86:
                    95:d3:9f:c9:cf:5d:52:53:22:17:14:96:4e:7d:fc:
                    dd:f7:eb:2a:d4:9d:f7:0b:9f:de:1c:a6:e9:15:ba:
                    5b:1a:3a:49:75:3d:42:0f:f7:f6:ac:41:de:e2:34:
                    dd:57:ed:8d:8e:36:04:14:84:b3:2b:3f:b5:ad:58:
                    c2:8c:43:69:9c:f4:fd:e5:cc:bd:2c:a7:30:be:00:
                    84:e0:6b:ce:ee:65:2b:a4:81:82:ff:90:63:7b:bb:
                    8b:16:fd:dc:da:9c:da:a4:70:d1:51:24:d2:21:b4:
                    29:ca:b5:19:f3:75:42:2e:aa:cd:6e:dc:0e:c3:27:
                    4c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C0:2C:99:6E:0A:A4:EF:5E:2E:CE:25:D0:A9:2E:91:25:FE:4C:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/34af5eb6-f03b-3ebd-bcc1-9c4e3010903a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e9:ed:d9:50:3d:f4:39:3b:be:76:7f:d3:30:fd:1b:b7:50:
         0f:88:75:08:51:90:88:da:a3:d6:12:24:02:2b:19:f7:5a:16:
         f9:db:6e:94:18:0d:87:bd:41:0c:b1:b8:77:32:31:9c:4d:21:
         4b:46:cf:41:80:3e:7e:7f:f8:f9:68:22:25:72:5f:cb:d8:3d:
         61:cf:18:95:fd:d2:69:f7:95:5f:d8:c5:a0:20:52:91:75:51:
         b4:e8:41:7c:45:d3:43:67:de:56:e9:72:ea:f3:24:de:6b:0d:
         e9:ff:3c:88:78:d6:61:60:d3:65:cb:52:44:61:24:1a:fc:29:
         57:ed:a3:02:95:c1:ae:2d:ae:59:ba:6b:e0:b4:bf:bd:2d:ff:
         8c:35:89:d1:2c:43:c1:bd:f0:9a:67:de:a5:f4:8f:64:4d:a1:
         29:ff:f0:95:1b:3b:c3:cf:b1:69:2f:06:f4:15:88:ad:8c:95:
         bd:4f:9b:ce:c8:c1:7b:35:49:9f:2c:73:fa:d7:41:4b:c7:e6:
         5f:b7:ee:f6:f5:52:c9:53:8f:1a:17:8d:6d:8e:0c:2d:8c:c2:
         0d:90:a8:1c:de:66:8b:9c:4b:43:9f:00:87:87:00:c5:0d:dd:
         f7:6a:c0:9f:42:d4:6f:14:46:8a:57:20:a1:bb:df:cf:dc:fb:
         af:e9:1c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:21:45 2026 by rpki-client