Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/3b72b9a7-c4a6-319b-9831-aa287f623b34.roa
File:                     3b72b9a7-c4a6-319b-9831-aa287f623b34.roa (raw, json)
Hash identifier:          uE1jB+Ucwd+FlzvpwyA5eA2RwWYXnXVy7pF4RMeozwg=
Subject key identifier:   BA:94:15:92:DE:87:89:72:A2:B0:26:A6:2E:B6:7B:1C:0E:A2:7A:43
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584EA79501E3D16D7B24AC8E95C0
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/3b72b9a7-c4a6-319b-9831-aa287f623b34.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15164
IP address blocks:        199.200.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:01:e3:d1:6d:7b:24:ac:8e:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=60fd617b-78ad-4c59-a2cc-a098371dab88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e8:9c:18:1e:df:90:f1:4b:6e:a9:d8:65:36:
                    f2:de:9d:77:f1:93:4b:86:09:c6:4f:37:d8:86:4b:
                    58:f1:2e:36:78:66:ce:61:ff:03:3a:de:d1:15:74:
                    6b:76:6e:be:b5:ac:6b:21:c7:43:42:a1:89:af:8e:
                    dc:7d:29:57:f1:31:78:ad:96:de:64:70:ad:08:26:
                    03:43:57:aa:25:f5:95:9a:32:25:93:5c:e5:dd:b1:
                    ef:7c:b5:69:52:0c:83:fc:1e:91:e6:0c:df:a3:60:
                    32:27:46:66:6c:9a:79:31:f1:e1:93:dd:f1:a8:60:
                    ab:05:f8:8f:5a:9e:02:c0:73:34:70:f1:73:10:2f:
                    d1:e7:f2:ca:3b:b8:16:35:6b:fa:1f:47:9c:3a:28:
                    9a:95:6a:a6:60:43:e0:91:87:5a:dd:c4:29:08:be:
                    9a:94:b6:a1:1b:5b:42:05:7b:00:d0:77:0b:37:4c:
                    48:9f:0c:88:a8:5b:f6:c3:6a:62:8a:bf:07:4e:8c:
                    3c:62:3a:bb:aa:b0:ea:75:02:a7:69:3b:a5:69:3a:
                    9e:98:5e:5c:36:90:3d:29:dd:c6:bb:8e:b9:f8:31:
                    5d:52:fe:33:46:99:50:3b:4a:48:12:3f:ff:65:88:
                    24:27:24:fa:24:29:45:b0:0e:8f:90:e4:78:7c:e2:
                    16:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:94:15:92:DE:87:89:72:A2:B0:26:A6:2E:B6:7B:1C:0E:A2:7A:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/3b72b9a7-c4a6-319b-9831-aa287f623b34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.200.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:c4:e5:d2:87:a2:6c:61:65:ab:d9:0b:40:fb:cd:4c:75:ae:
         65:b2:af:9f:13:e0:70:8a:39:52:6d:be:d0:33:42:eb:a2:35:
         1f:d9:0d:f6:05:51:86:18:d6:e1:54:21:7a:5d:54:14:11:6e:
         3f:5a:83:10:5d:b3:6e:55:c7:92:41:b1:78:dc:11:de:ff:ab:
         3c:8f:b9:fe:f1:7f:a4:c1:82:13:b6:49:67:34:21:32:26:4f:
         d8:7b:ae:b2:5b:f1:f3:c1:7d:f6:d7:64:44:e8:4b:b1:ea:d5:
         1d:a7:e9:e4:82:e8:b9:08:d4:b1:b1:c0:c1:1d:9a:ba:72:f3:
         83:b3:2d:dd:38:66:6c:97:48:cd:5f:4a:a8:dc:0e:37:61:b5:
         52:ba:45:e0:4a:5f:49:ef:fb:d1:a9:7f:f8:44:6f:3f:23:cc:
         b8:d8:c0:a2:c0:80:ad:96:29:93:78:d2:2f:f8:ed:3a:86:50:
         17:93:b4:72:43:d4:7b:36:70:ed:39:b9:66:14:8d:cc:3a:6b:
         9a:c0:62:76:d8:b4:89:3d:72:03:cd:3e:63:c4:7d:e4:59:37:
         13:12:97:96:78:04:64:72:91:be:dd:dc:7a:d4:94:0a:cc:ca:
         b4:7d:7c:9c:a9:49:ce:a7:0e:9e:c2:2f:f5:d7:bb:ca:aa:da:
         89:77:60:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:52:52 2026 by rpki-client