Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/675bfc70-a6f7-3a74-a6cc-603c8c73831b.roa
File:                     675bfc70-a6f7-3a74-a6cc-603c8c73831b.roa (raw, json)
Hash identifier:          /lN2HI5v92Wnt8rDPuuSmps1araZw+CurjJW9uP4caI=
Subject key identifier:   F8:E8:58:00:85:6E:51:83:61:E0:14:18:09:84:3F:27:73:F2:8C:3E
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584CC77724596348BD8F2720AD00
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/675bfc70-a6f7-3a74-a6cc-603c8c73831b.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     15164
IP address blocks:        140.82.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:24:59:63:48:bd:8f:27:20:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=d533f975-930b-4b02-89f1-9bd7a2946646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d9:b7:6f:66:0c:f1:7b:77:d4:51:bf:55:a3:
                    2b:d3:3a:35:64:44:32:d2:94:c4:20:7c:74:0a:ec:
                    9f:7e:05:66:a6:8a:c9:1b:6f:f9:25:42:59:2e:88:
                    e7:f7:5d:63:d4:30:d2:7e:8f:d2:8d:88:ac:fe:96:
                    57:42:62:04:87:4c:c3:bf:fa:be:d3:31:60:7f:69:
                    f5:c0:02:31:ef:a5:81:4f:47:08:f3:d2:4f:05:c1:
                    e6:0a:31:c2:1f:23:12:9b:d3:bf:41:dd:52:a3:89:
                    d5:ff:92:11:17:bc:91:93:5c:22:1c:71:eb:80:4b:
                    cf:6b:5a:b7:9c:b4:76:5f:84:72:05:ca:86:52:72:
                    53:2d:18:16:2c:74:56:a9:ba:e1:e7:4b:da:c6:66:
                    da:a2:dd:d7:03:47:2f:41:5a:6c:6e:05:be:d6:f0:
                    9a:8b:8f:80:a2:0d:f5:79:80:6d:56:be:fd:d4:6a:
                    2d:36:46:44:86:c4:41:36:e4:97:4e:d0:29:b9:4c:
                    2b:ec:a0:b4:90:58:72:af:87:62:87:3d:19:db:69:
                    da:e9:e6:06:1a:3d:50:b1:35:3a:68:92:8b:1c:42:
                    e1:f7:46:3e:66:38:b4:56:e7:4c:bd:14:a5:83:0e:
                    e8:24:85:cb:e6:43:ca:75:59:88:bd:2a:af:50:91:
                    ec:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E8:58:00:85:6E:51:83:61:E0:14:18:09:84:3F:27:73:F2:8C:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/675bfc70-a6f7-3a74-a6cc-603c8c73831b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.82.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:c2:88:1e:f0:1c:b7:ad:1a:d0:88:bf:97:92:6d:31:69:f9:
         f8:3d:64:59:17:cb:2e:c8:09:a1:b0:ac:c2:60:f9:77:af:3a:
         15:31:51:fe:2b:0e:1e:00:a5:47:d0:de:db:25:e4:52:88:2c:
         84:d3:4a:16:2a:7e:5c:82:4d:ee:6e:ab:75:97:54:97:df:78:
         07:11:28:88:43:ce:e4:d9:05:df:fc:b1:06:fa:fc:fc:be:73:
         b6:54:53:e1:2a:22:76:95:fd:84:58:5e:8c:70:59:c2:ed:4f:
         73:28:4e:71:a3:be:bd:34:11:e0:ca:fb:69:7a:3e:a2:09:12:
         ce:57:f5:45:6d:53:5f:68:73:f0:0c:8d:31:7c:f4:d5:4d:78:
         a0:69:d9:c6:2b:8e:6a:1b:bb:f0:e0:41:df:a8:6e:bc:98:c0:
         77:f7:62:57:88:2d:8e:d8:12:df:1a:f2:9c:0c:c9:2a:3f:4c:
         94:b9:89:2b:68:53:cb:61:87:1d:99:84:98:21:83:d6:86:30:
         4d:fa:a6:38:f9:2c:6e:32:7f:79:40:4d:94:f9:0d:25:45:5d:
         67:4f:b7:ca:db:01:cf:ca:3f:9a:d7:b9:44:d3:50:f3:67:e2:
         7d:6e:fd:04:c6:42:36:91:e5:59:fe:90:77:8b:30:e8:50:65:
         c7:fe:c0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:14:49 2026 by rpki-client