Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7de221c7-5944-3adc-a030-be9f096a9c13.roa
File:                     7de221c7-5944-3adc-a030-be9f096a9c13.roa (raw, json)
Hash identifier:          sT/GP0XePEXh9Y9dEmHXntAG8Gcjc4pdisXwcVQs9Fk=
Subject key identifier:   9C:44:7C:7A:6A:35:4B:8C:4F:A2:F1:64:C8:CF:25:C4:E2:CA:11:17
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584EA794F23A6EC5A7ACB1DEA230
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7de221c7-5944-3adc-a030-be9f096a9c13.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15164
IP address blocks:        140.82.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:f2:3a:6e:c5:a7:ac:b1:de:a2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=873b18b5-7c17-4014-a026-5a2fe9b50320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:00:54:74:3b:6a:0d:7d:f0:59:fc:f3:31:
                    33:d1:d7:da:41:01:b1:3f:5c:8c:7a:69:95:96:71:
                    50:e0:23:ca:e7:86:17:dd:10:39:f2:06:f2:93:8f:
                    28:dc:ef:cb:34:da:67:04:b1:93:fb:8d:a9:76:9b:
                    e3:06:4b:4b:9f:7c:8c:d2:7d:5e:3b:89:38:3b:e1:
                    c6:31:f0:7b:c5:5e:0a:c9:b7:59:4b:08:f6:62:ae:
                    60:1c:21:95:07:e3:be:ad:72:39:ca:a2:b3:e5:51:
                    16:5d:ef:ce:87:21:6f:97:fc:99:2c:1d:c5:a6:ec:
                    16:f1:3d:28:50:31:56:29:4e:aa:6f:1a:09:15:5b:
                    1e:bc:63:0f:a7:7f:cf:7d:8b:cb:a0:d9:50:a3:81:
                    58:aa:12:b1:6e:86:a3:22:7e:cf:a4:04:58:b1:af:
                    e5:c4:98:9b:45:f0:df:b6:73:e1:8c:aa:0a:06:01:
                    f5:70:83:e3:8c:a1:43:32:6c:1d:5c:fa:d3:62:f3:
                    21:e8:d8:ac:3b:a3:25:fc:1d:6d:11:fe:24:44:ca:
                    14:c5:74:7b:4e:3a:d6:e0:33:17:57:d7:ce:ca:2d:
                    05:0f:c0:f1:a0:31:6f:cb:46:0f:85:5c:5f:7d:05:
                    59:f0:fc:16:7e:31:e4:2d:9d:c0:ac:e8:a1:19:71:
                    74:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:44:7C:7A:6A:35:4B:8C:4F:A2:F1:64:C8:CF:25:C4:E2:CA:11:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7de221c7-5944-3adc-a030-be9f096a9c13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.82.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:a0:14:4d:19:73:9a:82:27:ef:66:fa:ed:2f:fc:89:be:23:
         40:d8:0a:10:04:3b:de:7e:a2:a7:e3:f8:20:7e:c2:9d:4c:c1:
         30:d9:7e:81:26:d7:62:84:e5:f7:2c:4e:52:54:b5:00:05:73:
         1d:0b:5f:9c:61:db:19:9f:82:67:a0:63:ac:e9:53:9a:f6:8b:
         0b:94:33:80:10:ce:e1:ae:cf:d9:84:e1:b2:51:d4:a1:39:1c:
         2b:5f:e5:ff:bc:61:a7:1d:79:5b:36:16:86:bb:9c:91:8a:74:
         d5:d2:fb:bb:55:36:54:d3:cc:eb:e7:08:fb:80:ca:84:f3:f4:
         93:94:12:10:7c:3e:7b:53:09:f7:a3:b4:95:c1:ce:a8:ce:4c:
         22:27:e6:df:1d:ea:20:77:3c:fb:fa:ee:da:29:ed:d8:28:1b:
         8f:34:e3:00:af:a3:3e:ca:d8:e8:0c:49:74:10:1e:b5:4a:c1:
         04:02:46:be:82:0c:ab:2c:e6:69:8b:11:56:e5:1a:be:08:4e:
         06:73:86:0f:4b:22:9a:fd:ae:7b:82:0a:17:48:05:62:96:ec:
         c0:64:c9:9e:99:54:fd:35:f2:80:2b:ea:d0:d0:d1:54:a5:a3:
         24:b8:e0:af:e8:c7:fb:0d:98:55:e0:3d:21:a8:7d:c8:1a:e9:
         19:98:ee:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:52:47 2026 by rpki-client