Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91fa892b-4aa8-3064-91a1-9cc04154d1ad.roa
File:                     91fa892b-4aa8-3064-91a1-9cc04154d1ad.roa (raw, json)
Hash identifier:          HoAdp8rZgfs5eNxMix6qpMPMgXkMzqwJn7z4FIs8rgA=
Subject key identifier:   4C:D4:0E:33:6B:28:B1:4B:E3:01:A8:1A:1C:60:DE:AA:52:84:1A:03
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584EA79502E9AB585A199A144F80
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91fa892b-4aa8-3064-91a1-9cc04154d1ad.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15164
IP address blocks:        147.136.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:02:e9:ab:58:5a:19:9a:14:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7930ee53-cc55-4bd4-9640-06d75574c322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:97:a4:e7:50:ef:09:c8:7a:8c:72:95:d3:58:
                    d3:9f:f0:55:39:d4:be:4f:cc:86:48:c8:0b:77:0c:
                    63:7d:57:5f:25:9b:fc:e1:84:b3:4a:44:d4:bc:9b:
                    d4:9f:70:c1:4a:52:70:d7:72:9c:fc:13:fb:2b:17:
                    57:91:15:3c:8d:cd:13:0e:3d:41:9c:88:24:7e:f3:
                    ee:dd:69:6e:7d:48:8d:28:38:79:09:dd:c7:93:04:
                    09:54:2b:9c:6e:91:97:36:ca:a6:a3:e7:d2:ca:92:
                    9d:6d:7b:1c:17:f8:92:85:91:6c:d1:a2:de:6e:92:
                    da:94:86:14:d4:27:72:3c:a2:67:2c:a3:8a:32:9e:
                    21:e7:e2:1b:bb:15:5c:62:3f:2d:fa:5e:16:ab:43:
                    96:fa:de:5f:e0:00:b8:ab:58:e7:7f:69:a2:11:51:
                    ee:de:d5:5c:5e:51:50:c5:1a:ac:49:a8:6f:40:a4:
                    ea:02:ff:58:47:e5:6d:43:4c:09:09:f6:31:a2:5d:
                    ca:7e:02:fd:79:09:16:82:77:8b:6f:e9:e8:10:66:
                    e7:b2:91:0e:95:bb:6b:03:b6:13:1b:f6:76:6f:57:
                    fb:98:5d:b8:00:95:42:80:fd:d9:67:aa:c2:ed:b3:
                    53:38:df:c9:6f:61:29:74:d0:cd:20:39:09:f3:bc:
                    d1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D4:0E:33:6B:28:B1:4B:E3:01:A8:1A:1C:60:DE:AA:52:84:1A:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91fa892b-4aa8-3064-91a1-9cc04154d1ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.136.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:6c:eb:cf:90:1e:83:e8:56:31:d6:1b:96:03:cf:ba:df:b5:
         e2:97:da:ba:23:b7:49:2b:19:6b:00:46:7e:46:f8:0b:e4:23:
         d4:e3:e7:ac:42:b2:6f:91:24:c3:a8:65:ae:e0:cf:a0:28:06:
         5a:ee:d7:87:34:fa:85:c2:6f:fe:b1:be:01:6a:22:09:c4:25:
         6e:69:26:9d:f8:3d:3d:3b:de:f6:80:ce:a3:d9:51:e7:4e:ce:
         05:b5:fb:bf:a4:98:c1:7b:4d:94:97:4c:63:e5:de:c6:91:df:
         59:7f:af:5b:7f:21:79:9b:c3:4f:ff:c7:8e:7b:bd:d3:da:f0:
         40:fe:f4:65:90:03:12:d7:a0:b0:07:3e:26:d5:d1:85:95:7e:
         70:df:c8:86:8b:94:76:1d:54:41:18:01:f1:32:95:68:2e:6c:
         ab:7d:9c:42:84:6b:48:af:e3:b8:5c:a7:b6:73:ac:e8:58:6e:
         44:ac:52:66:a2:93:51:5d:e0:8c:67:61:85:3a:76:6c:b1:b4:
         b3:c3:73:c0:a2:53:f9:4a:19:bf:fe:30:dc:00:f7:3e:27:36:
         20:d0:94:31:5c:b1:12:35:fa:b9:b7:3b:12:24:be:21:91:2f:
         ea:a7:ac:2a:f0:95:51:4c:76:04:97:f8:7c:96:19:bc:42:c5:
         16:de:97:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:02:34 2026 by rpki-client