Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/bc236c66-82cd-3d62-b6a4-ceb6d13bf1a8.roa
File:                     bc236c66-82cd-3d62-b6a4-ceb6d13bf1a8.roa (raw, json)
Hash identifier:          NGTtNV9/dZzPnOxpuuxqnX4S+cbS+RjxG1m5taqOrDQ=
Subject key identifier:   E8:0B:9C:02:E2:AF:CB:0F:F3:4D:63:A7:10:BF:35:CF:45:F7:8C:B9
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584D4D5A9935652D743E141B0B80
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/bc236c66-82cd-3d62-b6a4-ceb6d13bf1a8.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     15164
IP address blocks:        205.184.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:99:35:65:2d:74:3e:14:1b:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=fd96fd01-38b5-4685-ac89-5735ba8e2777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3b:79:45:71:77:fd:11:73:e5:c0:76:b9:01:
                    01:50:fe:c1:62:fe:9a:5e:a6:57:d0:79:f5:99:08:
                    cb:3e:f4:ab:29:26:f3:c2:16:99:f4:98:d6:0d:71:
                    b0:ee:a9:4a:0c:29:f6:8c:7b:1f:cb:56:a3:d1:60:
                    ec:f3:08:64:74:f2:20:4b:35:29:9c:9f:0d:05:9c:
                    23:cc:de:5c:dc:ec:ab:c2:99:e9:54:b5:26:e7:63:
                    28:ca:49:14:29:b9:0a:d3:30:67:88:bb:75:d1:07:
                    ac:18:91:e5:87:b9:6c:d2:a1:bd:c0:56:15:14:b7:
                    5b:8c:c2:dd:d1:21:b6:9c:31:a9:3c:e9:4e:22:d3:
                    1e:3f:c9:a8:a4:fe:c8:25:0b:d6:9e:7b:2f:6c:53:
                    e3:74:8b:ed:67:33:1a:83:cb:48:69:10:81:82:45:
                    6d:53:08:94:4a:b1:63:5a:63:64:ea:65:41:5d:bb:
                    6e:b6:21:71:69:07:2f:e9:e9:81:3a:63:a3:be:34:
                    ff:92:75:b7:ee:c3:ef:d9:ad:ec:c1:51:a2:c6:44:
                    a7:46:54:e3:3c:c1:55:e7:47:fc:4c:ab:e6:39:3b:
                    e2:fa:5f:8d:6d:1a:b6:3e:c8:8e:3a:20:84:a6:6c:
                    65:e9:dd:57:25:03:92:1b:1c:34:c9:03:63:b1:df:
                    9a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0B:9C:02:E2:AF:CB:0F:F3:4D:63:A7:10:BF:35:CF:45:F7:8C:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/bc236c66-82cd-3d62-b6a4-ceb6d13bf1a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.184.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:f5:51:45:16:5e:30:9e:89:ef:e7:a0:a1:fe:77:8f:66:6a:
         d9:eb:d7:f5:11:d5:3a:91:64:55:4f:3d:ef:37:b0:4d:46:ae:
         f1:bc:a4:db:bb:8b:dd:36:77:48:a0:29:b7:74:da:34:46:0e:
         9f:2b:60:12:62:fe:d3:70:39:77:58:47:f3:da:6b:1a:e6:e8:
         a3:31:16:74:9d:62:a8:65:60:f1:76:78:2b:29:35:ec:cd:db:
         d7:8e:f2:cf:21:1f:69:38:3f:3e:c8:d4:f3:11:13:fc:a1:e7:
         22:ab:21:33:08:fd:eb:79:20:67:60:44:b7:65:52:69:17:a1:
         6c:cf:79:4d:49:96:5e:07:8b:fd:20:a4:d9:a9:3e:f7:af:c5:
         36:53:5d:ed:b1:d6:19:b4:00:e4:5e:65:45:24:8e:45:2d:74:
         69:26:b2:c8:1c:44:aa:be:ee:af:75:fd:71:ff:aa:c3:d2:5e:
         ad:a4:f9:a6:00:bb:4f:6f:e8:61:b1:c2:c6:61:53:55:17:88:
         f8:cb:cb:32:f5:55:3e:6b:4a:f3:ab:96:5f:35:97:1e:68:2b:
         d7:9f:e3:31:b3:c0:77:e5:3e:2c:a2:7f:c0:4d:53:3b:13:ca:
         68:bd:e3:86:2c:33:9c:d3:6e:ef:a6:e3:50:f9:7a:b3:66:d5:
         b4:24:83:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:48:18 2026 by rpki-client