Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/da025590-f139-369e-a092-8ccbafeb5298.roa
File:                     da025590-f139-369e-a092-8ccbafeb5298.roa (raw, json)
Hash identifier:          TmXoi3/FLpYqq8h7MJ3f/0yWcG9E6iWjBJnIWsh0M00=
Subject key identifier:   C0:58:0B:58:46:75:C9:B5:1A:2D:7E:2A:64:A9:A2:DA:D1:19:F6:1C
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584D4D5A93243CF3ADE7539B04E0
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/da025590-f139-369e-a092-8ccbafeb5298.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     15164
IP address blocks:        205.184.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:93:24:3c:f3:ad:e7:53:9b:04:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=a32a0d7e-ff83-4cba-bf74-087759004a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:86:d0:ae:b9:05:c4:1c:71:05:17:e2:e6:1d:
                    68:d5:6e:8f:e0:94:6a:ea:c6:ed:2e:c4:c5:07:19:
                    fb:39:02:b6:fc:83:c9:e8:b3:f7:f5:57:12:53:80:
                    a3:0b:00:3e:d8:2a:d2:0c:92:c3:ca:e5:a7:d9:6b:
                    9d:ba:47:5e:77:77:7e:df:1e:08:5a:ed:a6:e0:a2:
                    ef:7e:71:d1:1e:07:5a:78:a4:ea:d6:15:80:3c:a0:
                    e3:5e:e0:91:9b:f0:12:ef:d2:95:2c:78:c6:9e:2f:
                    b0:6a:cf:2d:4e:ce:f5:07:3b:89:d1:1c:ac:cd:60:
                    e2:bb:9c:5e:7e:3d:fc:3e:a4:29:2e:79:2a:63:09:
                    af:9f:31:94:83:64:25:43:21:71:ef:87:f4:a9:9d:
                    94:fd:f4:39:6d:ab:20:2d:3e:a1:aa:05:c7:1f:1f:
                    53:66:a0:42:59:93:20:d0:66:78:8d:a2:80:a1:ea:
                    ab:9c:4c:96:6b:c2:f0:32:df:59:65:00:98:f4:3d:
                    e7:f3:24:f1:87:56:d0:e2:f8:c0:7f:56:9d:99:bb:
                    33:de:42:c8:59:1f:9d:b7:93:69:fd:f3:7c:cc:80:
                    95:e8:f6:18:bd:c9:21:28:66:a9:d2:31:c4:33:42:
                    2a:43:6a:62:f2:62:7d:8e:89:64:25:9d:bd:68:cc:
                    8c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:58:0B:58:46:75:C9:B5:1A:2D:7E:2A:64:A9:A2:DA:D1:19:F6:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/da025590-f139-369e-a092-8ccbafeb5298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.184.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:59:67:0b:ec:6d:ca:eb:d8:40:d1:88:10:51:b1:06:96:87:
         86:f9:82:38:f7:57:4c:e7:56:08:2a:61:21:cf:19:b9:44:85:
         b2:79:fe:61:fe:ec:28:45:df:c5:61:28:b6:45:07:79:e8:d3:
         08:74:fb:e7:c7:69:04:58:d8:59:94:e1:91:13:5a:50:b7:9f:
         78:06:ab:cc:6d:7c:8f:9e:4b:ba:7f:32:56:28:ff:dc:90:c4:
         bc:57:be:27:c6:36:79:f3:ec:78:b4:13:18:df:cd:80:c0:fd:
         74:c9:27:03:d1:bb:4a:5c:a4:1e:44:c0:e4:b6:b2:a3:a8:e5:
         8d:e8:ad:e9:25:74:ff:b3:57:4f:25:15:e0:f8:bb:29:61:8a:
         a0:a2:84:fa:c5:03:7b:a1:95:0e:fc:8a:16:fb:28:35:1a:64:
         c0:2b:81:ce:36:7d:e3:49:0a:a5:6d:d3:f0:14:c8:d1:1d:5d:
         d1:0b:a9:bf:b6:3a:1c:62:bd:f4:14:f5:f0:88:c5:f1:ff:b6:
         4d:1b:05:3a:ab:3d:5d:d9:40:4c:f0:bc:52:a4:78:57:f1:28:
         43:40:bc:5c:b0:09:de:be:0c:cb:94:ae:bf:68:ab:11:6f:1a:
         0c:42:5b:c5:d7:01:4e:f8:6f:2d:61:c8:db:67:49:25:10:e5:
         91:35:5f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:52:14 2026 by rpki-client