Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/de7fcbf7-d5f3-374e-a149-1439ce6c3d24.roa
File:                     de7fcbf7-d5f3-374e-a149-1439ce6c3d24.roa (raw, json)
Hash identifier:          qajGMCV8OLk4QaWkb+Nue2sKaCFZHzf0F0h+thGjT2Y=
Subject key identifier:   2A:A0:F3:7E:04:3C:40:30:85:FD:9A:81:16:E6:5E:AB:3B:DE:87:52
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584DF0AB397A7C995DAD1BBB6800
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/de7fcbf7-d5f3-374e-a149-1439ce6c3d24.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     15164
IP address blocks:        138.199.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:39:7a:7c:99:5d:ad:1b:bb:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=a15f4b07-307c-49d7-8770-90ee7e4f6ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c5:b2:fd:4a:d2:9e:64:00:cf:7e:88:df:02:
                    20:62:45:16:0c:ac:b9:d7:70:d2:86:dc:dc:f6:53:
                    c7:e3:dc:83:f1:ad:72:73:3e:37:cc:f7:0d:eb:3a:
                    5b:ce:91:95:af:7a:3a:c2:49:8b:d2:54:f6:f0:4c:
                    b8:10:b1:5d:a2:25:5e:b6:b6:4a:38:36:9d:73:75:
                    c0:80:0a:6d:13:5c:8c:0f:a2:fe:3e:e4:75:88:cf:
                    bb:cc:08:ef:fd:70:6f:b4:62:30:c1:7d:a4:7b:ba:
                    db:8f:3b:f8:56:1e:2f:88:92:da:4a:f0:fb:45:19:
                    8a:e4:60:80:28:a5:11:39:bb:ed:be:9b:c8:6f:0b:
                    99:fc:2f:f6:98:50:59:5b:5d:23:73:69:1c:af:13:
                    27:58:78:ff:d0:c9:b5:df:37:a9:01:7d:82:7e:83:
                    49:40:c5:b1:2a:78:d7:b8:fd:31:b0:e1:cf:e2:ea:
                    2d:b7:e1:af:a4:a9:6e:7e:49:0c:e1:23:fc:80:7c:
                    c2:b1:c8:c9:4f:ac:18:50:e3:a6:a7:46:22:94:07:
                    cc:92:8b:ea:1a:99:76:20:85:96:2f:84:af:c7:48:
                    8b:4d:a1:32:67:a5:77:69:bb:41:d1:84:eb:90:38:
                    c8:64:6f:25:cf:5d:e3:8c:18:6f:61:be:fd:ef:16:
                    e1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A0:F3:7E:04:3C:40:30:85:FD:9A:81:16:E6:5E:AB:3B:DE:87:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/de7fcbf7-d5f3-374e-a149-1439ce6c3d24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.199.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:cf:33:bd:c8:ab:ec:13:c1:ed:ca:af:41:93:3c:c7:56:22:
         69:7d:e1:fe:2b:59:9b:c1:c9:a6:ae:94:24:82:d1:d7:de:46:
         ee:64:82:b4:f2:ad:2f:e8:46:7a:6b:34:dd:51:2f:41:b6:59:
         8c:96:ba:e0:e3:ba:23:c9:b0:a1:56:7e:e7:03:20:f4:3f:c9:
         ce:26:53:bb:38:53:b6:2f:0f:bd:81:e7:35:c8:8f:41:d7:b0:
         ba:0e:8f:51:f4:d1:27:4f:f7:50:01:07:0c:a0:03:1a:6b:b8:
         84:02:3c:40:21:43:fc:df:6b:aa:8d:7f:78:6a:1b:44:ea:e2:
         bc:36:0e:58:08:99:53:35:df:0f:87:e8:a6:92:dc:33:4d:6e:
         39:10:78:37:99:23:ac:3c:71:3d:89:56:7c:2e:52:90:45:38:
         0b:bd:74:69:58:f2:1a:42:9e:d0:bb:b2:6c:90:5f:32:e3:59:
         53:33:fc:37:50:fe:eb:74:4c:1f:8c:65:1e:55:b6:c2:3c:10:
         b5:ba:28:78:2d:20:7f:59:65:54:35:0f:fb:5a:12:0a:f3:8a:
         e7:fc:9f:ea:73:b1:49:b8:c7:51:94:b5:c3:9c:f6:d5:ed:1e:
         88:15:b3:50:b4:99:84:9f:9b:67:38:96:61:6d:80:43:0f:7b:
         ae:57:c5:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3wqzl6fJldrRu7aAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI2MDUyNDEzMDAzMFoXDTI2MDgyMjEzMDAzMFowLzEtMCsGA1UEAxMk
YTE1ZjRiMDctMzA3Yy00OWQ3LTg3NzAtOTBlZTdlNGY2YWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcWy/UrSnmQAz36I3wIgYkUWDKy513DShtzc
9lPH49yD8a1ycz43zPcN6zpbzpGVr3o6wkmL0lT28Ey4ELFdoiVetrZKODadc3XA
gAptE1yMD6L+PuR1iM+7zAjv/XBvtGIwwX2ke7rbjzv4Vh4viJLaSvD7RRmK5GCA
KKURObvtvpvIbwuZ/C/2mFBZW10jc2kcrxMnWHj/0Mm13zepAX2CfoNJQMWxKnjX
uP0xsOHP4uott+GvpKlufkkM4SP8gHzCscjJT6wYUOOmp0YilAfMkovqGpl2IIWW
L4Svx0iLTaEyZ6V3abtB0YTrkDjIZG8lz13jjBhvYb797xbhiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCqg834EPEAwhf2agRbmXqs73odSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZGU3ZmNiZjctZDVmMy0z
NzRlLWExNDktMTQzOWNlNmMzZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBisd4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEbPM73Iq+wTwe3Kr0GTPMdWIml94f4rWZvByaaulCSC0dfeRu5kgrTy
rS/oRnprNN1RL0G2WYyWuuDjuiPJsKFWfucDIPQ/yc4mU7s4U7YvD72B5zXIj0HX
sLoOj1H00SdP91ABBwygAxpruIQCPEAhQ/zfa6qNf3hqG0Tq4rw2DlgImVM13w+H
6KaS3DNNbjkQeDeZI6w8cT2JVnwuUpBFOAu9dGlY8hpCntC7smyQXzLjWVMz/DdQ
/ut0TB+MZR5VtsI8ELW6KHgtIH9ZZVQ1D/taEgrziuf8n+pzsUm4x1GUtcOc9tXt
HogVs1C0mYSfm2c4lmFtgEMPe65XxUQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:39:30 2026 by rpki-client