Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/eea08d9f-303a-3b6d-8490-f09157849fd5.roa
File:                     eea08d9f-303a-3b6d-8490-f09157849fd5.roa (raw, json)
Hash identifier:          9k0NkK5aNUmlMbMcTENJlZZZhejVk3qNU4SkxcAk6nY=
Subject key identifier:   89:CE:0D:14:51:D7:7B:A1:71:A1:62:86:CD:32:BE:3E:30:B5:34:96
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584EA7914A9BC2650BA8FE2883C0
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/eea08d9f-303a-3b6d-8490-f09157849fd5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15164
IP address blocks:        138.199.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:4a:9b:c2:65:0b:a8:fe:28:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b3b39639-d7e1-412a-baf3-300d2a527717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1f:68:e6:e3:c3:bd:ce:9e:e9:26:f6:13:27:
                    9c:68:96:0f:a1:83:b3:7b:ec:ba:f6:ca:29:0f:1b:
                    9d:6f:44:bb:bc:c7:02:79:a9:a3:ee:20:fc:f3:85:
                    77:5d:75:13:1f:f1:39:f0:6d:98:5c:fc:9d:91:3f:
                    6c:3e:f2:70:17:71:eb:1d:d9:dc:4e:c9:2a:64:ea:
                    95:c4:75:31:93:be:c2:51:b4:61:8c:d1:52:2d:79:
                    20:b9:1d:7f:67:cc:78:60:ba:59:a4:8c:66:32:e6:
                    15:9c:47:2d:b8:dc:b7:06:8d:4e:40:8d:2f:62:ea:
                    2d:30:f5:3d:44:05:2e:61:71:47:95:04:31:f6:10:
                    b3:cf:8d:4b:42:76:0c:50:33:a9:5a:62:58:26:a5:
                    cb:f1:a8:bb:04:d8:3b:43:22:5a:23:b0:28:a6:ec:
                    c3:1d:12:f4:4b:c7:25:40:f7:4a:88:88:98:ce:20:
                    1c:a9:9d:a0:f9:97:9e:e1:25:d4:dd:8d:21:32:a5:
                    c0:32:57:3b:b4:25:84:eb:8a:10:42:87:1a:3d:5e:
                    65:ee:9c:77:81:f3:f5:ea:28:92:1a:bc:a2:39:27:
                    60:1d:16:fe:47:c2:50:b9:24:fb:11:15:53:7f:6b:
                    da:b6:77:76:58:12:72:c4:f9:b4:a7:ab:34:84:93:
                    fb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CE:0D:14:51:D7:7B:A1:71:A1:62:86:CD:32:BE:3E:30:B5:34:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/eea08d9f-303a-3b6d-8490-f09157849fd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.199.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:41:4e:c1:9b:ba:d0:24:89:34:5f:32:13:6f:1e:95:79:8b:
         be:16:a1:47:e0:c6:7e:17:3d:12:5a:b5:b7:ae:0f:cc:64:61:
         ab:d8:17:87:18:1e:a8:2e:2f:da:9f:ab:7f:78:d0:e2:9c:bc:
         c2:03:18:dd:9e:1e:ad:d4:42:80:f0:b1:de:8c:fa:fd:c9:01:
         b4:ec:1f:82:fa:c5:99:a5:66:25:37:f8:ff:9d:9c:ca:b7:dc:
         b8:78:ec:95:a6:33:c7:00:4b:3c:79:62:75:ab:12:fe:c0:4c:
         a7:d6:76:6b:be:70:f8:ef:d2:e5:b2:27:1d:06:8f:59:fd:74:
         49:7c:53:a0:ad:c1:78:55:e7:e9:b9:1f:47:e4:02:ae:4d:e8:
         b1:1d:3b:64:b0:d3:cb:01:0c:33:a0:3d:53:84:f9:73:ef:ef:
         53:fd:47:f3:7e:be:f5:48:c1:3d:bb:25:b5:88:3f:bc:77:b3:
         28:b3:06:27:24:27:37:4e:7f:20:6b:aa:b3:f7:2e:dd:b5:61:
         a5:48:6c:89:ba:4a:85:b2:38:98:a5:1a:f3:89:f5:b2:eb:bd:
         d1:4e:dc:55:ae:37:d9:54:58:02:ed:fc:ca:ff:cd:bd:fa:91:
         4f:22:b4:38:d9:6d:1a:86:f8:d0:51:94:ba:73:f6:89:a9:24:
         89:71:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:38:39 2026 by rpki-client