Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/29b0a77c-0492-339d-aa9c-b106f0acf458.roa
File:                     29b0a77c-0492-339d-aa9c-b106f0acf458.roa (raw, json)
Hash identifier:          tRL60DVu+LP2QAj/U81nk4XMRP5gt0EcvryDW8pZqLw=
Subject key identifier:   65:A5:47:74:F3:35:E3:3C:B4:E7:C6:4B:95:C7:0C:5E:A6:1B:CA:EC
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584F4987C40C0BC8035998698700
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/29b0a77c-0492-339d-aa9c-b106f0acf458.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15164
IP address blocks:        138.199.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:c4:0c:0b:c8:03:59:98:69:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=697db633-572b-42b0-8d8a-975f88dd25bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c4:7d:ca:0f:69:14:3a:22:5a:60:4e:6e:ef:
                    6e:43:f9:47:05:63:95:7e:0e:f1:b2:e8:7e:66:44:
                    63:18:7e:2b:d5:92:b4:c0:02:f4:96:ea:c8:6b:e3:
                    12:dd:29:09:ab:3c:f3:34:ab:7b:9a:64:b7:72:2c:
                    9b:f8:22:a0:9e:11:4d:00:57:98:cc:f3:69:19:0e:
                    50:69:a3:62:3a:33:e5:6e:d0:c0:c9:50:08:64:22:
                    17:07:da:60:13:da:6a:d2:57:ac:17:bb:75:70:ac:
                    f7:85:34:72:59:60:2d:3a:5a:b7:7e:01:7e:42:81:
                    06:5c:c2:8d:12:87:a9:10:c2:02:bc:d3:c1:7a:c5:
                    dc:7d:65:17:d2:38:e3:9f:1c:04:43:c9:3f:ab:7d:
                    9e:ff:fb:81:23:d1:f5:5e:d4:2d:2e:a3:b0:c7:f5:
                    5b:eb:46:55:80:fe:2f:dd:e0:91:75:ff:6a:fa:30:
                    f1:62:7b:d9:ff:90:7c:b1:05:c6:7e:1e:8e:de:c2:
                    e3:98:46:fa:0a:40:ab:1a:21:c5:eb:86:ab:73:32:
                    29:ab:eb:e8:c8:33:e3:76:61:3a:84:f7:ba:8f:f3:
                    f1:6a:8d:ef:5d:97:ef:09:6a:80:0b:bb:34:c5:85:
                    17:6d:e1:0e:4e:5b:fe:31:a5:75:45:97:5e:4c:07:
                    05:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A5:47:74:F3:35:E3:3C:B4:E7:C6:4B:95:C7:0C:5E:A6:1B:CA:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/29b0a77c-0492-339d-aa9c-b106f0acf458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.199.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:66:da:6b:87:b4:8c:36:e9:ba:0c:11:63:73:1b:0c:de:10:
         0f:80:53:e1:c3:d4:4e:90:e6:a3:9f:ad:eb:2a:b9:f8:ef:db:
         22:70:74:7f:4c:53:3f:dc:3b:43:3c:8b:f1:ff:b6:23:c0:49:
         d8:11:a8:4a:77:fb:4b:aa:41:30:f9:5f:f8:eb:27:67:f0:cc:
         bf:86:a9:86:04:dd:0d:94:63:35:69:c9:5c:49:d2:07:fc:cb:
         8b:ae:4e:f6:f8:97:fd:30:4b:22:f4:b4:5c:3d:72:a5:95:88:
         b2:df:ea:c9:6b:c6:76:e0:36:c4:cb:51:50:4c:24:bf:96:c6:
         92:b9:07:6e:29:09:9d:78:4d:c0:6c:06:1e:5c:65:99:a9:e0:
         87:73:c4:df:4a:0b:28:d0:04:65:a9:9c:0e:83:aa:05:2e:a0:
         90:2d:00:e8:05:66:f4:ee:3e:93:3b:8f:0b:0f:c4:22:97:b2:
         31:45:c8:fd:13:49:d7:76:75:68:7e:28:00:76:2e:7e:f6:92:
         51:4a:74:96:77:a2:53:26:51:eb:64:6c:bb:c0:72:78:29:c7:
         94:02:c4:94:1b:c0:c0:d4:82:17:1a:d3:99:db:87:ce:a6:b7:
         70:a0:90:f0:94:ea:83:0b:d4:65:03:58:e5:ab:43:74:14:91:
         4f:d0:b5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:35:37 2026 by rpki-client