Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5f99b2c0-a5d9-339c-825e-94a6f461f236.roa
File:                     5f99b2c0-a5d9-339c-825e-94a6f461f236.roa (raw, json)
Hash identifier:          YdWiQQRnEH4xb03/7QrpkQ/esRmJr0zCkZvJnOqi/U4=
Subject key identifier:   7C:32:36:72:16:7A:08:B6:9A:DA:ED:AE:85:5F:AD:98:2C:A0:9F:5F
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584F4974D9DA0BCA67132EB4E4E0
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5f99b2c0-a5d9-339c-825e-94a6f461f236.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15164
IP address blocks:        104.218.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:d9:da:0b:ca:67:13:2e:b4:e4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=34ecf8a7-5226-46ef-a7e6-8f342aa16a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4f:63:f2:a5:b7:db:1e:97:f5:b0:91:04:43:
                    05:5f:ab:73:d0:dc:ba:64:62:9d:4c:76:38:65:ab:
                    6e:f1:e3:59:22:57:ef:d7:3b:48:b2:61:31:b0:8f:
                    59:0c:68:38:48:93:e9:b4:16:45:67:20:41:4f:89:
                    ce:6e:e1:d6:02:7a:89:f7:66:c6:22:51:52:5b:22:
                    8a:0d:3e:a4:79:ff:46:8b:94:e4:60:eb:56:99:de:
                    f4:0e:83:89:99:4a:50:c2:6d:28:1f:c2:47:fd:84:
                    89:6e:c2:f4:15:7f:cc:11:40:87:a7:f6:40:c7:63:
                    cb:ae:be:1d:b4:68:3d:6c:bb:28:6c:eb:8a:2a:ed:
                    03:12:96:14:98:6e:a5:a4:53:bd:72:57:79:64:6b:
                    32:7f:9f:2e:20:9c:1b:36:13:26:56:11:fc:f8:6b:
                    8f:8d:dc:fe:55:ab:cd:5a:00:40:79:8f:0b:c2:e9:
                    7a:ac:0e:66:f6:c0:9a:04:7e:b5:b2:cf:1e:b6:48:
                    f6:3e:23:de:79:23:49:24:3c:64:60:81:c9:37:7e:
                    1b:bf:86:70:40:2e:7c:ef:a9:2c:0b:1e:2b:16:eb:
                    8c:09:c9:af:5d:af:48:dc:17:e2:61:9d:49:d5:a1:
                    4b:be:63:cf:e3:d2:58:a6:74:9b:86:29:0f:31:78:
                    e3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:32:36:72:16:7A:08:B6:9A:DA:ED:AE:85:5F:AD:98:2C:A0:9F:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5f99b2c0-a5d9-339c-825e-94a6f461f236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:a0:ee:78:b9:ba:e2:55:71:99:9b:f8:e7:a8:d5:4b:63:58:
         86:2f:51:9d:80:0e:d3:32:87:2c:ee:8b:0e:cb:5b:64:dd:50:
         b9:0c:63:58:f9:f9:ca:fa:a3:62:bd:92:a6:0c:06:56:43:ea:
         37:94:93:ed:f1:72:69:f7:e1:19:00:7a:0d:83:1c:1f:57:88:
         ff:24:c8:8c:fd:e7:32:e7:30:a5:28:66:7c:17:31:2b:d8:d7:
         3d:6e:84:f3:6d:6b:ce:23:2f:38:aa:43:df:ec:f4:a9:3e:78:
         15:2f:9d:0d:f5:aa:b2:b1:57:2f:14:05:fd:bf:62:52:45:61:
         96:61:b6:ba:1e:03:83:bb:19:0f:b5:8d:cb:de:a3:09:02:1e:
         00:60:b0:9f:14:33:6a:7f:85:7d:83:61:36:a4:f2:2a:23:4a:
         45:0a:22:1a:e8:c8:a2:2f:aa:20:ba:97:0c:08:d0:6e:d6:bb:
         bb:4e:2d:16:35:a6:7a:29:4a:1c:19:44:23:82:f3:66:13:41:
         8b:bd:93:a1:8e:86:26:27:58:69:e6:34:86:d9:cc:9f:9e:e4:
         d8:36:1c:8e:47:cb:43:ea:83:cb:a8:44:6e:84:bf:3d:a2:50:
         19:4c:93:50:16:65:07:62:c9:18:fb:c4:49:65:1d:9c:14:e6:
         b3:5f:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:52:29 2026 by rpki-client