Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/675bfc70-a6f7-3a74-a6cc-603c8c73831b.roa
File:                     675bfc70-a6f7-3a74-a6cc-603c8c73831b.roa (raw, json)
Hash identifier:          VPNnyqM1hPY/cwDiiHFzbwsDo/zwSvIl8FK0mYHybOE=
Subject key identifier:   4A:DF:AA:34:87:50:65:74:44:A0:24:99:CB:83:84:F5:57:8C:83:D5
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584E885A41BD2B1BB2A27FD2CD80
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/675bfc70-a6f7-3a74-a6cc-603c8c73831b.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     15164
IP address blocks:        140.82.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:41:bd:2b:1b:b2:a2:7f:d2:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=ee0cf9d6-de16-45a8-8c90-3d1ebb271c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8c:10:a9:ac:d9:a0:c0:bd:60:9d:93:c0:d6:
                    d9:ae:e1:26:f5:2c:78:a1:85:f6:2a:fb:01:cd:3e:
                    00:5f:2d:3d:33:56:d8:e5:8a:76:07:b4:15:f8:e0:
                    93:bf:e3:1a:9f:bd:81:d7:3d:d7:f5:ce:0d:2f:58:
                    32:dd:57:f7:37:7e:43:ac:43:ce:8b:b6:c8:f0:bd:
                    8b:45:14:e5:be:f8:df:d5:53:fc:b5:95:e8:fe:12:
                    df:d7:dd:d7:dc:b0:e7:ab:d9:73:32:36:f6:27:8a:
                    07:54:91:d0:4a:e9:80:50:f1:36:16:4b:d8:81:84:
                    cc:05:de:b0:21:0f:51:71:be:3a:be:74:fb:b0:75:
                    27:7b:af:ea:0f:08:3f:f3:3b:ae:b8:04:59:22:a0:
                    dc:09:87:67:54:4a:a2:bb:b0:32:89:3d:35:cf:cb:
                    3c:60:dc:74:ec:cc:04:ab:c8:27:54:c4:d1:ad:58:
                    0f:b3:9e:c0:b5:89:13:82:52:90:67:f0:9b:67:4e:
                    61:9e:0a:88:1f:85:98:6a:52:b4:dd:19:67:60:ab:
                    62:c6:6b:b8:37:29:74:d9:2e:97:de:0c:35:00:00:
                    33:bf:bb:84:e7:fc:87:6c:43:bf:94:66:3b:aa:be:
                    3b:88:be:1f:d6:61:49:7a:3d:a9:00:eb:91:11:1c:
                    e4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DF:AA:34:87:50:65:74:44:A0:24:99:CB:83:84:F5:57:8C:83:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/675bfc70-a6f7-3a74-a6cc-603c8c73831b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.82.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:36:b4:8b:8f:a9:cc:7f:76:ac:16:48:1c:71:fd:a9:f2:ee:
         5f:71:98:33:fb:d3:6c:d5:9a:27:c7:99:63:a2:9a:20:22:74:
         08:2b:ae:07:5f:31:33:a8:a9:a7:55:66:9c:c2:9b:36:83:b2:
         42:c2:f0:fb:05:fc:76:47:3b:7a:d2:15:7b:78:37:c1:f2:53:
         29:ae:2f:ab:cd:62:c3:c6:a5:20:0e:07:5a:34:50:3c:b3:0a:
         52:a9:9a:e7:1c:d1:27:26:f5:fe:23:34:22:1e:3a:f4:a6:c2:
         68:25:88:64:dc:83:05:a1:88:31:a4:79:1f:d8:73:1f:6f:17:
         52:d0:48:a4:53:42:86:00:c2:62:27:32:34:c6:eb:5e:ea:2a:
         0c:74:72:d6:0d:c0:5a:04:4f:c3:8a:26:79:73:ae:b2:2a:0b:
         1a:7b:15:cb:5f:af:b2:06:26:bd:8d:2e:1e:c6:3d:e5:22:e6:
         65:03:be:d7:37:76:fc:6e:b9:29:4f:29:f2:8a:6c:a6:b9:2d:
         73:21:91:3d:45:3c:53:c2:c3:fb:a2:8b:82:7b:7a:36:16:11:
         29:72:29:34:82:f6:ff:ad:31:1c:94:92:00:55:ac:8d:c7:39:
         32:93:63:32:37:20:e3:8d:0c:25:e3:f4:1a:2c:9f:24:d4:46:
         22:55:ea:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:59:37 2026 by rpki-client