Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7f8b027e-d327-396e-b2e9-5a9494bc7289.roa
File:                     7f8b027e-d327-396e-b2e9-5a9494bc7289.roa (raw, json)
Hash identifier:          aib+HP3sNX8I6oD1NjPAcc2jH9K2hziSTe9TDAJJtMk=
Subject key identifier:   CA:55:02:18:1A:FB:2F:EC:C2:3C:10:17:CD:7D:01:1E:44:95:96:67
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584E3069B0273817E43F08CD6C40
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7f8b027e-d327-396e-b2e9-5a9494bc7289.roa
Signing time:             Tue 16 Jun 2026 09:00:12 +0000
ROA not before:           Tue 16 Jun 2026 09:00:12 +0000
ROA not after:            Mon 14 Sep 2026 09:00:12 +0000
asID:                     15164
IP address blocks:        160.223.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:30:69:b0:27:38:17:e4:3f:08:cd:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jun 16 09:00:12 2026 GMT
            Not After : Sep 14 09:00:12 2026 GMT
        Subject: CN=70718a07-e222-461a-94cc-f14db7376745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3e:c3:69:f0:7f:08:8e:12:2f:13:13:86:b4:
                    9d:f1:0b:20:a8:c5:b2:09:81:f2:7e:a6:bd:36:69:
                    d5:36:cd:81:c2:9c:bc:c1:b2:7f:a7:10:41:92:fa:
                    58:a4:86:c4:4b:54:fe:96:d3:30:af:7f:25:0f:22:
                    06:c2:54:19:df:05:e4:52:6e:88:bd:99:3d:93:67:
                    33:f3:60:60:a9:f9:91:72:a4:f8:bf:de:f4:d7:09:
                    dc:16:14:9d:15:01:1b:47:38:1e:6b:70:07:10:c8:
                    ce:45:ed:34:60:8d:dd:d3:0e:d6:3b:61:58:7d:60:
                    2e:44:2e:9c:05:5d:7a:65:d6:4e:40:d7:9d:b5:be:
                    45:15:27:44:0e:59:16:b4:cb:db:bc:08:b5:e4:de:
                    ae:b8:c0:47:bf:5a:e0:dc:9b:4e:96:1d:37:da:a6:
                    f3:c0:2e:ff:ba:09:c2:43:11:a1:03:78:23:47:de:
                    0b:10:fe:05:e6:51:54:63:d4:56:66:70:b9:ca:c8:
                    be:6b:e4:9b:28:e9:ac:75:23:63:42:03:5c:48:42:
                    86:1e:5f:76:34:8b:ef:cd:2c:ac:e6:0c:5c:58:e1:
                    87:be:8c:46:7c:7f:ca:48:c7:65:0d:c2:b0:12:af:
                    3b:da:e8:4f:9a:3d:ef:55:89:b8:b3:1d:c4:bb:d0:
                    3e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:55:02:18:1A:FB:2F:EC:C2:3C:10:17:CD:7D:01:1E:44:95:96:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7f8b027e-d327-396e-b2e9-5a9494bc7289.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.223.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:5a:30:a7:db:f4:a8:d1:a3:fc:d7:da:8a:7c:26:cc:63:a2:
         fd:0e:e1:4b:28:78:d3:fa:62:da:f6:c3:5e:08:c9:bc:b8:41:
         d1:9a:1c:ee:06:87:7a:76:3d:7d:c7:9e:1c:f2:43:aa:00:03:
         fc:6b:d5:8c:62:be:09:16:37:73:15:65:5b:45:8e:e5:60:65:
         a9:c2:d7:f5:95:d0:93:a4:52:63:ea:94:70:2c:0d:26:95:70:
         1f:ed:1e:b6:7d:82:e1:76:8e:b7:7b:d2:3b:68:76:6e:ef:bb:
         6f:2b:16:13:57:16:91:64:4b:f8:a4:23:fc:a4:9a:88:70:7e:
         38:b5:08:74:90:b0:a2:1d:f6:4f:45:a0:ff:2d:5c:43:d1:11:
         a5:af:e5:73:26:96:26:15:5e:0b:1d:0f:46:08:8c:34:6a:6c:
         7f:b8:09:e5:e0:de:1d:4a:9a:bd:92:01:fe:98:b1:40:46:53:
         88:35:c7:99:36:6f:f6:1e:ef:de:c4:08:05:d0:ef:52:e7:50:
         76:33:31:02:dd:d1:ac:21:63:19:20:6d:e1:97:d5:26:21:54:
         23:82:ec:35:cb:e0:6d:3b:a6:d1:38:1a:c9:b4:01:f9:f0:0d:
         c9:97:e8:bd:f2:94:e7:9b:50:11:e3:e8:1b:74:6f:20:15:2b:
         cb:95:4d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:32:09 2026 by rpki-client