Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/24f1179c-14c3-3739-8ca5-5ea05526a073.roa
File:                     24f1179c-14c3-3739-8ca5-5ea05526a073.roa (raw, json)
Hash identifier:          aoKalpn2gesTcv5H+5EYBTPOljKYXhum5R9U9TiNPAc=
Subject key identifier:   6B:CF:B6:E1:21:9A:3E:6B:33:29:C0:A7:8F:B1:F9:89:0A:B9:7E:15
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F2D87C26D91261BC60EFE4730
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/24f1179c-14c3-3739-8ca5-5ea05526a073.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     577
IP address blocks:        2001:4958:8003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:c2:6d:91:26:1b:c6:0e:fe:47:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=703f83c5-ba8b-4c74-929c-ddf1914983f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5b:9a:49:33:74:b8:35:a5:8f:3e:a8:b7:17:
                    31:4a:9b:71:0c:b4:9b:48:22:00:08:90:d0:1e:13:
                    55:57:55:1b:f0:45:07:00:59:60:82:7e:a2:cd:52:
                    38:67:c4:0d:f3:b8:1d:89:09:10:6b:cc:a9:1c:df:
                    99:75:f6:ff:29:c5:31:5a:25:23:e5:45:97:a2:f7:
                    a7:27:8e:59:9c:c9:98:9d:60:4c:9b:c3:36:08:c9:
                    dd:b5:c7:39:0a:ff:97:1b:95:16:fe:d0:22:db:20:
                    03:c0:5e:6e:a6:73:36:17:22:bf:8a:22:12:64:27:
                    7f:40:f3:8a:f7:9f:90:91:43:d2:51:67:0b:8d:7d:
                    ff:ff:04:5f:2f:b2:6a:b6:49:d8:e0:e1:7b:ed:1a:
                    0d:00:2e:21:46:ff:ad:c1:67:59:55:3e:f4:5f:05:
                    ff:85:82:1c:de:20:9c:75:13:37:19:b8:74:f7:66:
                    9c:d7:03:a6:e5:ae:24:05:e8:25:1c:14:4b:cf:04:
                    25:32:fd:8e:e8:b6:07:5a:36:f9:09:9e:7f:09:8f:
                    12:24:b4:40:3f:ed:2e:1d:82:4a:97:8c:98:1e:9a:
                    a9:3d:2d:d4:6d:b6:1d:7a:24:16:82:b6:12:a9:d1:
                    42:1d:0b:6e:49:1a:34:66:ea:6b:ee:4c:2f:78:9f:
                    2c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CF:B6:E1:21:9A:3E:6B:33:29:C0:A7:8F:B1:F9:89:0A:B9:7E:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/24f1179c-14c3-3739-8ca5-5ea05526a073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4958:8003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:e5:51:e0:61:9f:96:2b:de:91:75:b1:60:03:02:7c:4d:09:
         d9:05:3c:d6:18:c1:e9:04:02:99:be:fc:fa:5d:9b:fd:f7:80:
         73:2f:0f:7d:02:7e:cc:35:61:56:bb:98:a1:8e:0c:0d:25:12:
         bc:4a:b6:98:18:97:78:69:96:78:cb:f7:9d:17:49:fd:e8:2a:
         0c:40:5d:87:df:47:4a:d8:e2:f3:c1:28:67:d4:d1:bc:b4:76:
         1d:36:7e:49:8a:80:4d:e0:77:ab:62:26:2f:ed:ec:90:90:a6:
         ac:b7:b8:b0:ae:92:74:73:33:50:6d:b3:f7:da:ed:88:c1:2b:
         3d:b5:c3:06:57:e1:68:01:92:27:cb:88:3c:03:2a:ef:4d:e7:
         dd:5b:c1:86:a9:5a:b4:04:5c:d2:5b:cb:ec:c0:04:87:e3:68:
         5a:82:bf:75:87:26:95:9b:3c:1b:fe:e3:c9:38:0d:83:bb:02:
         bd:80:fc:28:ce:6e:bc:c9:ad:7b:2e:bd:2a:c8:b2:28:73:e0:
         b7:72:cf:75:37:86:ba:3c:f2:c4:5f:20:ef:0c:65:f7:bd:2c:
         0c:1d:18:79:26:13:74:da:13:5e:c4:0a:8c:7b:66:96:4e:25:
         a0:58:ff:7b:5c:52:86:82:60:ed:b6:10:82:7b:57:55:ab:b7:
         d7:49:da:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:49:45 2026 by rpki-client