Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2e0cc925-0a84-3971-9561-82b8233db1a5.roa
File:                     2e0cc925-0a84-3971-9561-82b8233db1a5.roa (raw, json)
Hash identifier:          QJgRXUVx73acT61tsK2hOsJLfvTWbvrwifteWC07caQ=
Subject key identifier:   24:A0:52:57:CA:12:4A:2C:53:DC:0A:52:57:13:ED:CE:50:2E:8C:73
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640FCE0419340D2A9A440CC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2e0cc925-0a84-3971-9561-82b8233db1a5.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     15321
IP address blocks:        207.236.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:ce:04:19:34:0d:2a:9a:44:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=7796d9bb-d87d-451e-919d-e7692d6ab9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:98:e7:5b:1a:62:48:10:cf:07:1a:8e:f7:
                    0c:e0:40:86:e0:b1:5f:e9:c8:b9:cc:d0:c9:77:4e:
                    55:98:a5:38:46:05:f1:f6:5f:59:b7:14:17:c2:53:
                    6f:4b:3e:56:68:37:c6:7c:e8:dd:63:ac:55:a8:b4:
                    42:f0:77:ad:04:07:c1:fc:1e:cf:c5:bf:44:32:7a:
                    b7:0d:20:eb:04:cd:f0:47:29:f4:48:5e:f0:41:89:
                    1d:9d:5d:04:db:31:52:20:40:ea:5b:a9:ac:ee:8c:
                    e6:03:0c:1c:85:9a:18:40:76:2b:ce:f5:86:e1:5f:
                    57:f5:13:c5:63:2b:7d:2a:dc:66:17:c7:29:c7:90:
                    02:63:de:c5:27:3c:0a:05:1b:e8:4f:3c:47:1f:a7:
                    99:d3:23:fc:ae:dc:17:1c:ff:45:44:83:0e:f1:72:
                    0e:55:96:88:91:1c:4d:5e:ab:c2:cc:5a:4b:76:0a:
                    14:c4:c1:f2:b7:e9:f7:f1:19:30:ac:e7:9a:17:8c:
                    f4:79:65:4b:1c:5c:cb:b9:41:d8:36:c4:cb:b8:1e:
                    54:54:60:ea:16:90:ff:ca:dc:af:e2:43:9e:23:55:
                    86:1d:75:a2:88:7e:fd:6c:0f:9e:c2:61:31:f9:fe:
                    8c:c5:31:0d:df:bb:23:70:18:22:9c:cf:ba:66:62:
                    b5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A0:52:57:CA:12:4A:2C:53:DC:0A:52:57:13:ED:CE:50:2E:8C:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2e0cc925-0a84-3971-9561-82b8233db1a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:96:bb:02:58:c4:9c:99:25:6b:2d:31:d4:ae:d4:9b:38:80:
         9c:d2:4a:27:72:71:3c:2d:de:be:f5:67:10:bb:68:ba:1d:b2:
         85:cd:2c:aa:51:7d:2e:03:e5:24:70:09:28:8f:58:2d:27:d2:
         19:29:1a:50:e6:a0:01:08:44:86:0f:0d:12:d5:f9:7f:56:cb:
         ba:85:fa:8a:2c:7f:e2:f8:cb:4d:2c:cf:6d:6c:2a:d4:75:c9:
         50:57:25:8a:99:ce:f1:b2:c1:20:4c:37:13:9e:47:97:91:02:
         7f:08:d5:86:55:78:42:8f:de:4b:18:d7:bd:de:f1:d3:d2:7b:
         cc:23:51:02:77:80:0b:f2:3c:e8:c1:61:70:85:2b:eb:e7:26:
         ef:f3:d7:fc:20:77:8c:a5:cb:c8:e3:73:6f:e7:33:1f:81:b5:
         dc:c0:20:88:5d:7b:d7:03:d4:c0:83:93:a7:a7:78:9e:d3:c3:
         fc:f6:a2:72:54:78:b7:76:d9:d6:cf:28:9c:ae:4a:b9:fe:6a:
         af:6e:65:f5:47:8d:7e:fc:c4:5a:8b:b9:3b:7b:fe:08:1a:31:
         7d:a7:3f:7c:2e:14:a2:df:3d:68:50:07:c7:a7:ef:fe:f5:9c:
         c3:36:48:f4:19:c1:e3:f8:a6:71:39:cc:d0:2e:72:04:66:43:
         10:28:77:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:56:26 2026 by rpki-client