Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2e8988e3-c958-37c5-9f7c-fd2854f24bd7.roa
File:                     2e8988e3-c958-37c5-9f7c-fd2854f24bd7.roa (raw, json)
Hash identifier:          VzBoMqoHIs5vKNyWyg8ia5CzJvtDSORwhy4nUHrx4LQ=
Subject key identifier:   A8:FC:2B:4B:63:27:B3:CB:24:51:D9:8F:F8:F1:5B:9C:32:76:55:F0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640F58E0279E6EF89BF3AE80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2e8988e3-c958-37c5-9f7c-fd2854f24bd7.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     21723
IP address blocks:        204.101.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:58:e0:27:9e:6e:f8:9b:f3:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=92f42751-c90c-4b19-982e-72c7d87a16eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:79:20:76:e8:6a:70:27:8e:85:83:db:43:b8:
                    c7:c7:b4:a9:29:3b:70:8c:92:b5:48:dc:a1:a8:6f:
                    49:47:68:27:4a:ce:5b:74:50:fb:d0:d9:d4:bb:45:
                    f9:9e:f4:70:91:2f:0f:66:e3:75:68:c6:55:ab:c3:
                    58:43:b4:86:1b:fd:f4:8c:57:6a:76:bf:26:1a:3a:
                    0c:7c:e8:98:9f:e1:8e:6b:1e:c2:e5:34:e2:dd:cd:
                    8a:ff:84:1a:15:4c:ac:46:46:86:67:24:ab:b3:15:
                    1e:0d:7d:e7:46:a6:58:3f:58:1e:b9:2d:a4:e7:6e:
                    0d:92:20:73:77:26:44:37:15:af:47:8e:24:5f:15:
                    a8:a5:e8:62:02:c5:8d:0c:eb:cc:3d:d3:bf:6b:6c:
                    76:7c:41:fc:86:65:00:bd:57:5c:c6:e8:8f:9f:97:
                    90:f6:aa:29:cb:7e:1e:1c:7a:88:9f:de:ef:b1:92:
                    82:11:68:28:8b:5c:da:33:6a:2b:e0:0a:0f:b9:e2:
                    ed:49:8f:ce:93:77:4e:50:0e:77:fd:1b:95:6f:00:
                    fb:e7:7e:e9:54:13:36:d0:36:60:82:6a:0a:d1:cb:
                    c7:72:44:1d:fe:44:bd:51:b8:ae:34:92:35:10:86:
                    17:d5:82:38:c0:f6:2e:c8:61:ae:11:2e:46:f0:ff:
                    d6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FC:2B:4B:63:27:B3:CB:24:51:D9:8F:F8:F1:5B:9C:32:76:55:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2e8988e3-c958-37c5-9f7c-fd2854f24bd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:73:a9:38:fe:b3:52:3d:7e:53:a6:f4:07:eb:e6:b3:43:69:
         0f:ff:3a:06:88:fa:14:43:f1:2f:e6:f4:18:5d:2b:41:c1:47:
         1b:34:5e:00:d9:1f:c4:38:0e:45:c7:a9:7f:9a:28:76:7e:c1:
         6c:7e:db:f5:1c:4d:75:c6:99:09:e0:b8:7d:3c:26:32:9b:59:
         7e:fc:7c:30:28:d4:f3:13:4a:12:35:e0:7a:08:dd:87:45:56:
         e7:cd:69:d0:ce:bf:ea:eb:0b:24:e3:ff:c1:3e:73:d1:05:0a:
         64:ef:e9:c2:88:62:96:73:73:04:d6:f4:f1:f3:88:ed:a5:3e:
         46:31:a1:cf:12:6b:3b:81:6c:c1:67:9d:95:8e:26:80:d8:ce:
         ad:9e:54:ac:3b:20:39:86:a0:43:02:4d:2e:58:18:9e:fa:62:
         6e:89:e2:4f:09:d9:8b:ee:f8:5a:42:81:9d:4d:61:c3:c5:3a:
         f1:3f:5e:30:a2:f6:18:3a:b7:55:e8:ca:91:e1:89:b6:14:ef:
         e7:e6:4f:6a:7a:87:4b:6d:a7:02:cb:bf:53:cb:b5:9c:94:73:
         b3:82:af:a1:21:89:72:98:dd:ba:d4:41:00:a1:43:cd:d8:ad:
         7c:4b:56:55:2b:af:11:6a:c8:5f:cd:3c:71:4c:3a:c7:03:0c:
         56:00:6c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:54:51 2026 by rpki-client