Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3539c1b6-8269-3185-a0c2-cd1dc30305ab.roa
File:                     3539c1b6-8269-3185-a0c2-cd1dc30305ab.roa (raw, json)
Hash identifier:          8An5mh/uBoBKkwOv5kAIxxLYKp5PZXMON3XG5QIqqrM=
Subject key identifier:   66:B8:1B:CE:68:B0:0D:25:07:49:85:0D:A9:94:19:09:95:6F:2F:5E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640FC493ED4BB920AE1D0810
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3539c1b6-8269-3185-a0c2-cd1dc30305ab.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     15321
IP address blocks:        207.236.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:c4:93:ed:4b:b9:20:ae:1d:08:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=f202b6ab-eb15-44df-bda9-001129780ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ed:06:b7:d9:ed:22:7f:f5:db:51:84:3f:94:
                    f1:6f:15:7c:a9:32:67:4c:de:c4:8f:1a:95:d6:fd:
                    2d:bf:be:68:04:c9:33:16:3c:e5:a6:e7:3f:6a:06:
                    2d:ee:8f:ad:06:3f:e5:7e:b9:7a:a2:cf:a5:c2:31:
                    28:fe:b8:c5:91:68:d0:76:05:b4:10:c8:31:be:91:
                    20:08:cd:47:49:df:a5:a3:d6:b6:2a:c7:0a:85:18:
                    c3:3c:f5:2a:81:f7:1f:80:13:0a:79:c2:82:c7:b7:
                    b1:ee:51:f5:bd:27:63:ca:d0:fa:79:3f:3c:40:ba:
                    5d:09:0a:09:a0:15:53:6d:01:36:bf:5b:2c:bc:4d:
                    a3:76:5f:9d:3a:c4:7b:ff:eb:b1:9b:de:c9:2b:0f:
                    b9:8e:81:99:04:24:c5:d4:96:4a:fa:30:32:31:27:
                    22:1f:80:8a:c3:b6:4a:6d:22:82:72:dd:bd:60:3a:
                    1d:63:6b:dd:76:51:1c:5c:ce:3a:e2:f7:a6:6c:c3:
                    be:96:8c:0a:14:9c:b3:e6:10:ff:3b:7f:fd:1b:74:
                    32:3d:45:31:d0:3f:c9:5d:ab:d0:44:75:b8:71:c3:
                    ba:79:37:2f:af:ec:3f:7c:73:ef:12:64:53:9d:ec:
                    47:b9:3f:9d:12:17:48:42:c0:73:ee:85:32:85:a3:
                    73:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B8:1B:CE:68:B0:0D:25:07:49:85:0D:A9:94:19:09:95:6F:2F:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3539c1b6-8269-3185-a0c2-cd1dc30305ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:12:02:1a:d8:27:8d:a6:97:94:cd:5a:64:1c:f6:38:f6:df:
         60:b4:d6:22:2f:db:7e:f8:9e:f9:38:45:79:90:04:4b:8f:ee:
         ee:69:5c:d4:1e:17:92:7f:54:99:02:03:4d:46:f1:fb:72:66:
         42:da:f0:9f:01:73:bc:ce:1a:4c:5a:da:e0:97:49:56:f3:a4:
         9f:0d:2a:7a:f6:82:f5:aa:b4:ed:b5:21:e9:99:50:fb:3e:bd:
         0c:d2:15:64:e2:d8:98:fb:a8:e3:d9:89:cf:88:56:17:14:e7:
         8c:21:68:3c:a4:d9:9c:02:4a:c4:db:25:ca:f2:e5:e8:09:fe:
         97:a3:01:26:e4:4c:0a:50:c3:a9:f3:09:d8:10:68:e5:45:4a:
         d2:1b:04:91:e4:69:b9:d0:23:65:e9:d5:c0:e9:8a:ee:98:23:
         4a:d8:43:58:eb:59:17:08:e6:6f:4a:fb:dc:7a:ab:22:3b:ff:
         99:fd:5f:ca:a5:9e:4b:9f:8f:f2:06:2b:fb:19:a8:58:ae:c9:
         e4:e8:1a:9b:b7:88:81:8a:5b:49:ea:e8:b1:54:c9:cd:2b:ff:
         f7:1a:5d:d2:15:90:7f:15:9e:3f:7e:21:4e:3a:20:03:b8:a3:
         3b:49:e2:cb:83:db:f5:66:a6:1d:c7:5e:e9:31:69:f4:83:d2:
         c4:09:cd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:56:53 2026 by rpki-client