Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3d5e6c37-d97a-30a2-bfcd-b824afd55a3a.roa
File:                     3d5e6c37-d97a-30a2-bfcd-b824afd55a3a.roa (raw, json)
Hash identifier:          zYaM5m8Sfty08nhEXzlUIfE/sfNkXJAR8Vam914ff0w=
Subject key identifier:   78:10:E8:4B:76:C3:3F:DC:2A:B7:BD:CF:BB:C6:19:07:A3:C5:01:B4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640F6F5387867D2BD1DCDF80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3d5e6c37-d97a-30a2-bfcd-b824afd55a3a.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     36522
IP address blocks:        206.47.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:6f:53:87:86:7d:2b:d1:dc:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=12dd33be-33c4-47f4-bdfe-9a123c485779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fb:54:4c:4e:27:c9:71:1d:04:f2:e1:e2:2d:
                    13:b4:86:60:50:3a:ad:ea:17:55:d9:66:32:ae:d7:
                    e4:dc:bc:a7:a6:90:4f:c2:b4:8a:72:b7:1b:6b:19:
                    7c:33:a9:01:97:c5:af:cf:c4:05:c4:41:05:70:b3:
                    38:93:f9:f3:87:8f:77:75:f4:e8:40:e1:2b:5a:6b:
                    bc:e4:52:a2:b3:01:d9:f6:dc:ea:0d:02:73:c1:20:
                    73:c4:f5:9e:9f:8a:cd:87:0b:a8:2d:ce:4e:a1:76:
                    a3:6b:64:ed:38:33:20:ad:dc:a7:44:a6:3c:cd:c3:
                    44:26:8f:d5:c9:a3:29:8c:eb:45:aa:bd:28:47:5b:
                    3c:3d:48:26:b4:35:26:0f:f0:75:c0:cb:25:7a:f6:
                    16:91:5b:51:66:04:62:56:4a:4a:80:61:0f:cb:9c:
                    18:e1:1d:e5:73:a2:b5:bb:d0:09:98:0b:02:82:ab:
                    d7:de:77:27:fb:9e:2c:ba:64:2d:59:d4:23:d0:c7:
                    5b:96:75:cb:ef:8a:53:64:61:43:f7:4a:83:56:dc:
                    5f:85:8e:87:e6:0f:42:56:b2:c3:49:42:e5:04:25:
                    12:5e:07:19:15:bc:48:13:15:2c:89:73:06:f6:ed:
                    d2:01:fd:92:ea:f7:88:89:a8:2c:06:4e:dd:46:45:
                    84:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:10:E8:4B:76:C3:3F:DC:2A:B7:BD:CF:BB:C6:19:07:A3:C5:01:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3d5e6c37-d97a-30a2-bfcd-b824afd55a3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:08:4d:31:4e:4a:70:71:6b:f5:22:5d:d2:4c:1e:69:42:61:
         25:72:fd:e7:e5:4d:29:f5:80:74:2d:00:55:05:0a:77:ca:ba:
         33:f7:13:28:6a:c9:fb:91:22:0e:77:73:70:1a:86:96:fe:31:
         ce:f1:5f:74:27:0a:e6:8c:3f:81:fc:20:5e:e9:8b:4e:ac:6d:
         3e:23:24:cc:a9:6f:72:a0:49:22:41:5b:7c:5e:bd:8c:1a:60:
         bb:e1:7e:8d:d3:f1:34:b5:e6:5d:75:99:2f:ba:72:1e:8b:b7:
         47:a7:0a:fa:7e:99:7e:49:3c:b6:52:fe:5e:71:64:47:7c:92:
         49:bf:5a:27:db:43:72:ff:0b:c4:71:fe:78:e6:b6:85:58:c7:
         e6:29:63:ac:0c:0a:cd:2f:d8:ce:ea:bb:fa:de:7f:c0:74:24:
         ff:46:88:d7:fc:c3:f5:93:14:e0:e2:68:51:69:14:9b:f1:60:
         2b:81:19:54:c1:77:e6:8a:12:ca:39:81:d5:99:9d:db:a1:e4:
         19:87:54:f0:70:74:ef:64:2d:18:b0:26:78:fa:49:45:d1:37:
         99:9a:6a:00:eb:c3:61:75:bd:33:23:a1:c6:14:22:49:80:b8:
         05:56:d6:51:a4:3b:6d:d4:dd:a3:40:05:e3:37:5e:3a:87:5d:
         46:a1:68:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:52:35 2026 by rpki-client