Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4d47b8f8-a8a2-35c4-b9d1-8ee9f206ba3f.roa
File:                     4d47b8f8-a8a2-35c4-b9d1-8ee9f206ba3f.roa (raw, json)
Hash identifier:          T2dmWbAtr7aFVP9F46wYAAUVItlmaRAXOo9lbbzV1Uw=
Subject key identifier:   EB:DE:C8:F9:0B:4A:2C:0F:8B:33:B7:87:CD:0F:1D:80:61:70:AC:96
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640FCD2D70C4422573910A00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4d47b8f8-a8a2-35c4-b9d1-8ee9f206ba3f.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     35911
IP address blocks:        209.226.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:cd:2d:70:c4:42:25:73:91:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=bc04f94d-c293-4c23-98b6-d6d1e140afa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:e3:00:35:59:4f:13:52:2d:c1:f6:a7:12:
                    06:5f:e7:46:70:8d:d3:b7:ea:31:c0:f6:9c:70:10:
                    12:42:57:57:9e:4b:ea:4e:3c:41:49:58:39:36:d8:
                    8a:33:0a:87:17:56:35:cf:89:67:34:c9:96:12:aa:
                    05:98:5e:e6:b4:7f:23:ae:ba:21:16:ec:73:7e:20:
                    8a:59:c2:93:af:95:7a:8f:4e:3c:5a:7e:5e:9b:65:
                    29:1f:67:a9:70:56:25:ad:7a:8b:cf:21:77:d4:2d:
                    b1:76:6e:78:91:ab:ed:6f:4d:e3:31:cb:2c:ef:e1:
                    ad:78:65:2a:aa:03:90:68:25:87:a2:91:2d:cf:08:
                    9b:c6:4e:ae:ed:d7:46:97:88:c6:d4:62:f5:7b:d3:
                    99:02:9c:1a:a9:ad:94:5c:ee:11:13:3d:fa:94:58:
                    38:79:66:0f:7d:a5:f9:01:02:d5:8e:ed:f4:bc:b0:
                    16:23:64:8c:fa:5f:b1:05:b5:fb:bc:79:57:24:b3:
                    3a:07:4f:c8:31:1f:b4:c0:ea:10:27:a4:8d:43:45:
                    88:cd:fe:b3:ed:0c:a0:aa:6f:e5:b0:93:8f:f5:9b:
                    ef:c5:35:58:3e:24:9b:e8:30:ca:b4:59:ad:24:fd:
                    dd:59:78:e0:f0:c7:0e:62:17:9d:5f:7d:9f:71:b7:
                    98:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DE:C8:F9:0B:4A:2C:0F:8B:33:B7:87:CD:0F:1D:80:61:70:AC:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4d47b8f8-a8a2-35c4-b9d1-8ee9f206ba3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4e:7b:2a:1d:29:5c:fb:df:5f:d9:d6:ea:15:57:6e:0f:57:
         3a:ea:b8:c6:93:27:fa:37:14:22:31:cc:9f:31:23:16:31:e5:
         76:e8:2f:41:ae:93:6a:9d:6e:a0:77:b1:fd:ba:17:f3:b3:71:
         e6:9d:d6:f1:e0:8d:86:29:89:10:a3:9e:e4:e6:da:51:24:16:
         29:dd:48:73:76:db:bc:58:c8:ff:6b:08:95:f7:ed:db:5d:1d:
         68:37:43:b1:34:4e:c3:c4:9b:39:6d:23:17:01:ab:8c:72:1c:
         d2:30:b2:ea:6d:15:cc:38:69:1e:a6:15:d8:4d:db:d5:d6:6b:
         a2:41:83:9a:f2:b2:88:41:fa:33:b5:44:56:90:2b:e9:8e:6f:
         88:07:20:a2:5d:a5:9c:41:6c:98:67:19:83:7b:19:4a:80:f7:
         97:b0:b3:aa:ed:1a:c5:d9:9e:80:a0:9a:39:65:9a:cb:48:f5:
         54:1c:ac:ef:8b:cf:aa:3f:a9:24:11:c6:7b:0d:bb:77:93:4d:
         4c:b3:69:78:79:68:d8:76:2b:8b:e5:80:d9:3f:09:df:18:36:
         14:82:a1:f1:7f:cd:f9:56:5b:55:75:86:be:e1:9f:78:a0:2a:
         9d:8d:13:70:0f:12:f7:b8:4a:7f:a6:ca:db:d7:72:83:e0:99:
         10:ef:7e:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD80tcMRCJXORCgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
YmMwNGY5NGQtYzI5My00YzIzLTk4YjYtZDZkMWUxNDBhZmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4rjADVZTxNSLcH2pxIGX+dGcI3Tt+oxwPac
cBASQldXnkvqTjxBSVg5NtiKMwqHF1Y1z4lnNMmWEqoFmF7mtH8jrrohFuxzfiCK
WcKTr5V6j048Wn5em2UpH2epcFYlrXqLzyF31C2xdm54kavtb03jMcss7+GteGUq
qgOQaCWHopEtzwibxk6u7ddGl4jG1GL1e9OZApwaqa2UXO4REz36lFg4eWYPfaX5
AQLVju30vLAWI2SM+l+xBbX7vHlXJLM6B0/IMR+0wOoQJ6SNQ0WIzf6z7Qygqm/l
sJOP9ZvvxTVYPiSb6DDKtFmtJP3dWXjg8McOYhedX32fcbeYpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOveyPkLSiwPizO3h80PHYBhcKyWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNGQ0N2I4ZjgtYThhMi0z
NWM0LWI5ZDEtOGVlOWYyMDZiYTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0eJYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA1OeyodKVz731/Z1uoVV24PVzrquMaTJ/o3FCIxzJ8xIxYx5XboL0Gu
k2qdbqB3sf26F/Ozcead1vHgjYYpiRCjnuTm2lEkFindSHN227xYyP9rCJX37dtd
HWg3Q7E0TsPEmzltIxcBq4xyHNIwsuptFcw4aR6mFdhN29XWa6JBg5rysohB+jO1
RFaQK+mOb4gHIKJdpZxBbJhnGYN7GUqA95ews6rtGsXZnoCgmjllmstI9VQcrO+L
z6o/qSQRxnsNu3eTTUyzaXh5aNh2K4vlgNk/Cd8YNhSCofF/zflWW1V1hr7hn3ig
Kp2NE3APEve4Sn+mytvXcoPgmRDvfio=
-----END CERTIFICATE-----
Generated at Fri Jul 17 09:52:35 2026 by rpki-client