Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5428a0c5-c09e-3b45-a41d-259f71255f6d.roa
File:                     5428a0c5-c09e-3b45-a41d-259f71255f6d.roa (raw, json)
Hash identifier:          DED/v86zUJ++lxAL0Aq3hxExvGMcHS5uJkjGff4LefY=
Subject key identifier:   FD:D4:9E:89:2B:AF:15:13:F6:21:36:AD:B7:9B:EF:C8:41:C4:77:DC
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640F5A39FC2035ACEBB90EE8
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5428a0c5-c09e-3b45-a41d-259f71255f6d.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     21552
IP address blocks:        207.35.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:5a:39:fc:20:35:ac:eb:b9:0e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=6f3985db-2128-47d9-a0ee-66ff1830628e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6d:0b:d9:15:78:77:b3:1d:b9:e1:58:a5:d2:
                    1a:52:a3:3d:c4:94:55:fd:ff:b8:83:e0:eb:7a:6b:
                    20:49:5c:b7:41:db:01:52:79:62:07:54:a3:1d:ab:
                    74:68:91:4f:bd:62:cd:aa:43:fe:83:c1:a5:68:62:
                    4c:0e:f6:96:ae:a0:d5:81:56:26:16:2a:88:dd:71:
                    ca:34:1b:d4:97:89:39:ac:2d:9f:34:bc:c8:b8:55:
                    fa:bb:db:7f:c2:b1:c1:5b:79:6d:ab:a3:b7:f3:5b:
                    ac:53:e2:53:0d:30:65:19:40:eb:8c:5c:d3:12:28:
                    8c:0e:e7:8b:3f:aa:5f:f6:0a:a6:34:61:3f:9e:c1:
                    39:ab:7b:17:1f:d0:4d:c5:55:30:77:3f:18:07:e3:
                    10:e2:b1:55:94:bb:3c:67:50:67:ba:66:ce:b2:c9:
                    22:1b:c6:15:53:42:7d:31:53:69:f0:df:ba:8a:fb:
                    5c:6c:10:57:27:7a:e7:e6:6e:18:16:9d:90:57:31:
                    54:54:62:d5:bd:8c:a1:2c:b4:7b:d4:9b:4f:83:cf:
                    2b:2f:cc:a8:ba:e3:06:d8:af:e0:28:91:7a:c1:9c:
                    c0:c0:e2:d8:84:8c:8e:de:85:1c:ce:89:cc:13:3d:
                    0f:18:8f:4c:3b:9b:3e:19:6b:5e:2c:44:f9:37:c3:
                    32:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D4:9E:89:2B:AF:15:13:F6:21:36:AD:B7:9B:EF:C8:41:C4:77:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5428a0c5-c09e-3b45-a41d-259f71255f6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:f9:90:2d:8c:66:29:2a:c4:c1:ca:67:2a:ac:f3:4d:d9:27:
         12:0a:05:c2:16:7e:fb:5c:a3:e2:ec:e5:e0:29:9a:ae:18:8a:
         09:64:3a:a2:d2:6d:d5:12:9c:d0:9c:60:0a:a8:df:f5:58:dd:
         4a:c8:30:ef:fe:8f:9e:74:42:26:a5:26:3e:b5:05:0c:09:f2:
         b5:5f:19:52:7b:6b:f8:7f:06:fc:ca:aa:d9:ca:62:73:3c:34:
         a1:c9:c7:87:0f:cc:cd:e7:34:0d:ac:73:d2:2f:e9:d4:56:b6:
         5f:cf:5a:1f:16:5a:31:a2:2f:c3:7a:df:db:a7:88:85:e5:17:
         e4:4d:b7:63:9d:85:ff:ab:fe:a6:dc:58:91:6f:11:28:95:89:
         7c:71:b7:ac:d9:1c:aa:a2:99:2c:e6:e5:e2:1b:2f:53:48:84:
         69:8e:c5:a2:c5:37:ca:5f:9d:e3:0e:e8:f7:a8:9f:90:30:7e:
         fb:8d:5e:14:6f:71:7f:e3:c5:ee:58:79:74:0f:a9:02:0e:f5:
         50:77:69:1a:ed:20:72:59:c6:56:64:62:95:1e:2b:13:92:d3:
         a0:6d:2f:3c:da:55:54:dc:c6:1a:59:d6:02:2f:29:74:c5:23:
         06:6a:48:6a:2b:82:9b:c0:a0:29:33:ea:ae:b3:c6:4a:c8:5d:
         00:3a:95:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:54:51 2026 by rpki-client