Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5afae007-1cd1-3b06-bdc5-d57745cacbd7.roa
File:                     5afae007-1cd1-3b06-bdc5-d57745cacbd7.roa (raw, json)
Hash identifier:          BmrfF7JmG2zWIAJio3Rbx8CK5+3XwfFNHKfw3j3GSys=
Subject key identifier:   25:32:1C:10:93:EF:99:17:DE:7A:76:CB:38:8D:9A:26:79:1A:0A:24
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640F5CD32A39673BBB633400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5afae007-1cd1-3b06-bdc5-d57745cacbd7.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     577
IP address blocks:        199.243.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:5c:d3:2a:39:67:3b:bb:63:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=92172190-dc60-4ca7-abf2-4b77ab7e38db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:7a:c9:f2:33:fc:c1:73:53:4a:94:d4:79:
                    da:2a:49:24:c2:2a:9d:20:9b:fc:d9:7f:63:59:58:
                    6b:7b:97:61:61:00:38:e9:68:99:18:e2:b5:38:7c:
                    ae:66:6b:6a:24:25:77:8a:d5:cb:c9:02:81:f0:43:
                    6a:91:22:50:e3:76:4e:5d:37:82:b0:c2:53:8a:a2:
                    d8:f2:f1:db:20:f2:c3:4f:33:35:68:11:cb:b7:0f:
                    85:7c:f4:69:4e:96:be:a9:a7:e0:44:ce:49:6e:c9:
                    b6:cf:38:dd:11:a6:7b:53:c5:c2:ea:07:f0:45:ed:
                    5f:7b:65:e7:2f:00:f6:78:14:f2:5d:61:31:94:59:
                    5f:82:dd:f3:2d:07:6c:04:b3:1d:19:84:80:57:da:
                    75:c0:9e:c4:05:d5:bf:cc:67:5d:db:0e:2d:6c:ba:
                    99:b3:66:45:22:21:b6:f8:60:2e:fa:df:b5:74:b2:
                    64:40:db:d2:02:f8:1a:cb:67:e5:d7:49:43:5e:13:
                    cd:87:43:1c:b1:d8:7d:4e:b9:79:fc:b9:67:4b:49:
                    86:5c:90:f8:d2:21:23:e0:97:77:cb:2a:bd:e8:6f:
                    1d:17:3e:02:d2:bb:f6:21:64:1d:bc:5f:05:e7:3b:
                    de:58:c3:95:2a:ca:89:33:52:11:df:ea:03:11:a2:
                    0f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:32:1C:10:93:EF:99:17:DE:7A:76:CB:38:8D:9A:26:79:1A:0A:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5afae007-1cd1-3b06-bdc5-d57745cacbd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.243.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:b9:a8:50:76:8b:29:50:f4:6b:08:59:8e:80:2a:6a:91:0d:
         22:d7:a8:3b:2e:4c:c8:d0:13:88:68:c8:91:c9:e8:aa:d6:8d:
         3e:6c:f5:8a:5d:18:d1:4e:42:b0:68:91:f4:b7:2b:b9:b3:82:
         41:05:42:9a:8d:0f:7e:72:2a:cb:89:3a:3f:0b:a3:89:6c:be:
         57:6d:a1:c8:a0:db:ca:46:f6:e0:2a:d5:75:c6:33:22:02:b3:
         f3:fe:9a:0f:8c:b5:3c:6f:55:fa:f3:6c:f9:a2:26:60:28:23:
         ac:be:d1:bf:be:ff:78:eb:5a:a9:ed:96:27:bd:22:d9:2a:7c:
         5f:31:e3:92:77:1a:39:c6:73:d5:73:d7:f8:57:a2:24:d2:94:
         84:de:94:2b:36:84:8e:43:33:0c:c6:9a:51:c3:77:46:14:c5:
         32:c4:08:a9:4b:22:53:d1:fd:38:7f:04:5c:de:28:ad:f0:9b:
         4c:0d:d5:ff:f9:cc:e4:34:82:b6:d8:78:56:bb:ac:3c:bb:b9:
         d9:a1:93:bb:a1:4b:90:cc:c7:9d:97:57:af:5f:9c:2d:50:fa:
         d2:1f:f7:44:8c:ba:6e:99:33:7a:33:ac:43:2d:fd:82:37:8e:
         81:05:ef:af:1f:74:fb:89:5f:5b:c5:26:ce:43:2a:9e:16:82:
         a8:d2:47:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:53:12 2026 by rpki-client