Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5f34178f-71ad-3069-957a-35c39d113f3e.roa
File:                     5f34178f-71ad-3069-957a-35c39d113f3e.roa (raw, json)
Hash identifier:          ikA3FGWpj4+MpyNxhQZLImtKxSkUciho1cDBvn+BJS0=
Subject key identifier:   92:B0:5A:A6:0D:B8:CE:34:80:CF:EA:22:93:03:75:1E:7E:A7:22:06
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640FC8AE009CECAE156FF480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5f34178f-71ad-3069-957a-35c39d113f3e.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     13441
IP address blocks:        204.101.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:c8:ae:00:9c:ec:ae:15:6f:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=18fa8bdd-0a49-40e4-b49c-378a72b63dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:44:f6:1d:47:a4:40:fc:f5:a0:54:fa:86:e2:
                    74:1d:8d:83:b1:61:32:28:f6:7a:83:35:49:75:47:
                    dd:df:93:ab:2c:2d:a6:ef:3f:e4:e8:5e:a1:94:11:
                    11:53:a6:df:72:15:73:06:e6:c3:24:2e:5d:42:bd:
                    3f:39:f0:64:b6:d3:1f:c9:fe:24:79:22:10:d5:d6:
                    42:96:7f:80:fa:2b:2b:7d:ce:6c:95:8f:69:44:2f:
                    bf:81:a9:b5:fd:17:47:09:d7:de:41:ee:70:06:2a:
                    5b:31:3a:75:f0:8f:7c:aa:bc:c1:dd:1b:80:e8:10:
                    89:e2:f1:23:75:46:f4:e3:d1:7f:76:25:75:0c:e5:
                    ca:51:6f:b9:fb:31:59:35:5d:ca:a4:f2:40:44:58:
                    5c:72:47:22:9f:d4:63:a7:cc:60:f1:c8:6f:0a:4f:
                    e0:ac:89:47:26:e7:1c:a9:be:c3:6e:5b:1f:29:51:
                    c1:eb:c7:ac:22:45:5a:73:5d:d9:53:e1:09:27:01:
                    ef:ab:73:11:9c:54:72:68:23:c3:5c:57:70:a8:50:
                    58:6a:e2:b4:60:50:20:ec:2d:15:59:5e:82:fb:bd:
                    90:24:bc:74:16:67:7c:85:f2:fd:b3:9f:48:be:7e:
                    21:cf:30:ee:46:35:2d:bd:9f:2d:66:6d:a9:7f:b9:
                    2e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B0:5A:A6:0D:B8:CE:34:80:CF:EA:22:93:03:75:1E:7E:A7:22:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5f34178f-71ad-3069-957a-35c39d113f3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ba:c1:71:8e:58:76:70:8b:c1:c2:1f:67:7e:86:3d:df:a7:
         ba:d8:06:cd:06:27:2f:75:ce:45:54:fd:b5:4f:eb:75:03:85:
         b3:6e:8b:ea:91:8f:3b:a3:c3:a8:8e:86:ab:e6:1e:7d:10:7f:
         ef:8b:91:77:45:e5:4f:31:01:59:97:c1:b5:42:d8:4a:b9:13:
         6e:32:a3:91:27:82:4d:c2:04:4c:1b:49:43:7e:a8:6a:10:9f:
         3a:b3:a1:4c:e5:68:82:22:c3:84:03:6b:d4:e8:6c:0f:83:67:
         ec:29:65:8f:11:2e:58:23:38:fa:d0:b4:92:2d:63:6f:3c:7f:
         8d:47:60:53:04:e2:18:4f:69:f1:2f:67:4c:f7:10:27:e8:87:
         e5:09:c1:be:63:30:5c:e3:44:c0:d8:9d:bb:9c:2f:72:ca:a8:
         1f:8a:43:6d:ea:e0:74:57:cb:ec:6d:5c:41:22:4e:ab:2c:49:
         d9:6b:0a:de:21:fc:d5:35:fa:27:ee:c2:7f:ab:c4:36:95:96:
         2d:0f:d1:3b:c2:fc:56:d7:09:6d:35:3d:11:08:e0:f9:c3:f5:
         83:9e:72:86:8b:8d:8e:bb:de:c8:cf:db:14:b5:06:c8:5d:b4:
         5e:57:d7:bb:8c:42:2e:40:c8:71:53:0a:23:1b:f0:17:77:5c:
         8d:77:2f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:56:41 2026 by rpki-client