Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6ddf4168-5f5a-30e8-ac0c-e1e9f9a715d1.roa
File:                     6ddf4168-5f5a-30e8-ac0c-e1e9f9a715d1.roa (raw, json)
Hash identifier:          8AUhQ9Ptz2jGnFwv0Kt3nOZgrKSTfoNpT97Cq8gtUOY=
Subject key identifier:   25:C9:DA:46:E5:34:65:C9:45:9D:FD:28:3F:F4:48:EE:15:D5:05:DB
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640FCBD877B60A8A6B31F200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6ddf4168-5f5a-30e8-ac0c-e1e9f9a715d1.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     35911
IP address blocks:        209.226.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:cb:d8:77:b6:0a:8a:6b:31:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=6e6cfccc-0f8e-4d19-b819-ae3a0eb287d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:37:00:ae:5a:f1:b5:e0:2d:05:36:6c:96:3a:
                    95:c3:13:ea:2e:a8:6c:dc:cc:cf:d1:75:b2:dd:25:
                    fd:79:34:07:a2:36:01:12:77:e4:bc:ff:94:6d:7f:
                    48:0d:47:ab:1b:2c:48:b9:1c:76:ff:68:d5:a1:5b:
                    08:f6:96:ff:66:87:85:d5:31:47:77:d2:c9:34:68:
                    25:fb:98:18:7c:d2:8b:e6:27:95:8d:de:69:30:04:
                    9e:b0:2d:82:4b:9a:73:3d:da:24:da:42:bd:be:8c:
                    a0:e9:30:e4:c4:9e:7c:44:de:ec:43:5e:2e:11:13:
                    5c:2b:b2:61:97:8c:ec:74:de:40:45:67:5e:3b:cc:
                    34:7c:5b:c7:f9:42:bc:b4:32:1d:58:87:1e:0d:1d:
                    ca:66:b7:88:22:68:51:79:22:39:5d:2c:05:6e:c0:
                    4c:ce:3a:9d:3a:2b:13:0e:ff:9e:79:1f:56:93:7d:
                    9c:37:d1:fa:07:d4:84:31:e7:da:71:c4:84:0a:43:
                    36:a3:8c:c8:0f:64:12:b9:e4:76:fb:a8:a6:29:6c:
                    91:d9:3a:61:88:ca:13:c5:68:8a:66:bd:1e:a3:d0:
                    6a:cf:3e:82:b2:25:89:68:99:fc:90:6d:7f:26:c4:
                    52:d7:b9:0d:8b:92:d4:26:0c:36:9d:94:f7:72:5b:
                    71:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C9:DA:46:E5:34:65:C9:45:9D:FD:28:3F:F4:48:EE:15:D5:05:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6ddf4168-5f5a-30e8-ac0c-e1e9f9a715d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ff:86:35:bd:ac:06:40:86:a7:d6:1c:e7:42:c3:d3:80:90:
         af:06:8c:3b:f2:3f:c0:76:fe:2e:51:b7:57:8b:22:97:b0:c8:
         37:df:81:eb:95:11:c9:d9:94:62:6b:65:96:4f:1b:d9:54:0b:
         e8:8e:4a:55:7e:9e:eb:f2:9e:c7:97:fa:91:78:fb:45:95:4e:
         5b:55:4f:64:5e:95:90:8d:fd:e2:99:95:c7:a9:8a:6b:cd:14:
         78:3d:e9:6b:44:82:37:a4:d5:21:24:4a:8b:ab:ab:2c:38:03:
         11:ad:f1:39:f6:e2:c9:8e:5f:3a:8c:d0:61:7e:7b:b7:54:92:
         e9:85:97:5f:8b:cc:00:81:e3:c8:f9:3b:62:bf:8e:63:4a:01:
         3e:0d:54:16:d8:bf:98:2a:9a:b4:99:b9:15:7b:45:d3:a6:2f:
         33:20:8b:35:ab:59:e4:64:10:9d:a7:18:7d:a3:10:a9:32:ac:
         87:d5:95:e8:bc:c3:a0:94:6d:ff:4d:c0:c3:0a:94:fd:b0:a8:
         6e:5b:5e:a4:66:85:a4:78:5b:47:3f:fb:cd:ff:ed:d9:cd:a6:
         91:6a:5d:27:4d:ee:81:5a:5e:ab:4d:26:ca:11:94:d2:25:50:
         7b:3a:cb:21:38:e2:bc:67:cc:cb:57:05:b6:be:67:c2:0c:55:
         67:27:0e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:53:12 2026 by rpki-client