Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7953cd39-a0b2-3245-9709-b272c6bc9f0c.roa
File:                     7953cd39-a0b2-3245-9709-b272c6bc9f0c.roa (raw, json)
Hash identifier:          bQopoyXCE3/3e/vZ6TU5n2uZoMgMyBouiny88S1Qizc=
Subject key identifier:   8A:F2:EF:70:D3:47:4D:1F:DB:10:AD:59:3A:87:EA:19:7A:41:C5:B0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640F694DBF41A87DF2EB4340
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7953cd39-a0b2-3245-9709-b272c6bc9f0c.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     36522
IP address blocks:        207.164.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:69:4d:bf:41:a8:7d:f2:eb:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=11dafbad-a4c5-4807-ba69-bf7252fd1eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d3:69:4d:cf:39:2e:65:0c:56:bb:95:51:a6:
                    51:1b:38:c6:a1:5a:aa:14:89:6a:b7:57:41:01:15:
                    8f:b0:47:bb:e1:b1:98:fa:21:32:9e:11:d3:e6:6a:
                    2a:5b:b6:9f:94:ce:ba:c2:bd:14:5a:4d:a7:1c:e1:
                    1b:b5:8e:64:24:95:35:fc:4e:b9:83:57:9f:bb:8f:
                    0c:17:63:ab:76:f5:96:ea:b0:5e:8b:8e:11:ff:58:
                    f0:63:e6:5f:27:6d:23:28:8f:0b:65:f9:12:54:f3:
                    97:7f:b1:8a:04:88:f8:51:8f:6d:69:8a:62:4f:bd:
                    1a:40:cd:a7:57:a1:14:b2:6a:f3:c9:04:bf:71:11:
                    86:8b:f1:23:f8:68:32:c0:61:1c:73:94:64:bc:12:
                    b3:df:1c:68:59:5e:83:91:e7:e9:bb:6b:ad:6f:87:
                    0e:23:59:b7:45:3b:05:0c:0e:4a:31:fb:21:c6:2f:
                    59:d4:2e:e6:2d:bc:9f:3c:9a:e7:b2:3c:9a:26:1c:
                    b6:39:d2:18:f6:a7:8e:3d:53:4c:01:16:69:a6:96:
                    d2:77:87:d9:db:24:72:69:d8:f6:1e:55:4a:d8:77:
                    4a:8c:3e:20:60:b8:50:9f:32:9a:bd:e0:5d:23:ea:
                    ca:2c:67:b0:7e:4d:89:67:15:ff:08:63:5f:66:a1:
                    cb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F2:EF:70:D3:47:4D:1F:DB:10:AD:59:3A:87:EA:19:7A:41:C5:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7953cd39-a0b2-3245-9709-b272c6bc9f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:75:e4:bf:50:52:08:08:69:ef:3a:32:4d:fa:10:85:cd:df:
         b9:96:04:2f:7b:f1:81:12:d4:77:05:02:82:9a:3a:3c:35:81:
         e8:0d:b7:1a:0e:15:15:5d:4d:b1:c2:f9:40:3d:c7:f6:e6:64:
         0d:b8:1f:d4:5b:2a:c0:69:00:b1:0e:28:da:95:8a:64:40:44:
         8e:09:51:31:8f:ee:81:07:f6:65:7b:3c:bc:ce:9b:60:80:35:
         9d:0c:58:c8:3d:cc:f9:3c:d8:c6:b0:46:7b:8e:05:8b:a4:54:
         1e:74:38:76:d0:c9:41:d8:76:d1:13:31:3f:26:03:f6:94:da:
         59:a2:6a:5b:06:8a:9e:00:ac:db:f5:74:36:1c:32:64:e6:78:
         9d:93:9f:47:81:97:5d:c5:90:3a:1c:c2:9c:50:41:c0:c0:ae:
         61:33:56:6a:62:6a:61:06:57:b6:bd:10:26:ea:62:87:81:94:
         ac:c6:b8:73:05:72:61:8f:a9:e1:b6:b6:22:1a:07:73:27:5a:
         5b:0e:ab:1a:cc:cb:ab:4f:a8:3a:2f:8f:61:9e:67:a4:53:ce:
         3c:02:8d:1d:f0:ec:2d:fb:99:12:c7:57:79:95:fe:74:db:35:
         e2:65:af:14:e1:7d:cf:1c:c7:c6:6f:24:d8:7b:b7:35:75:59:
         40:08:76:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:56:06 2026 by rpki-client