Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7be5c446-80a2-311c-bf18-b76d734c3c2e.roa
File:                     7be5c446-80a2-311c-bf18-b76d734c3c2e.roa (raw, json)
Hash identifier:          5JHFJbPJTf2M8qg5pskhTiJ5fi0yy85/28g+LtUw73M=
Subject key identifier:   95:6D:F3:69:E2:9D:B1:E0:1A:DF:C8:FD:7E:15:FC:AB:95:37:EE:D4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640F6D7CF8D019FFF9051700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7be5c446-80a2-311c-bf18-b76d734c3c2e.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     32678
IP address blocks:        174.90.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:6d:7c:f8:d0:19:ff:f9:05:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=c24d7a7d-3c74-43ef-a55b-bff76313c275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1d:09:09:e0:4e:8d:04:e8:18:fa:53:81:13:
                    86:f1:43:81:2d:29:2a:d8:b3:70:4e:63:c5:a9:ca:
                    63:ff:6c:6b:67:b7:0a:96:00:75:38:1f:5c:5c:4f:
                    5f:9e:c8:7c:d0:9f:3e:bb:99:2c:e7:59:9b:e7:e1:
                    cf:c9:99:e4:20:55:22:58:34:e1:77:29:f6:69:f4:
                    12:27:67:b9:dc:37:6f:a1:cd:3b:40:24:b6:b8:98:
                    dd:80:d8:b4:ed:b5:de:1a:f7:9b:a9:5d:5a:cd:c8:
                    44:87:5b:a0:a2:b0:8f:ac:43:26:9a:93:3d:7e:02:
                    41:1e:78:cc:9e:eb:0f:e2:87:79:d2:bf:b1:17:dd:
                    90:a9:c9:f2:f4:a5:8c:73:88:ce:4e:6a:c8:c8:b1:
                    dd:7a:4c:a6:71:1d:7c:e4:79:85:f8:36:ae:73:a3:
                    1c:69:56:f5:f1:a5:09:81:bb:fd:36:ec:02:84:c1:
                    5c:b1:7f:ec:e3:33:a0:fc:c2:3b:c6:7f:e8:95:3c:
                    bf:40:56:e5:5f:62:b3:86:28:a9:42:dd:f0:62:35:
                    c1:29:6f:f7:52:18:a0:ee:e0:e0:16:46:30:2c:84:
                    49:6f:5e:bb:ba:50:5c:a3:14:72:01:e2:c3:88:58:
                    77:6e:04:58:71:77:af:a4:a0:3a:96:d0:cc:c6:b4:
                    82:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6D:F3:69:E2:9D:B1:E0:1A:DF:C8:FD:7E:15:FC:AB:95:37:EE:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7be5c446-80a2-311c-bf18-b76d734c3c2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.90.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:ac:2d:0d:e1:9f:4a:2a:f6:12:de:93:09:f9:86:f5:10:a2:
         da:0c:dd:23:91:8f:af:2d:96:58:0a:45:71:19:15:84:89:9a:
         bb:02:95:e7:2f:d2:5d:3c:b9:6a:21:54:67:cf:00:59:6b:79:
         b0:21:54:0e:db:7a:12:7a:e4:c3:c3:ac:c9:48:03:6d:2b:ff:
         97:1b:8f:e9:7b:3e:46:18:c1:33:7a:fb:d8:18:22:0a:a2:f1:
         5b:c3:ec:6e:9f:d7:9d:4b:8c:06:2f:e9:c3:fd:a0:d1:9b:55:
         d1:3e:50:b0:47:44:26:87:3c:64:ea:2e:67:1b:a4:b6:87:5f:
         9e:70:95:bc:7d:8d:57:eb:a9:fd:d3:39:08:fe:c1:05:7f:ba:
         07:cd:8e:41:ea:90:61:c0:b0:cc:73:19:06:d8:16:79:08:46:
         1d:61:d1:fa:61:fc:c7:0b:2d:48:f6:a1:b1:da:61:44:ae:2e:
         0d:e1:e4:a4:dc:08:51:6e:f5:d7:76:25:92:1d:f0:8e:7e:29:
         20:ec:a3:4e:84:a6:03:11:1a:f2:3b:b2:59:b0:d2:87:95:c5:
         e9:dd:cf:e1:da:89:96:a0:f1:dc:8b:ae:de:98:01:af:d6:91:
         23:71:4f:40:f8:e2:03:b9:a6:3c:93:82:a6:d9:14:d7:6d:6c:
         17:09:8d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:53:21 2026 by rpki-client