Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9640a3bb-2a8d-3cad-af47-3e7ffc86a1ce.roa
File:                     9640a3bb-2a8d-3cad-af47-3e7ffc86a1ce.roa (raw, json)
Hash identifier:          1HtIK5yfHQOOOgsu7bnGu0Z0QRaPdfz+GspxqWdCJWY=
Subject key identifier:   3B:C0:5F:73:66:55:3C:8E:27:FB:6A:2C:BF:97:B7:50:B2:57:B5:B1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640FC28D2F42F8F2256E0000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9640a3bb-2a8d-3cad-af47-3e7ffc86a1ce.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     36522
IP address blocks:        184.150.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:c2:8d:2f:42:f8:f2:25:6e:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=74328828-845e-49cd-8c6c-1366d15fdc50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b0:da:bc:bd:42:f5:8f:be:95:ba:26:fc:eb:
                    7b:6d:2b:16:14:22:fd:83:64:ac:6e:8a:2e:e8:d3:
                    d5:44:87:ee:d3:c0:88:b5:5d:36:41:a6:54:27:16:
                    f8:f9:22:89:87:2b:69:90:3a:af:68:c9:ca:9a:5c:
                    a3:d5:1e:f2:db:67:84:69:f8:c3:70:84:f4:54:f6:
                    c7:3a:a0:b7:66:29:79:f2:a5:53:71:31:e4:9f:98:
                    eb:9b:6d:d6:11:9c:ea:c7:45:d7:c9:b4:f6:1c:9e:
                    b3:91:c9:56:17:e9:e3:e6:60:ed:bc:a2:c8:77:73:
                    2a:fb:ed:fe:4f:b4:db:49:23:00:23:16:86:d8:fb:
                    3a:39:45:30:a0:e7:01:26:ac:6f:15:19:2e:30:22:
                    f6:1c:e5:61:88:80:c4:49:72:a4:2b:52:f0:01:91:
                    a4:b0:bb:ed:99:58:3f:fa:f1:86:7e:1d:93:1e:7b:
                    19:27:75:4b:9c:77:0d:b9:04:09:a1:7c:7a:87:25:
                    b1:fd:ce:8e:6d:a7:17:0b:46:a1:86:04:b0:00:45:
                    1b:08:94:3b:1d:72:e4:41:7d:d0:19:d8:3a:89:26:
                    a1:c8:60:e2:e6:4a:a4:7b:c5:79:35:4f:de:6d:5b:
                    d6:89:c5:db:6b:05:53:ef:ce:0a:04:2e:50:6e:a5:
                    85:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C0:5F:73:66:55:3C:8E:27:FB:6A:2C:BF:97:B7:50:B2:57:B5:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9640a3bb-2a8d-3cad-af47-3e7ffc86a1ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.150.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:f1:75:34:74:4c:91:7b:23:d9:85:b1:98:8d:5a:f4:d3:4d:
         a1:1c:ec:8e:e2:c0:9e:06:d6:fc:f5:5d:89:a9:9c:9a:d8:66:
         f2:22:88:03:66:f5:59:30:44:8d:24:65:89:f7:e7:dd:ef:ea:
         29:a8:fc:d5:9c:1b:af:0b:fe:c5:1e:c4:7b:d4:78:7c:60:dd:
         7e:53:ad:cb:27:f4:38:08:f7:4f:92:bb:db:31:9d:89:a6:65:
         3a:d9:da:fd:70:10:26:7b:66:86:b1:95:98:ba:c1:9d:5f:00:
         6e:67:8d:6e:09:6a:4f:d1:03:c2:f6:f0:61:56:b2:9b:5d:66:
         e4:18:19:4d:05:19:fa:c5:3b:40:e6:3e:fd:7f:ae:37:38:bc:
         c0:3e:d0:b2:46:d6:d6:6a:c4:73:cb:fa:e8:fa:18:39:fa:5f:
         9f:a6:57:48:58:37:03:b8:8b:fc:1f:e8:a7:7f:2f:51:e9:60:
         41:cc:18:50:1e:13:05:9a:9d:96:23:70:d1:3b:69:4f:8c:00:
         8f:ac:0a:2f:b1:d4:73:88:12:0e:d9:f9:0b:39:c5:72:ac:69:
         08:70:e4:45:45:9b:34:c6:9f:7a:7d:92:75:ac:a4:ec:17:4f:
         d5:02:d5:b2:9a:ee:c7:6c:ae:1c:1b:09:4b:53:a8:c7:7f:a3:
         e9:72:dd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:52:34 2026 by rpki-client