Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ac31399c-753e-3088-9c42-084ddd41da1f.roa
File:                     ac31399c-753e-3088-9c42-084ddd41da1f.roa (raw, json)
Hash identifier:          NlZKjMeW82jJpRZyf/NAydpc65YY+AAWqXNu/r6njmg=
Subject key identifier:   92:ED:ED:B3:88:40:AF:E0:E1:22:F2:26:36:9F:04:E7:C0:21:4D:E3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640FC3A5744D983BC5A50400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ac31399c-753e-3088-9c42-084ddd41da1f.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     15321
IP address blocks:        209.226.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:c3:a5:74:4d:98:3b:c5:a5:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=9ace4d79-6ccb-4d46-ad38-bdb44223ace0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2f:1b:4d:ec:30:43:f4:65:75:a2:10:b7:54:
                    29:b4:e5:ee:6c:bc:26:d2:02:7a:87:b6:f1:b4:8e:
                    b9:ed:5e:b3:c0:b3:57:90:16:82:8d:1b:5d:83:a8:
                    14:1e:71:e0:96:cf:19:5a:6a:be:74:fe:cd:8c:de:
                    73:4b:76:36:8c:6d:bc:29:2b:cd:9a:f4:ab:00:bc:
                    c6:86:c5:9f:e2:1c:15:9e:a9:a0:c3:6d:17:0c:00:
                    78:05:e9:e3:26:f6:b0:37:67:e2:6e:87:9b:12:ed:
                    27:84:a3:a9:a3:58:95:1c:64:e3:6c:bf:79:28:67:
                    ff:f1:43:13:62:f9:69:fa:3a:90:6e:ca:eb:14:88:
                    fb:ae:c7:8c:26:95:24:fc:ea:45:b2:c7:3a:36:1d:
                    c9:28:f7:6a:8d:d2:6b:9c:99:9d:06:18:a7:fd:9c:
                    ec:56:e2:65:76:50:2a:ab:f8:ad:91:8e:b8:60:6d:
                    34:65:b8:f8:24:f4:9f:6e:91:26:2b:79:6f:6d:54:
                    b0:af:74:57:65:b3:04:d4:71:4f:4b:4c:61:f6:2f:
                    08:c3:9c:ab:eb:21:a2:43:08:3a:26:be:6d:d2:01:
                    a2:7c:e6:c0:fa:89:cd:9d:9d:2b:ea:d2:fa:b9:51:
                    ed:37:a4:ef:bf:69:c1:ce:39:2b:25:e5:13:03:c3:
                    25:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:ED:ED:B3:88:40:AF:E0:E1:22:F2:26:36:9F:04:E7:C0:21:4D:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ac31399c-753e-3088-9c42-084ddd41da1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:e1:a0:41:c5:3c:18:54:43:ca:0b:a6:dc:5a:76:39:e3:f4:
         ce:de:e2:4f:d4:20:ba:d0:c3:55:28:57:ea:51:a5:72:9f:64:
         eb:2c:e7:4b:ce:ce:2d:59:1f:a2:1c:e0:a7:da:67:a1:a3:e3:
         96:e3:c6:71:52:f1:eb:c4:32:f4:65:c6:30:4d:7a:85:c6:6e:
         46:5b:6e:3b:3f:7b:9b:12:31:cd:a0:61:4f:02:00:6c:d6:ff:
         52:d8:2b:20:12:0e:26:a2:8e:80:e8:b5:b9:ce:7a:8b:7f:34:
         4a:94:6f:3a:6e:6e:16:ba:af:45:e1:18:ba:97:31:b1:80:a5:
         82:39:88:ac:62:53:ff:62:65:fb:3c:ca:8b:7b:dc:8f:67:e1:
         6b:65:e0:5d:f6:aa:b7:d6:6b:6b:11:af:1a:ea:41:10:5b:14:
         3f:17:3c:c6:c9:ac:81:05:04:17:66:f9:07:0a:ad:63:66:bc:
         17:8e:02:14:b2:99:2e:0b:29:c7:a0:4a:05:9e:a8:bc:62:32:
         3f:b7:60:18:52:cd:5b:7c:6f:73:fb:db:ce:1f:88:8d:fc:0f:
         ae:63:e0:da:7b:4e:f7:a2:a1:1c:7d:a8:81:9d:78:7f:20:51:
         a8:bc:37:ef:e8:14:78:61:6d:13:7d:8a:3a:2d:ec:ac:f2:37:
         85:a0:18:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:56:25 2026 by rpki-client