Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b63b3f9d-84ca-3d21-bfe0-a0d71602db4b.roa
File:                     b63b3f9d-84ca-3d21-bfe0-a0d71602db4b.roa (raw, json)
Hash identifier:          /SfI7H5Tb2SQbwmLLJrM/BxmS+zp+tJICEbntJf+UKM=
Subject key identifier:   2A:8B:FC:9B:36:B4:22:E6:B7:DE:2F:56:8B:EE:9A:F9:EF:A7:72:66
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640F589E029FDE84673F3CC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b63b3f9d-84ca-3d21-bfe0-a0d71602db4b.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     36522
IP address blocks:        207.236.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:58:9e:02:9f:de:84:67:3f:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=f7453355-09dc-4015-964c-05738049be7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:15:99:0f:a9:35:d0:2b:2f:7d:f2:20:36:
                    af:bb:e9:cd:b1:72:98:47:27:1a:c3:02:49:8d:0e:
                    53:7e:ab:51:e0:9e:9e:12:db:e3:a6:49:2d:e1:e2:
                    f0:ef:93:aa:13:20:09:a7:13:cb:24:db:81:1a:66:
                    f4:ef:73:ea:e9:b4:20:ef:2e:2e:5c:80:5f:98:8d:
                    cf:0d:e7:f5:88:c8:0a:fb:52:33:80:71:58:f9:67:
                    69:5d:46:94:65:ed:46:e0:7d:d6:64:6d:57:e3:ee:
                    8f:11:75:33:f2:24:24:26:fc:93:89:e4:cc:9b:52:
                    1e:12:21:17:0d:0a:32:1b:4d:ab:65:2b:59:c7:27:
                    7b:4c:5e:b9:e9:a5:38:ce:da:04:aa:03:f8:00:18:
                    4c:f0:3a:83:48:6e:d3:29:78:0a:ef:f1:63:46:98:
                    ac:46:bc:0e:a2:de:33:ad:e5:96:a4:81:ac:ad:37:
                    e1:7f:d2:54:61:eb:c7:f8:84:cd:4b:46:8c:52:2f:
                    76:3a:40:9d:22:fd:29:63:e3:a5:7a:ce:e0:22:09:
                    9a:05:56:0c:e7:b8:54:3b:a1:7b:43:b2:16:09:a4:
                    e7:25:09:3c:1d:15:70:74:f2:e7:f3:42:21:0c:59:
                    b8:f0:c9:dd:b1:6c:58:3e:07:81:f2:c3:50:8f:aa:
                    2d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8B:FC:9B:36:B4:22:E6:B7:DE:2F:56:8B:EE:9A:F9:EF:A7:72:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b63b3f9d-84ca-3d21-bfe0-a0d71602db4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:7f:d6:bb:79:00:c3:b3:58:46:ef:9a:e0:98:5a:94:be:a0:
         75:b9:c2:48:03:7c:5c:e4:7e:54:fb:27:21:57:9a:cd:48:9a:
         cb:47:4b:d1:4f:30:ee:4a:7c:62:8a:87:5b:bd:99:73:8d:74:
         02:bf:70:62:b0:68:b8:42:7d:a8:89:cd:fe:90:fa:03:52:e7:
         34:b8:95:ee:45:a4:2c:e4:53:bb:d3:af:6e:6c:99:f2:79:5e:
         15:14:8b:df:d0:9b:bc:21:11:26:a8:8c:b2:3c:1a:1a:7c:b4:
         b8:5a:ec:5c:c8:87:ec:91:ba:ae:b5:2c:db:31:fd:54:0d:7b:
         21:45:99:86:fd:6b:10:ba:7e:3c:23:a0:13:ee:dd:e6:1d:6d:
         ab:3f:1f:d0:63:8c:50:15:72:9a:f5:52:9c:59:e7:34:89:3b:
         af:96:06:53:65:86:d7:3a:39:a4:c8:51:c6:b6:a6:75:50:36:
         af:a5:9d:24:4d:91:ca:1a:c4:22:39:26:40:41:67:a2:f9:78:
         90:ff:81:c2:3e:e6:62:df:91:4a:d6:7b:27:63:e7:e4:23:12:
         fe:f8:a1:c1:c1:f7:61:54:df:fd:cb:80:b9:fa:ba:63:4e:cc:
         47:a7:6f:71:43:02:03:31:e2:54:08:39:f2:70:c2:89:05:61:
         b5:06:c4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:52:34 2026 by rpki-client