Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bab4351e-10ef-3f0a-8dc6-69fe5edca1e2.roa
File:                     bab4351e-10ef-3f0a-8dc6-69fe5edca1e2.roa (raw, json)
Hash identifier:          qBXyLofCsA55JbeB8afsJI4dQty75B2J9mDNh/39Les=
Subject key identifier:   FC:10:01:E4:76:36:0F:4E:AE:2B:AB:D6:56:39:B5:06:CC:42:F9:F2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640F5EA790D22B57322C3780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bab4351e-10ef-3f0a-8dc6-69fe5edca1e2.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     21552
IP address blocks:        206.47.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:5e:a7:90:d2:2b:57:32:2c:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=845b1669-d61b-4d8f-963a-0ae18351be53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:35:5c:9a:ec:c9:42:b1:70:9a:d0:82:37:cf:
                    0a:27:34:ac:15:51:13:bc:22:4b:75:06:6b:8d:4b:
                    32:f4:2f:e0:d6:03:5e:5d:f7:36:45:af:3f:a1:fd:
                    80:0e:64:d8:58:6f:28:e3:27:10:29:52:f4:99:84:
                    26:01:99:94:0f:ee:03:f0:c8:e2:e7:19:45:ce:d5:
                    5a:ab:8e:d6:d8:06:09:b7:26:93:4d:1f:f9:ed:85:
                    ba:86:0b:b2:73:c5:31:2c:81:fa:d1:ca:e7:e6:1b:
                    cf:fc:3d:8e:40:b0:4a:7e:a3:52:14:52:73:8a:77:
                    c0:cb:ba:80:db:dd:0b:6a:8f:60:a0:3f:bc:62:0a:
                    ff:7e:56:c5:ab:d5:27:7f:fa:02:a7:4e:32:93:93:
                    73:3a:0c:f2:17:c8:e9:50:86:0b:1e:2d:ad:d3:67:
                    19:e7:a3:f8:3a:c0:0a:b7:73:44:a5:e5:43:88:54:
                    f4:57:bc:0f:2a:c1:70:ee:27:73:d1:1f:ed:25:32:
                    b6:08:ec:e6:ad:c6:92:de:72:36:57:ba:27:38:d4:
                    54:07:c0:81:12:50:d2:77:0c:1b:a6:0a:96:3f:fe:
                    20:81:9e:99:a3:6d:da:14:b4:0d:20:6d:e6:6b:12:
                    d3:a9:fb:80:14:cc:9e:de:cc:42:53:f7:0c:73:f4:
                    14:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:10:01:E4:76:36:0F:4E:AE:2B:AB:D6:56:39:B5:06:CC:42:F9:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bab4351e-10ef-3f0a-8dc6-69fe5edca1e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:eb:98:db:16:38:e0:91:4e:88:17:14:ac:12:8e:5d:6c:54:
         62:ec:8a:36:9c:be:8d:a1:1b:c9:90:7e:ae:f9:4c:12:b4:c6:
         57:6e:86:77:13:51:c7:04:cc:04:c7:22:b0:5d:53:91:0d:df:
         71:c4:62:ac:ef:2c:bd:e5:3c:05:76:d3:b2:de:35:20:c6:ab:
         14:65:bc:3d:18:0f:92:a3:26:aa:d4:36:fc:fc:53:e9:14:b0:
         83:0e:21:af:93:c4:22:59:84:e0:e1:d2:4b:77:b2:38:f0:17:
         d1:e3:05:e8:db:3f:ac:42:b5:af:a7:a5:c8:23:96:f6:10:f5:
         a5:13:d9:39:8e:4f:4d:37:fc:89:f8:5e:73:59:8f:4a:ea:06:
         00:85:ce:22:75:25:76:c2:a4:fc:0f:bc:29:6b:35:1e:f6:5a:
         09:bb:19:56:da:cf:a2:e2:49:6d:c4:40:52:3b:08:e1:fc:49:
         71:a8:3c:ae:40:32:85:73:bc:55:1c:4b:a0:1c:02:e5:bb:03:
         69:56:36:64:bf:d9:09:a3:d1:31:2c:a7:d2:3f:f8:ae:73:d8:
         10:83:ca:f0:1a:4d:80:25:d2:86:17:25:7c:00:9b:86:15:03:
         34:85:f5:0f:2b:96:8b:cc:09:59:0b:cc:9e:59:ce:c3:57:46:
         ed:5a:88:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:52:33 2026 by rpki-client