Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bb0c3b0f-4081-3982-a48f-54b3041b51a2.roa
File:                     bb0c3b0f-4081-3982-a48f-54b3041b51a2.roa (raw, json)
Hash identifier:          WgOf8wotzDoTobUNFEIgRf7ATYih0k+7MtJswfyM4B8=
Subject key identifier:   52:C2:EB:B7:0E:63:76:8A:65:15:C4:8A:93:54:CA:51:3A:F7:C4:25
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640F54AD2316007D48649628
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bb0c3b0f-4081-3982-a48f-54b3041b51a2.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     25946
IP address blocks:        199.243.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:54:ad:23:16:00:7d:48:64:96:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=620a43e3-5d74-44c7-9774-b3b44d7291bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:98:f3:91:61:7b:e4:88:39:9b:aa:ae:0b:82:
                    4c:54:e7:a6:0e:e2:76:b6:08:6a:33:d8:7d:b2:a5:
                    53:6e:ba:69:19:31:0b:9d:50:04:2d:2e:92:83:29:
                    f2:d9:dd:ff:d6:eb:60:d8:14:d6:cf:28:9d:ca:4b:
                    46:17:91:0c:22:a9:38:d2:b3:4c:3a:62:99:40:b6:
                    e1:04:0c:30:ab:84:41:0e:39:36:51:c3:96:01:2d:
                    3a:30:f7:23:a6:35:e1:b0:dc:c9:24:e1:3a:4e:6e:
                    66:64:c0:78:e3:a1:c3:76:40:37:4e:87:74:1c:e3:
                    52:80:91:83:19:ac:3b:33:a0:38:a3:9c:89:a3:10:
                    75:ac:56:6e:04:21:48:30:45:df:b4:a0:c6:8c:b0:
                    36:57:5f:69:a2:82:03:b7:d5:e3:c0:4e:23:4d:1b:
                    42:6a:47:8e:c1:2b:2a:ee:46:0b:b0:0e:a7:dc:25:
                    30:95:cc:96:a1:35:5f:d7:0b:d1:8f:2e:e0:c4:0c:
                    8e:13:26:7f:f1:50:9e:17:9c:b9:cd:c8:68:9a:ce:
                    5d:2b:61:2c:5a:46:c9:45:4f:87:83:4d:36:33:d1:
                    3a:37:7d:97:53:f3:14:05:3d:85:9b:76:70:3c:00:
                    bc:99:c7:b4:ea:ff:2d:4f:20:4b:c7:0e:74:59:a4:
                    43:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C2:EB:B7:0E:63:76:8A:65:15:C4:8A:93:54:CA:51:3A:F7:C4:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bb0c3b0f-4081-3982-a48f-54b3041b51a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.243.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:50:0a:76:03:91:33:04:61:1b:8a:dc:8c:ae:f0:c6:a8:6c:
         ad:e1:4d:b9:29:74:35:1a:99:2e:17:67:ba:ee:d8:1b:0c:f7:
         83:57:6f:04:2d:17:48:a5:04:2d:8d:d8:c6:0b:f4:ff:ef:6e:
         e4:ad:2b:7f:a9:78:fa:d8:bf:d8:a2:63:a3:c3:5f:66:3b:8d:
         6a:88:3c:ed:4f:b9:4e:ec:ae:a0:bf:06:80:e0:22:5d:8a:3e:
         26:df:cd:0f:c6:71:f9:f5:8d:78:50:ea:21:15:6a:97:02:16:
         8e:3a:66:b0:89:77:14:14:ea:fd:d1:ae:d9:e8:8b:be:a1:3c:
         32:8f:df:41:24:e6:68:c8:a6:ab:ee:3a:5d:5b:cf:c6:e4:36:
         c2:19:7a:e5:3c:da:0c:17:9c:c5:4f:e3:8e:1a:f2:38:47:c0:
         9b:84:8e:7a:1f:ff:5e:a6:92:f6:7c:bf:20:e0:2f:c6:aa:4d:
         e9:94:05:84:3f:03:af:81:10:bd:59:56:3c:66:64:77:53:f4:
         2c:73:22:0f:9f:85:7f:e7:e2:05:64:9d:1e:6a:16:6c:b3:c8:
         5e:3e:11:a0:8a:5c:53:e1:cd:29:71:6a:cf:1c:d6:9e:1e:14:
         cf:09:e5:2a:a6:9a:0e:a8:1b:c9:6f:46:4a:9b:31:fa:c2:14:
         da:3d:34:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:56:25 2026 by rpki-client