Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bbbec55e-f942-38fc-8fe0-b366e3eb837f.roa
File:                     bbbec55e-f942-38fc-8fe0-b366e3eb837f.roa (raw, json)
Hash identifier:          743KSTjYGFGRJdhtQNI64Dw5S/1qFFixh+pWIXuu100=
Subject key identifier:   99:A9:85:30:1C:96:DE:94:63:95:01:4C:3D:B8:83:CB:E0:7A:1D:F2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640FCCDA77F879D1A19BDAC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bbbec55e-f942-38fc-8fe0-b366e3eb837f.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     35911
IP address blocks:        207.164.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:cc:da:77:f8:79:d1:a1:9b:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=a222de8c-39ca-42ec-a318-290841289762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bd:68:59:52:ca:44:1d:20:ce:9d:32:f2:e1:
                    85:89:c5:cd:49:e3:c7:8e:dc:e9:7e:80:29:22:7d:
                    42:20:2f:1b:58:64:7e:b5:fa:5f:b0:18:35:04:91:
                    c5:96:9f:0b:64:19:7a:6c:30:c3:ba:f7:79:91:f4:
                    f1:1c:78:e3:3e:e4:b4:82:9b:24:bb:c9:f7:6f:d8:
                    10:86:57:1a:f0:4b:33:65:08:65:45:9b:32:71:f4:
                    c6:d6:aa:d1:f7:8b:8c:20:ec:39:a7:99:53:58:75:
                    13:2e:ce:2c:d5:40:53:3e:98:15:8b:f9:00:31:03:
                    9b:fd:bc:22:d2:1d:97:c8:3f:f5:22:c9:98:f7:d1:
                    ee:06:99:03:d1:05:17:7d:24:5d:e6:8c:cc:73:f7:
                    1f:5f:0a:1c:ea:c2:b2:2c:19:e3:04:a8:23:80:47:
                    aa:5e:24:7a:84:0c:6d:14:c4:31:ee:a8:98:22:4a:
                    f6:14:03:7e:8b:7d:bd:41:64:70:99:2d:75:68:10:
                    96:eb:05:88:e6:30:24:b4:d4:4c:36:29:02:2e:4d:
                    03:43:8d:e6:38:c7:1d:50:a9:59:b9:09:9a:fa:4b:
                    72:9d:92:98:3d:0f:53:d7:1b:58:dc:45:24:c1:81:
                    a5:25:64:39:b9:1f:8d:21:f8:0b:c7:55:43:20:a9:
                    f6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A9:85:30:1C:96:DE:94:63:95:01:4C:3D:B8:83:CB:E0:7A:1D:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bbbec55e-f942-38fc-8fe0-b366e3eb837f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:a6:29:c4:f3:a3:b6:d4:f4:ff:4d:44:e8:84:40:09:8d:e3:
         a7:d2:d8:23:f8:32:39:28:5a:b1:3f:8c:36:32:f8:f2:a2:55:
         5f:cb:2a:3e:65:5b:92:e8:21:ea:98:f7:05:6a:df:dc:d6:ca:
         ea:27:76:82:4e:60:8a:f9:48:12:98:96:9c:65:de:f9:9d:8e:
         80:a5:4d:95:ea:0e:82:e7:ff:d3:2d:ce:72:a5:2e:bc:f1:cd:
         ee:c1:64:98:02:d0:d9:92:c1:05:80:8b:3b:16:c7:7a:03:76:
         28:aa:a5:6d:3d:39:41:fe:8a:ac:07:2c:85:8f:8e:9f:7d:54:
         01:f0:06:59:3a:c8:cf:e2:1e:dc:63:22:03:ee:f9:e1:32:ee:
         75:f4:1f:81:42:b9:4d:22:d6:a2:4f:6d:94:51:6c:f4:0d:d2:
         f7:c6:ba:f3:e4:c1:b4:62:83:20:a4:dc:e9:21:94:60:55:7d:
         bb:5e:42:01:96:19:f8:c1:b5:fd:b7:83:57:b7:62:aa:5e:6f:
         a9:06:fd:a6:05:fc:f8:31:04:b3:b9:b6:0a:5b:45:69:90:43:
         ea:e6:32:88:e5:f5:26:98:83:af:9e:17:01:63:19:ce:5f:a1:
         56:8d:6f:a2:3d:ae:0b:ab:0d:74:26:24:f4:52:d1:65:15:b1:
         e8:ad:7a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:55:59 2026 by rpki-client