Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c1515ee9-d905-31c8-a460-d01fadb014cb.roa
File:                     c1515ee9-d905-31c8-a460-d01fadb014cb.roa (raw, json)
Hash identifier:          wIaiFgfb0aGn8p7UTLcHR1Tio+m8k7dVUnqq8QjibuU=
Subject key identifier:   E6:5B:4A:3E:6E:A2:14:1D:0E:5F:6D:5B:2E:75:90:D3:0A:26:88:A1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640F57CE6536606513C41B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c1515ee9-d905-31c8-a460-d01fadb014cb.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     397168
IP address blocks:        206.47.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:57:ce:65:36:60:65:13:c4:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=2fa463da-dd7d-46b0-97fb-ec13f0e3b9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7a:f0:e0:e7:3b:86:53:0e:a9:66:ab:59:9f:
                    d8:e3:d2:c2:0b:13:04:f8:25:e3:18:b8:65:f3:ef:
                    74:be:e9:8f:67:ea:81:fd:6c:63:82:54:91:58:48:
                    c5:bb:56:83:55:b6:af:00:75:33:90:14:37:f7:90:
                    19:f6:74:cc:26:ca:8a:92:3c:1e:c3:0d:5f:54:81:
                    fb:c2:c8:9a:f3:be:97:a6:a9:b6:db:21:fa:08:bb:
                    0b:9f:fc:ad:8d:ef:18:50:ee:30:80:74:65:e2:0a:
                    dd:85:57:63:78:8a:f1:b1:7c:6b:8a:ef:0a:7f:22:
                    21:b5:a0:f9:09:2f:d8:e7:5c:2a:a1:70:94:34:87:
                    80:41:58:40:8d:72:a2:0a:57:fe:d3:bd:83:3d:41:
                    13:ff:d2:29:25:d9:c6:cd:98:bf:7f:23:0e:9d:6b:
                    f7:90:be:e0:3b:76:2e:e9:54:92:f8:8c:e6:c8:42:
                    60:81:80:32:7a:15:c1:d4:a8:9c:0d:ba:3c:e7:ef:
                    56:a8:20:0c:37:f1:f6:72:4a:03:cf:ec:29:92:56:
                    fa:00:eb:bf:e4:07:25:50:17:b9:01:a3:70:35:d0:
                    5c:f5:b8:fa:19:60:0e:89:26:09:82:75:dd:1e:d0:
                    1a:de:e5:72:a5:86:2b:a6:d4:e2:aa:66:f9:c0:7a:
                    9a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:5B:4A:3E:6E:A2:14:1D:0E:5F:6D:5B:2E:75:90:D3:0A:26:88:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c1515ee9-d905-31c8-a460-d01fadb014cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:7e:f2:70:24:4a:0d:8b:6e:11:00:b4:42:3e:60:41:eb:e8:
         34:48:73:7f:bc:92:ac:13:a5:6a:a4:d0:70:eb:35:10:3e:54:
         7f:ab:34:b5:98:43:c7:45:10:af:f5:de:6c:e9:a6:92:84:5b:
         a9:eb:25:7d:c6:8a:d6:01:ea:99:56:17:d8:d2:8e:63:52:4d:
         6b:14:82:3c:1b:e0:0a:ec:e7:d3:2f:fd:d2:b1:06:dd:3a:9e:
         3a:1f:1b:19:4a:eb:dc:bc:69:f2:85:13:53:87:87:91:c6:5b:
         90:e7:bb:ba:5e:1e:c1:e1:80:7f:f6:40:2e:95:2e:b8:d7:21:
         82:7c:01:8a:38:0b:9f:d1:46:f8:e9:2a:b1:f3:8b:29:23:d2:
         d4:42:60:61:29:79:05:91:46:f8:6a:89:ad:73:54:38:b7:2f:
         90:f1:65:db:98:4a:13:6c:0f:ed:c8:b6:7b:7d:64:e6:fd:c9:
         ac:f2:95:52:00:b3:1d:8a:90:cc:1a:34:81:b0:35:44:63:c6:
         9d:02:9f:a7:dc:4e:34:74:53:b1:1d:b9:aa:63:a2:ae:e8:f4:
         c9:d8:65:70:c3:ec:ac:f9:7a:66:32:68:e4:f9:10:62:c9:bb:
         78:3e:99:f8:cf:b2:8d:c9:e3:a6:5c:3e:1f:e7:bd:e2:95:a4:
         a5:03:1d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:54:52 2026 by rpki-client