Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c754594f-ddf5-3f9a-8b50-e7b0b0a9be8e.roa
File:                     c754594f-ddf5-3f9a-8b50-e7b0b0a9be8e.roa (raw, json)
Hash identifier:          6TyY1NTspc+O6W9yxsPNHIC6th9hU3niFtq6+qNBjAA=
Subject key identifier:   A8:F1:C1:C8:08:B0:9C:E5:FD:DF:B7:A0:7E:A7:86:85:B8:6B:3A:88
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640F6D5BDFF05CA7A7D5A240
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c754594f-ddf5-3f9a-8b50-e7b0b0a9be8e.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     15321
IP address blocks:        216.209.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:6d:5b:df:f0:5c:a7:a7:d5:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=6cbf5abe-b12d-4bbd-8b37-04e14aa0bf78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ec:26:47:d0:56:81:a6:0a:56:cc:ba:a5:d9:
                    98:15:d5:17:25:df:03:1c:de:e8:02:d9:47:49:72:
                    6d:92:c6:8b:56:c4:9d:08:bc:4a:41:87:a0:8c:80:
                    a3:d6:9e:b3:82:3a:be:ab:1f:72:1c:cf:6a:7c:06:
                    e3:ac:a9:a7:07:57:58:a5:06:2a:11:80:49:6a:82:
                    ab:43:50:0e:c6:1c:70:cd:da:60:0f:b1:3d:c8:81:
                    f2:7d:2e:91:9e:76:2b:31:bf:0c:9f:c3:e0:6a:98:
                    f0:04:60:56:98:f5:75:52:d3:72:71:8f:f9:21:6e:
                    0b:4d:6b:db:5f:95:8f:c6:4c:33:94:c0:a4:30:ba:
                    d3:43:a5:93:49:ca:34:2f:5d:a2:ae:c5:0c:67:d0:
                    f5:b8:f1:8a:c7:e6:c0:bf:27:35:7b:b3:18:1a:f9:
                    80:17:00:c9:16:f1:0a:76:99:19:0c:ce:d7:d4:e9:
                    cd:7c:69:d6:2b:06:73:35:95:9f:9d:76:31:e2:1f:
                    34:fb:89:17:27:b4:a9:ab:c4:04:13:d2:25:a8:f4:
                    7e:6b:02:b8:d8:c2:0d:3a:a4:5b:fc:1f:05:e4:86:
                    22:80:ed:91:9a:93:52:41:63:b2:b0:7f:5b:c2:ce:
                    9a:89:3b:ce:c9:f7:54:d0:77:75:ea:51:bb:07:22:
                    8b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F1:C1:C8:08:B0:9C:E5:FD:DF:B7:A0:7E:A7:86:85:B8:6B:3A:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c754594f-ddf5-3f9a-8b50-e7b0b0a9be8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.209.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:96:29:0b:22:14:7c:43:28:36:80:a2:71:15:f4:13:5f:14:
         40:df:d0:31:10:11:1f:59:6d:d4:70:bc:27:09:44:80:a9:23:
         4d:40:88:1f:ed:fd:7c:a5:cf:cf:26:45:2b:e3:de:72:26:81:
         21:67:f5:78:d5:4f:dc:b6:9a:54:dd:c1:7b:88:1a:13:d8:79:
         c9:0f:b8:c4:ae:6e:3c:c0:a8:24:6f:3a:bc:df:87:ca:1b:33:
         2f:01:e9:ba:69:20:50:36:ae:9a:2a:50:72:42:3f:04:47:c0:
         db:7a:57:f3:72:2a:60:4e:73:50:34:3a:cf:b0:6b:54:93:51:
         ef:a1:99:56:71:e3:96:01:2b:a2:aa:d4:08:5f:f0:20:46:84:
         31:0c:dc:b8:91:98:82:dd:28:66:d1:d1:a1:4e:95:36:cb:5d:
         af:32:a1:31:ba:ae:50:94:42:08:27:5a:79:da:7b:1d:ce:15:
         8b:79:82:62:b7:5c:7d:65:97:46:b3:de:4e:c1:ca:80:df:49:
         39:bb:05:bc:bb:f1:98:e8:1a:ef:ec:31:0b:9b:d7:b0:45:70:
         00:be:cb:25:5b:fd:52:4c:35:a0:79:db:53:74:a1:be:4c:28:
         22:43:f3:8d:3f:6b:fc:3b:72:c2:07:37:86:51:61:e6:c2:b1:
         d6:77:15:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:52:30 2026 by rpki-client