Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cd3a8577-2cb1-3b74-aff1-b92c27c8a14f.roa
File:                     cd3a8577-2cb1-3b74-aff1-b92c27c8a14f.roa (raw, json)
Hash identifier:          iwMJqt2F8uY5cgIj981wc60bbxLyYmJEeH46BOHumWM=
Subject key identifier:   9D:1C:C3:71:BB:56:9E:22:DE:52:38:28:F8:E2:5E:EC:D4:A9:A0:4D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640FC68C1DC659005D00EB00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cd3a8577-2cb1-3b74-aff1-b92c27c8a14f.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     577
IP address blocks:        209.226.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:c6:8c:1d:c6:59:00:5d:00:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=83463bdd-a28f-45a1-8dcd-86725e73d589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:ca:65:6a:29:54:bb:3a:cc:73:5c:15:62:
                    e2:21:38:fc:9e:97:97:52:7c:41:02:9a:7c:69:17:
                    97:dd:fc:dc:6d:d0:3a:42:41:0b:8b:94:14:be:cf:
                    b8:fd:d8:bc:4e:1e:f8:ae:81:1d:74:d6:ed:59:e0:
                    8b:f9:0d:c2:59:c8:7a:67:74:ec:b0:e2:21:02:52:
                    8a:d2:84:46:1b:a2:fb:36:1a:ce:93:ba:d8:b6:18:
                    14:e8:4a:ef:53:9a:7d:45:cf:4e:95:7d:35:d3:22:
                    0a:ec:ca:da:ef:a4:28:68:ee:89:92:0b:33:b5:85:
                    7d:1e:12:67:ac:8d:09:3c:7e:f1:1b:d8:03:be:7c:
                    02:98:af:a1:dd:58:02:ae:b9:2f:2e:d6:e9:12:31:
                    fd:a5:36:28:44:d4:ce:97:19:1e:0b:fa:f0:0b:86:
                    75:1f:cb:e9:8e:ea:72:ac:f3:78:37:b5:e7:db:87:
                    99:2f:c7:25:ea:fe:79:bf:58:55:78:e0:d1:22:4f:
                    d4:97:b1:9e:f1:05:d3:e8:c6:9d:e2:7b:44:65:d4:
                    df:63:df:cc:9d:b8:a6:50:05:e9:2b:cb:11:fc:9e:
                    71:53:4d:91:8e:3e:24:73:ff:4e:fd:c2:0a:02:b3:
                    84:69:99:de:e1:f5:b2:45:0b:14:31:8b:2f:7b:fe:
                    03:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1C:C3:71:BB:56:9E:22:DE:52:38:28:F8:E2:5E:EC:D4:A9:A0:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cd3a8577-2cb1-3b74-aff1-b92c27c8a14f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:6b:c1:8a:8c:02:ca:20:ea:4a:7e:75:26:8e:81:9f:7e:0d:
         69:51:d8:e1:67:17:15:30:29:7f:af:2d:50:64:70:db:43:50:
         fe:9c:f8:29:a9:ca:b7:4c:df:8c:7f:54:d9:ca:f1:fe:aa:2d:
         19:32:68:9b:c3:47:23:6d:b9:53:a6:da:3b:8c:7d:eb:7f:67:
         b6:37:36:60:fa:19:81:d9:97:5f:20:7c:47:a3:6a:15:24:bf:
         86:97:13:81:d8:ee:c7:09:4d:43:fb:c6:73:f8:e8:1c:95:e2:
         37:5c:e9:13:cb:0c:77:5f:9c:7a:55:9e:c1:22:50:a3:82:5a:
         60:01:0a:5c:4b:81:0b:e1:2a:70:aa:e2:85:72:75:4f:df:4e:
         d8:59:75:0f:d8:52:27:09:f0:78:1d:73:b7:17:9c:15:72:3d:
         ba:29:2d:b3:ba:0d:72:ff:95:b5:41:14:f5:a2:6f:e8:ed:c0:
         28:14:e6:85:ec:18:e0:a1:a1:91:61:e4:16:5c:0e:c7:33:18:
         cf:b7:a7:41:5c:96:ae:e9:9a:c8:74:94:fe:88:0a:cf:ee:db:
         da:47:67:38:e4:36:46:93:71:af:54:5a:7f:c9:6b:a1:b9:f5:
         69:dd:84:6a:10:52:af:ff:27:3f:7e:0e:5c:f7:ca:ec:e1:85:
         2d:ee:04:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:52:36 2026 by rpki-client