Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/91cf1c00-289f-3473-9f95-b903e535a230.roa
File:                     91cf1c00-289f-3473-9f95-b903e535a230.roa (raw, json)
Hash identifier:          BufqaYJXZeYvLtPcP3H4Xkzh5sTkrUzTCUl5qkeDS+g=
Subject key identifier:   C6:E7:A8:15:74:B2:12:CC:8E:D2:0A:A0:15:C2:69:A5:24:7F:D9:25
Certificate issuer:       /CN=9b7383ca-74b1-4e8a-b79d-f791e631c059
Certificate serial:       010D0C9F4328584EB2B1BDCF7738D5D8373C1580
Authority key identifier: 48:DF:BA:BA:AC:06:B3:DE:0D:40:C6:9B:66:06:A9:9A:2E:3B:E1:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/91cf1c00-289f-3473-9f95-b903e535a230.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     22056
IP address blocks:        204.153.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/9b7383ca-74b1-4e8a-b79d-f791e631c059.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/9b7383ca-74b1-4e8a-b79d-f791e631c059.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:bd:cf:77:38:d5:d8:37:3c:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7383ca-74b1-4e8a-b79d-f791e631c059
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=80862c08-00ce-4c38-9694-f694ac7a70d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:1a:28:8c:d7:0a:69:c0:74:c0:69:33:4e:
                    4a:35:24:18:7d:6c:28:94:4f:56:11:2c:d7:5b:32:
                    6d:95:a2:a1:0c:6e:3c:79:7a:31:3c:94:87:42:aa:
                    50:4a:cd:b5:99:e1:4e:fd:75:15:3a:4d:32:f9:b4:
                    cd:58:0c:ca:2e:ae:ff:71:4c:e0:2b:f8:0b:4e:d9:
                    ab:46:a9:75:2e:f3:4d:df:1b:f4:83:71:ca:6b:df:
                    a1:28:38:e4:5d:a7:4d:92:12:e1:63:96:7d:76:72:
                    a0:c4:37:c4:63:0a:bd:b2:21:a9:5a:ab:03:58:73:
                    6e:33:11:d0:51:f4:ea:44:af:0c:d1:bc:f2:10:d2:
                    51:31:1a:01:44:3d:d4:4e:18:54:d5:f8:df:03:45:
                    f3:12:fc:f9:c2:16:d5:9d:05:ca:32:00:ce:7c:a4:
                    fd:d0:16:8f:67:ef:43:bc:e3:1e:50:eb:53:84:01:
                    0c:f5:96:b1:0a:0a:9f:86:bc:a7:70:66:db:f6:f7:
                    08:34:b9:fb:2b:ca:ab:d6:b4:4f:fd:77:53:fe:dd:
                    f2:b7:73:42:7d:25:f8:9d:8d:fd:7a:cf:0d:22:55:
                    6b:cf:02:5e:e1:4e:3d:3b:b1:97:3d:e1:72:65:51:
                    7d:13:2d:34:4a:7d:0a:45:2b:c8:4e:d4:fc:8e:5a:
                    2c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E7:A8:15:74:B2:12:CC:8E:D2:0A:A0:15:C2:69:A5:24:7F:D9:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/91cf1c00-289f-3473-9f95-b903e535a230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/9b7383ca-74b1-4e8a-b79d-f791e631c059.crl

            X509v3 Authority Key Identifier:
                keyid:48:DF:BA:BA:AC:06:B3:DE:0D:40:C6:9B:66:06:A9:9A:2E:3B:E1:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.153.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a6:e5:25:4b:ba:c2:cf:31:bd:a1:96:73:e5:3c:70:09:87:
         fc:27:c5:be:46:26:b1:15:63:e1:fc:21:87:1f:1e:3e:98:08:
         77:9a:a0:68:81:5d:86:43:98:d1:f6:8d:33:3a:a1:47:51:33:
         53:d5:16:0e:91:26:67:a9:c9:ec:db:51:7d:f5:4f:e3:bd:b1:
         15:3f:17:bf:62:02:94:ed:3f:7f:2e:cd:9d:b8:c4:e7:a6:2b:
         44:23:5b:49:40:df:92:6c:5d:f5:b7:77:a5:b2:c0:0b:58:de:
         c6:63:57:09:92:a5:e4:85:e6:b1:b8:1f:84:f2:6f:ca:5e:f6:
         7f:c8:af:78:fd:d4:1a:d2:ef:dd:9e:51:5f:89:41:d5:e0:2e:
         de:68:87:40:ee:e0:c6:aa:b6:af:df:a5:70:dc:ef:16:9a:5a:
         29:67:96:f6:42:11:7d:d4:f6:0e:df:b1:bc:fd:30:60:b1:54:
         57:57:f5:86:2d:e0:65:39:f4:2b:ff:ab:2f:5e:8a:d9:aa:cb:
         ad:7b:1a:6c:74:29:2d:8d:71:c8:6c:9f:c6:7d:ca:76:3e:01:
         c9:6e:e2:88:c5:d6:83:f0:59:1f:8e:1e:56:f4:a3:08:ff:3a:
         db:e1:13:0a:a0:ff:9b:3c:fd:38:87:64:80:28:90:40:dc:15:
         2e:a2:fd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 20:30:22 2026 by rpki-client