Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/9fd3a3e1-dfc7-34ed-8f84-1734d992ec4a.roa
File:                     9fd3a3e1-dfc7-34ed-8f84-1734d992ec4a.roa (raw, json)
Hash identifier:          pxr1Mw61ZQdwUcqOub7TXks+lZtQlSiehVzIg9rgaGM=
Subject key identifier:   D0:DF:AE:F0:06:31:C7:45:BA:18:57:01:E4:E4:15:0F:B8:F0:B6:11
Certificate issuer:       /CN=91294759-5da4-4acf-8f32-7c022824b443
Certificate serial:       010D0C9F4328584EA78757A70574E6D12381C700
Authority key identifier: 4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/9fd3a3e1-dfc7-34ed-8f84-1734d992ec4a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3477
IP address blocks:        204.193.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:57:a7:05:74:e6:d1:23:81:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91294759-5da4-4acf-8f32-7c022824b443
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2b074069-f660-4f53-b580-8460390658ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:71:af:d6:cc:e1:88:b2:da:4d:f3:45:d6:2a:
                    53:19:14:25:bb:0a:d2:71:25:c4:d7:8f:1c:c7:ee:
                    95:70:48:25:e1:14:7a:51:93:a0:48:53:25:1f:4a:
                    31:73:32:0c:64:83:be:a1:f7:94:e5:1b:86:47:bb:
                    d6:ad:4e:ec:d7:48:47:85:b8:71:35:e1:65:4b:33:
                    2e:40:d5:fe:d6:d2:07:59:22:43:67:d3:2a:dd:16:
                    3b:ec:90:58:e8:d5:c1:4b:fe:ef:89:47:ae:1b:b0:
                    03:5d:62:9f:7a:2c:fb:25:9f:3b:71:69:7b:10:d4:
                    f2:ba:76:eb:2e:55:13:e9:c1:4d:c5:53:9a:2d:fc:
                    65:ad:d8:e8:39:88:07:25:95:2e:39:08:0e:23:b7:
                    36:f5:32:ac:b2:bc:94:b4:f9:91:53:7f:2d:09:f7:
                    40:1c:30:98:d6:55:c5:1c:24:1c:96:05:bf:bf:97:
                    f3:6e:34:c6:92:9c:f7:33:84:d5:1c:a7:2c:47:5b:
                    8f:58:4c:69:a0:f0:55:50:42:d5:03:a6:8c:b7:47:
                    1b:9d:61:d8:9d:3e:2d:a2:e5:07:fa:09:2c:83:37:
                    f2:a7:d7:c1:00:c5:9a:86:80:da:97:f3:df:0a:40:
                    e2:d1:5e:ab:d3:a8:eb:51:ce:6e:a7:f2:75:a1:40:
                    bb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DF:AE:F0:06:31:C7:45:BA:18:57:01:E4:E4:15:0F:B8:F0:B6:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/9fd3a3e1-dfc7-34ed-8f84-1734d992ec4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl

            X509v3 Authority Key Identifier:
                keyid:4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.193.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:3b:e4:7e:53:42:41:9a:82:00:90:4f:fe:51:17:e3:58:d4:
         84:01:9e:ae:17:b9:c6:1d:b6:50:71:2a:bd:e2:12:f7:b0:68:
         71:e4:98:fb:8d:33:7f:ae:9a:b2:84:39:b4:00:df:e9:64:fb:
         a8:f6:53:4b:d1:4f:25:de:9a:0f:3a:94:41:20:4a:7d:99:21:
         9f:ef:f1:e0:fb:9f:8b:0f:65:58:5d:8a:42:4d:25:90:84:55:
         0a:45:5d:35:f4:a2:b0:93:ee:d7:a8:fa:e3:80:3a:1d:88:94:
         70:b2:9f:28:ed:bf:15:41:ba:40:5b:90:4e:12:9f:db:d9:31:
         24:73:72:cd:08:92:47:7f:89:d4:a9:ec:fa:3d:8e:0d:2a:0e:
         55:cf:ed:7c:d9:88:ef:ea:af:08:2e:76:ea:76:aa:50:7d:70:
         a1:a0:d9:fe:65:9c:2a:46:45:34:ed:7c:ef:8b:d6:99:a8:05:
         9b:5e:67:aa:7d:66:69:58:73:b3:67:80:bd:4e:ac:16:ee:08:
         6e:c1:46:db:a5:8e:5a:c3:7c:e1:73:3c:6b:fa:50:46:35:e3:
         00:a8:97:ad:4f:03:33:c7:9a:6d:40:fa:94:91:0b:9f:04:f5:
         2e:f2:c2:5d:41:cb:30:9c:e4:67:95:84:04:62:db:e6:50:06:
         e5:4f:5e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:53:03 2026 by rpki-client