Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/09b6ff78-1d69-3e3c-afed-6fa97cdea894.roa
File:                     09b6ff78-1d69-3e3c-afed-6fa97cdea894.roa (raw, json)
Hash identifier:          pDIwzR7lqCR7hUYcf0guBClAKhnF4s38hY99L9M4+UY=
Subject key identifier:   11:0B:E8:DC:48:51:01:47:ED:D3:04:A2:AE:43:EE:54:4B:62:CA:B8
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CB09D1A4A5D9E6BF223380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/09b6ff78-1d69-3e3c-afed-6fa97cdea894.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     36522
IP address blocks:        216.208.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:09:d1:a4:a5:d9:e6:bf:22:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=c55a2364-ea05-4f2f-99fd-ac271235ae5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c2:8b:19:6b:56:cf:7f:b7:c5:f9:48:a1:e4:
                    20:69:5f:69:d1:cc:ca:bd:c6:5f:99:20:28:8e:66:
                    f4:88:b2:ff:56:27:54:15:fa:a2:34:80:da:21:d7:
                    cf:d9:1d:35:a5:75:83:41:98:09:18:75:73:6a:7f:
                    0d:37:9b:b4:77:77:95:6b:42:49:9f:a3:32:2d:64:
                    28:9b:d1:65:17:9f:f9:f5:a4:a3:7e:b0:c7:9c:26:
                    f5:d1:eb:ff:e4:12:06:10:0d:0a:17:39:5f:33:35:
                    d2:9c:4e:1c:bd:2f:54:2e:78:68:17:70:b6:a8:75:
                    62:e5:e0:70:78:8a:18:b8:83:d5:77:83:0e:f1:97:
                    36:11:fa:61:f5:bb:f0:0c:be:9a:97:56:99:e9:6e:
                    c5:ba:98:28:a6:6a:80:a7:c1:28:ce:21:8d:69:1f:
                    fa:c6:db:cd:51:aa:fc:b6:69:e4:d3:b9:2e:fe:78:
                    35:86:67:89:ac:b5:cc:55:16:c4:02:62:bb:a2:ea:
                    53:19:22:95:f6:93:24:6b:66:21:47:87:f0:57:de:
                    5d:bd:da:83:a6:49:ba:cf:a6:72:7f:db:d4:d6:88:
                    71:32:08:0f:1f:5d:a7:44:bb:20:5a:cd:4b:a5:78:
                    37:45:91:17:59:61:07:e9:b6:06:24:f4:98:d9:af:
                    05:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0B:E8:DC:48:51:01:47:ED:D3:04:A2:AE:43:EE:54:4B:62:CA:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/09b6ff78-1d69-3e3c-afed-6fa97cdea894.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:bd:55:4e:c3:bf:bd:7e:ee:a1:be:bf:f8:bc:99:2f:28:ea:
         15:b8:49:b2:05:e1:91:e0:c4:d6:0a:7d:ac:86:3b:bd:28:8c:
         df:b3:d9:03:25:9c:bc:03:15:06:16:c1:af:81:c1:fb:02:72:
         db:99:62:33:1d:67:b9:15:d7:79:d0:a1:e7:f2:a2:a0:33:05:
         a1:ec:09:e6:17:65:50:57:0f:c2:68:23:a2:7c:b1:32:85:cb:
         d7:27:c7:b1:38:01:34:cb:99:88:d2:ea:48:de:73:80:5d:7a:
         0c:c8:34:0c:7d:58:af:ae:ca:61:78:17:8f:4b:82:bf:1b:19:
         f2:d9:24:3b:e8:47:ff:f1:ae:b8:f7:24:2c:7e:f3:da:7c:ee:
         c4:e2:5c:63:02:29:bb:68:86:c5:23:5b:ec:0c:2c:57:1d:aa:
         e3:e3:8b:4a:8a:1e:99:69:48:52:3c:31:a8:44:82:77:50:f1:
         ee:fc:fb:9e:9f:73:a1:c0:fe:9a:e3:84:45:ee:58:2b:72:4d:
         59:80:03:ce:ee:40:27:dc:45:ea:44:40:46:9a:e4:f4:32:19:
         22:4d:34:e9:06:76:67:c3:51:8b:36:d2:6c:c8:d5:92:8f:21:
         42:83:16:00:69:3e:b2:1f:c9:12:2d:1a:28:26:2b:6a:94:43:
         48:73:54:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:30:00 2026 by rpki-client