Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1dcbf7f0-dd15-3e5d-af1a-31c9a3a14a2a.roa
File:                     1dcbf7f0-dd15-3e5d-af1a-31c9a3a14a2a.roa (raw, json)
Hash identifier:          vJcfyCNQUxyyaPErDbyhwZDg9uuejGkxEoUuORVEImc=
Subject key identifier:   64:40:32:2C:FA:29:67:18:B0:54:DB:AF:4C:98:AC:D5:EA:18:1C:5A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CA901AC96AEC1DE5452C00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1dcbf7f0-dd15-3e5d-af1a-31c9a3a14a2a.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     36522
IP address blocks:        207.236.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:90:1a:c9:6a:ec:1d:e5:45:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=fc90f299-e4d3-4270-8b92-2b05ec128679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1f:34:e5:c9:4c:36:ae:0c:9a:c0:13:30:dc:
                    c4:ca:22:c0:60:bb:59:ff:12:29:4d:5e:39:7c:a4:
                    b9:28:20:97:31:06:d9:fb:69:19:7e:4e:ce:e5:d2:
                    1b:ff:da:22:8a:71:d6:bd:a3:ae:7b:c1:03:5f:53:
                    37:97:af:44:48:48:25:bd:ff:1a:ca:77:cc:45:03:
                    f1:5d:60:20:94:29:13:4a:b9:7d:55:b6:e7:ed:e5:
                    3b:53:3d:72:a0:f8:ea:12:9c:81:9f:05:98:65:e3:
                    eb:09:91:68:45:74:3b:8f:a3:2a:62:30:4f:b6:9a:
                    32:1e:5e:00:b0:ef:9e:8a:ac:93:68:fc:47:43:1b:
                    de:3b:a6:fd:42:a2:af:9b:46:ca:8e:e7:fb:18:11:
                    12:e7:54:6b:2d:ab:96:0d:b7:e9:9c:a2:a4:0d:70:
                    09:64:04:9b:ed:cc:37:3a:eb:d8:80:65:2e:5a:b9:
                    5d:61:80:1c:2e:5c:49:29:db:e5:fc:df:3e:70:e9:
                    25:0c:9b:85:40:f5:bf:4b:35:32:2c:28:ce:d4:98:
                    ce:78:5f:ce:16:47:45:f2:71:42:f1:3b:5e:68:56:
                    5e:b2:b9:d8:03:c5:db:11:69:c6:a9:72:98:36:59:
                    59:1f:b4:44:ce:b1:32:fc:97:f9:de:01:16:41:79:
                    69:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:40:32:2C:FA:29:67:18:B0:54:DB:AF:4C:98:AC:D5:EA:18:1C:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1dcbf7f0-dd15-3e5d-af1a-31c9a3a14a2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:a9:44:6c:7a:3a:77:1c:a3:a4:43:a4:6d:4f:4f:3b:ed:06:
         17:22:51:3f:dc:db:c5:89:5c:7f:9a:80:35:ff:4f:94:fa:14:
         4c:45:85:39:f3:ef:20:a6:9e:b1:3c:83:94:73:08:34:74:a6:
         79:01:49:21:04:76:c2:ee:77:df:f5:6d:b2:9b:68:08:15:d0:
         e2:4a:c3:99:2d:fc:ac:f3:82:3f:34:31:15:a9:80:e4:47:e8:
         c4:c9:07:38:34:c4:d9:a5:be:f1:ca:90:70:d2:c0:6a:ef:01:
         cc:85:93:38:5e:a7:17:f6:7b:8f:c2:0a:14:48:57:52:1f:fb:
         a5:ba:c6:34:5a:8d:eb:db:14:4d:78:06:4a:84:b5:2f:38:6a:
         22:c4:12:25:bd:a7:6b:6d:39:cd:0e:3b:87:9f:7a:4c:21:8c:
         93:09:ea:cf:54:99:7e:d7:5e:7d:ef:67:41:a2:ce:35:65:c1:
         e7:30:d1:7c:6b:4e:dd:93:d6:67:72:f2:55:67:1b:8f:fa:d0:
         f7:83:76:ad:fc:f6:21:3a:2f:e8:d4:43:3e:a4:bb:d0:ad:1d:
         b2:c2:a2:ff:60:02:9a:b5:6b:b7:a2:ec:13:72:59:6d:f5:5d:
         d5:57:da:77:a5:12:ac:5f:c4:ed:bf:1f:ae:15:65:f9:48:fa:
         4b:33:be:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:10:04 2026 by rpki-client