Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25c4b2a1-5ebf-3773-892f-4f93759a06f1.roa
File:                     25c4b2a1-5ebf-3773-892f-4f93759a06f1.roa (raw, json)
Hash identifier:          qp1fGbBq0tBu+VDz5+rah1wtg3H5H2SYhxlZU0fH7Ow=
Subject key identifier:   65:25:46:79:69:57:C1:85:5A:0F:18:28:22:AB:28:15:B7:A5:D2:22
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CB04BA72361BDB31820740
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25c4b2a1-5ebf-3773-892f-4f93759a06f1.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     36522
IP address blocks:        76.70.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:04:ba:72:36:1b:db:31:82:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=742d9725-9184-4def-aa0e-1ee7ff2926f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:28:5c:25:ac:17:65:6c:c8:20:5c:6c:79:a1:
                    fd:e5:d0:ca:b0:d3:2b:ba:47:7b:0a:e3:1b:57:80:
                    c4:41:d8:b2:b8:8c:57:1c:a0:7f:8c:4f:87:de:7d:
                    6f:84:85:2e:4f:a7:b1:1c:91:68:d9:83:62:73:79:
                    6e:70:a7:c5:dc:df:c4:1f:73:c8:98:cb:08:4b:e8:
                    64:ce:8e:a4:29:63:14:5a:53:b2:f4:bb:62:49:72:
                    bb:35:2a:4d:3e:7b:ad:e0:75:da:16:96:3a:69:bb:
                    e6:d3:f6:97:3a:24:c6:52:db:cc:d6:75:5b:04:24:
                    de:90:f8:26:db:d0:91:83:e7:37:aa:31:49:dd:a6:
                    a8:f5:b5:d9:62:c6:92:50:9c:54:17:2b:c4:0c:75:
                    7c:a5:e0:fc:cb:5d:54:ff:a7:8a:de:f5:c0:4f:a8:
                    1f:c5:88:60:80:76:a3:1f:5a:f0:ee:f9:e6:d5:4e:
                    71:5e:55:fc:25:e7:1c:fe:8a:07:f9:0b:80:dd:8a:
                    53:36:de:ea:f3:49:dc:b9:fc:f7:09:d1:69:5f:fd:
                    de:07:da:f3:36:c9:ac:11:1b:f7:be:de:f4:63:ce:
                    9e:e9:1f:c1:4d:f8:0f:fc:be:53:53:dc:16:63:37:
                    f3:56:8a:0f:d0:39:59:6e:02:bc:a4:c9:52:fc:03:
                    84:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:25:46:79:69:57:C1:85:5A:0F:18:28:22:AB:28:15:B7:A5:D2:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25c4b2a1-5ebf-3773-892f-4f93759a06f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.70.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:3d:68:4f:d9:31:6f:a7:b5:eb:43:08:9f:85:0a:94:e0:f7:
         9b:d5:69:d8:56:69:92:6a:a5:97:95:aa:2a:8b:cd:63:42:20:
         64:37:66:2f:7a:c2:02:cb:77:1d:97:f1:fd:da:d0:c8:84:66:
         b9:a3:f9:34:a4:5e:3b:9d:de:cb:49:eb:65:5a:0e:fb:cf:9e:
         f2:1b:c9:4f:24:70:89:19:a2:79:dc:90:72:43:a0:02:25:68:
         c6:be:42:b5:17:31:c0:ca:1c:f1:e0:96:4b:e9:8b:3b:fd:be:
         62:dd:c6:96:a8:88:23:6c:13:cc:94:e7:82:48:d7:73:5f:df:
         88:f5:52:c6:1c:c2:ce:2e:a3:bc:d0:f9:86:79:91:21:da:70:
         be:8a:a2:96:ec:91:72:a6:20:3c:79:b8:78:b8:96:86:4d:5a:
         7f:26:b6:1f:61:77:b2:f6:51:1d:ff:80:44:e7:77:95:b5:f9:
         96:23:de:6c:ff:5b:0c:22:ca:68:54:e8:f2:18:ee:21:3b:03:
         f1:ac:17:4e:4b:c2:04:a2:84:9a:4b:c0:52:ac:03:e7:18:bf:
         56:d5:24:63:ba:6e:7a:20:8a:47:96:b4:0c:17:b6:e7:10:d7:
         b0:67:0d:a8:9b:2d:9c:71:30:3b:ad:a9:15:c6:aa:de:ce:f8:
         86:6c:99:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:46:55 2026 by rpki-client