Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d3e451d-ba47-3480-ba90-11d76fbd300d.roa
File:                     2d3e451d-ba47-3480-ba90-11d76fbd300d.roa (raw, json)
Hash identifier:          6sH6SBl/6ZW/YPZ7+CEcnaYJcWrd9lnhZGJA/p75X30=
Subject key identifier:   3E:C0:A2:C3:E3:0A:26:64:3C:92:6E:44:C4:3D:D9:25:3B:7D:8B:CB
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06729EC349CF403720590B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d3e451d-ba47-3480-ba90-11d76fbd300d.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     16487
IP address blocks:        204.101.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:9e:c3:49:cf:40:37:20:59:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=e52adf30-d4cc-4683-9a87-5fafb485a1ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cc:f5:7e:69:f8:ea:b7:c3:bc:55:2c:dd:62:
                    c1:89:95:d6:c0:85:b0:f6:85:a2:a1:12:ad:fa:8e:
                    b3:02:8c:fe:c7:98:08:aa:78:27:c5:96:18:19:3b:
                    82:59:2d:06:ec:58:ce:de:cb:d1:af:ea:ef:f3:9a:
                    61:0f:42:b9:15:10:a8:70:25:66:67:d4:bd:f4:00:
                    33:a0:a3:af:e4:43:a9:04:86:8e:46:e7:13:4b:b9:
                    f0:6a:a3:53:49:30:c4:39:45:09:34:18:d7:57:c3:
                    a9:e9:91:75:87:d0:75:b0:e2:78:9c:1d:70:b7:ef:
                    00:12:77:12:3e:2f:7d:35:f7:a0:0c:4d:67:bb:60:
                    35:a9:d3:28:1c:85:af:aa:03:fd:bb:b3:9e:8f:73:
                    da:b1:ca:e6:eb:a3:22:38:db:15:4a:11:63:4a:13:
                    6e:ab:f8:98:f3:38:02:6d:10:c3:88:fd:0d:51:a6:
                    8e:a3:6c:82:7c:6f:a6:cf:0f:2d:39:ae:3c:7f:8a:
                    23:de:4b:0c:98:42:a9:ff:46:c1:a0:cf:95:03:54:
                    01:0f:95:cc:48:23:a4:6c:7f:56:2b:53:7e:8c:52:
                    6c:3b:9c:2e:d2:07:91:68:8c:9a:8c:9e:0c:1f:99:
                    87:25:a1:0d:86:90:e2:4c:b4:c9:4d:e7:00:9c:01:
                    0b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C0:A2:C3:E3:0A:26:64:3C:92:6E:44:C4:3D:D9:25:3B:7D:8B:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d3e451d-ba47-3480-ba90-11d76fbd300d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:af:09:14:2e:4a:77:0a:b4:74:a6:a0:97:85:4e:c4:59:d5:
         92:fb:86:ab:87:1c:00:59:69:64:da:7d:48:4d:36:7e:84:83:
         e7:c7:42:72:46:f5:1c:45:77:fd:b1:08:c0:6d:ab:a0:05:b2:
         0d:b3:71:e4:83:7b:d5:2b:4d:90:36:5d:fb:de:d4:f9:f3:93:
         da:39:15:ca:69:84:d5:a3:88:b7:9f:58:d2:47:f8:e6:83:7e:
         49:eb:18:8c:a4:76:4b:f5:df:85:c5:31:47:16:7b:e5:84:1a:
         b2:f5:b2:8b:44:cf:33:49:9f:98:44:72:bf:44:be:7f:69:10:
         50:2b:11:d3:31:ba:2c:e1:ff:e0:50:a1:dd:1b:8d:95:35:a7:
         ee:92:0e:ad:55:6b:7f:a9:79:d3:a7:62:18:d0:c7:74:4c:69:
         e7:6f:36:a9:6a:cf:95:5d:9d:2d:2f:1b:01:8b:4c:35:25:4e:
         bc:d6:ab:31:9e:c4:27:d6:69:3a:5d:f9:e0:16:b3:73:ed:64:
         fe:36:7f:cd:33:91:c9:83:c0:e2:d5:81:28:60:df:e1:6c:93:
         3c:e7:b1:52:54:8f:51:da:1a:e9:df:74:16:a6:98:1d:13:f7:
         37:01:25:94:05:d5:c9:cf:e9:9f:7b:2b:7c:41:88:9f:5f:2e:
         a7:99:39:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:45:08 2026 by rpki-client