Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/37e5f043-27bb-3b16-9141-d63f18d8b19d.roa
File:                     37e5f043-27bb-3b16-9141-d63f18d8b19d.roa (raw, json)
Hash identifier:          Y3qQRDPjb6jDI77EpmPE125BSJa1Z1P/ZHfCvYvG6Zg=
Subject key identifier:   49:B5:98:B3:64:F3:F8:55:AD:67:0B:1E:F9:CC:EC:E0:17:A5:18:35
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06729D1E99999349B52B3C80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/37e5f043-27bb-3b16-9141-d63f18d8b19d.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     7122
IP address blocks:        216.55.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:9d:1e:99:99:93:49:b5:2b:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=876f839a-96f8-4a6f-b03c-953cd7172144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:68:ad:e3:cc:53:61:1b:a3:40:e1:24:f7:c7:
                    0c:be:02:44:d4:a3:3c:74:c3:8b:4f:99:55:35:f3:
                    08:de:11:c5:58:ca:b9:f2:4a:be:16:5c:87:0f:7f:
                    85:59:a9:6a:c3:59:83:d3:1e:5e:ab:4d:ca:ff:67:
                    ab:f4:aa:ac:30:38:fe:ab:82:56:91:66:b0:c3:be:
                    b3:b6:84:26:d1:9c:66:79:15:2a:0f:2b:c9:52:c0:
                    6b:26:55:46:bf:f8:4a:c2:6f:da:f6:a9:2a:6f:51:
                    b3:f4:54:46:76:14:b8:98:28:43:7b:74:89:e5:1e:
                    ab:03:97:06:0a:96:72:db:08:a5:ac:fc:dc:db:c8:
                    7f:ac:4e:9c:7e:67:4c:78:8e:6e:42:fe:81:86:e9:
                    db:24:5a:1c:7b:e9:e2:a8:e4:50:24:b7:cc:83:b5:
                    d5:24:6a:84:9e:63:0a:c4:88:24:02:66:8b:cf:9b:
                    e7:b3:01:9f:e1:5e:73:2a:92:12:66:a8:35:44:29:
                    19:9b:f3:4f:3a:42:34:a2:f4:b2:5e:18:ab:85:3c:
                    df:8d:1f:57:89:91:65:e9:e0:9e:f7:16:43:7d:0c:
                    84:a3:bd:c7:4f:65:db:34:79:cd:64:86:c8:ec:90:
                    f2:65:54:47:68:d3:bd:f4:16:bc:97:c9:14:f9:41:
                    09:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B5:98:B3:64:F3:F8:55:AD:67:0B:1E:F9:CC:EC:E0:17:A5:18:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/37e5f043-27bb-3b16-9141-d63f18d8b19d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.55.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:43:dd:6f:be:c6:47:db:00:d8:01:71:23:c6:d1:5f:c3:cd:
         c5:ea:da:de:a8:f0:4a:56:4c:3a:5a:8c:04:00:2a:a5:79:b5:
         e4:0b:f6:83:d8:c8:e9:13:02:08:e3:9f:8a:33:43:1c:78:2e:
         16:9b:ae:94:a7:8d:5c:05:88:cc:84:f0:3b:4d:a5:c3:dc:8b:
         7d:ea:e2:54:47:20:7e:c2:44:20:aa:a7:07:b1:fb:16:02:32:
         78:a7:8b:ed:df:64:95:a2:bf:8e:91:83:3d:68:56:1f:be:5e:
         d6:d9:a4:37:a5:9e:5e:0a:79:8f:c7:7b:35:32:98:78:a6:62:
         ca:a8:83:8a:0c:07:58:52:35:4e:55:4e:e3:f8:01:11:19:5f:
         82:de:43:d1:ac:a8:28:80:6f:fe:58:d3:ea:45:d4:37:c2:f4:
         e8:60:94:f7:94:34:69:69:a8:1b:3e:37:b2:b6:5e:95:d9:db:
         2f:89:6f:b4:d7:ee:b0:f5:c9:50:dc:54:f9:68:2d:fd:65:3c:
         f2:e5:89:4e:bb:1b:4a:46:8d:0e:d7:0b:26:71:a4:70:af:14:
         35:b8:77:22:ae:e7:df:c9:22:04:57:6c:68:ba:ce:96:7d:0a:
         83:3c:53:76:e7:5b:70:1d:e6:b0:d8:01:6c:91:08:6a:3e:aa:
         c5:57:18:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:07:46 2026 by rpki-client