Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/722508f7-4eb0-39bb-aa0f-4bab739de5eb.roa
File:                     722508f7-4eb0-39bb-aa0f-4bab739de5eb.roa (raw, json)
Hash identifier:          C7TLzCrDlR8qUSjcbj2ugRohLGdp4/dHj9NwCkI5Oz4=
Subject key identifier:   15:6F:2E:49:A3:8C:8D:23:E9:9B:72:44:3D:41:BC:9A:F6:DD:53:23
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CAA4AB1E98C70F3D396C00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/722508f7-4eb0-39bb-aa0f-4bab739de5eb.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     15321
IP address blocks:        207.164.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:a4:ab:1e:98:c7:0f:3d:39:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=7b0dd8d8-7606-4c61-912a-c2c4bdc99e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:2c:4f:bb:e1:82:85:79:9c:00:0e:ff:b7:
                    67:e6:8b:aa:1c:11:48:56:06:4c:b8:9c:c7:ad:83:
                    af:29:c0:fd:56:4a:1b:ce:81:44:0e:77:b8:0e:c5:
                    0e:52:fd:d1:26:44:ab:88:22:31:ea:50:af:57:37:
                    96:a9:11:31:d6:73:e6:19:25:3f:92:19:47:a9:60:
                    fc:6b:7c:04:cc:9c:55:88:ed:49:9e:38:93:a9:74:
                    27:02:4d:6f:c2:05:ce:56:f6:36:96:41:65:8c:03:
                    ca:87:0c:8f:2f:0a:e1:e4:f2:53:e3:f3:89:f2:23:
                    f8:ee:40:91:6e:fd:30:b5:30:68:11:e3:5e:fd:4c:
                    29:0a:1a:2d:d1:65:8d:7d:47:6e:fa:1b:69:1e:31:
                    ff:85:30:24:ff:27:22:85:84:50:be:77:23:c0:47:
                    a4:d9:e7:1b:48:77:72:3a:b0:69:93:02:ed:2a:26:
                    3a:11:01:af:93:02:c7:b6:c5:3a:c8:88:a7:04:53:
                    27:f0:49:eb:15:18:68:16:42:3f:b3:bb:e4:9b:2e:
                    55:16:6a:95:76:cc:d2:ae:9f:93:66:6c:df:c6:61:
                    8d:2c:7c:49:0a:3d:e4:0f:da:86:25:90:eb:85:cf:
                    6f:89:2b:24:2d:e5:87:af:8a:18:04:2a:e7:7d:43:
                    25:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6F:2E:49:A3:8C:8D:23:E9:9B:72:44:3D:41:BC:9A:F6:DD:53:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/722508f7-4eb0-39bb-aa0f-4bab739de5eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:4a:27:e6:d7:cc:64:f6:08:1c:0d:14:e1:fc:a1:9c:16:0f:
         5d:cf:9e:5a:aa:2d:02:5d:54:6d:d6:1d:ab:ec:27:91:8a:cd:
         f3:6f:5d:80:cd:37:12:b7:28:99:05:7b:92:a2:c1:d2:f4:54:
         0b:bf:b1:03:e8:8c:30:9b:62:83:93:a7:97:93:c0:20:9d:15:
         54:6e:5b:2f:8e:a6:82:39:17:36:00:2f:8c:5f:6f:86:e5:a9:
         94:db:cb:7f:40:06:c1:ae:6c:d9:08:1b:1e:50:81:21:a0:78:
         5b:fa:50:fd:a5:ad:f8:1d:7f:de:37:9c:a3:94:15:7a:b7:ec:
         2c:ed:75:e8:96:40:ca:01:8d:9c:64:f8:97:bd:88:73:98:b3:
         90:cb:16:06:b8:55:49:b5:d0:42:a7:ac:40:82:0c:3b:fb:fa:
         d3:6c:d8:77:a4:7d:c6:bf:af:67:5f:91:cd:c4:34:37:ee:be:
         8e:64:83:49:d4:d9:5d:18:fb:61:b5:bb:c4:a0:4c:bc:ea:b3:
         02:6e:59:10:1d:cc:6d:74:38:51:28:b5:07:1a:fd:b2:12:f9:
         dc:7f:04:7d:0f:00:bc:d2:48:b3:8c:c0:41:51:3d:16:de:2a:
         c3:e2:1f:db:e1:ba:4a:13:d1:b4:fd:6f:61:28:f0:ec:54:7d:
         b2:4d:1c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:30:06 2026 by rpki-client