Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7a31bc12-cb71-362e-aa28-7682e085fb44.roa
File:                     7a31bc12-cb71-362e-aa28-7682e085fb44.roa (raw, json)
Hash identifier:          NzKkIabidV2mXTRoSQq9KAygetuD5+sTlAQ9apGum60=
Subject key identifier:   99:E3:8F:75:E3:28:A8:8B:1A:F2:5B:0C:1D:35:7D:62:7E:EF:64:9F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F0672A4654242D48BD2D14F80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7a31bc12-cb71-362e-aa28-7682e085fb44.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     15321
IP address blocks:        216.209.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:a4:65:42:42:d4:8b:d2:d1:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=a17f855d-b734-47a4-a7f6-56f87fa52924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a6:f5:47:11:11:0e:73:96:5e:ee:b7:0b:7b:
                    75:98:95:a0:12:2e:54:f4:5d:ff:6b:e5:fc:67:a5:
                    e4:30:6c:5c:7c:6b:d6:62:d2:29:22:21:32:55:f6:
                    48:ef:b3:df:a9:10:3d:7d:bb:09:36:60:97:eb:22:
                    b9:72:58:77:c8:6d:7b:16:c4:0b:25:fc:83:46:d9:
                    61:0e:2b:28:d0:37:ba:16:40:6f:f3:29:5a:06:59:
                    46:f0:ee:97:9b:7d:08:0c:c1:a7:5c:31:38:b7:bf:
                    6d:44:1e:47:94:ca:96:b6:42:cd:47:db:03:c9:41:
                    66:76:38:c0:23:ff:f2:40:68:dc:4f:c9:65:34:c0:
                    cf:10:b1:17:cb:7a:18:35:8e:70:4e:dc:40:f2:32:
                    8f:a4:63:bb:b3:07:e8:23:e5:21:64:7a:fe:2a:cc:
                    3e:7e:c7:1b:7f:9f:ec:b5:48:dd:13:80:e7:ac:71:
                    a8:16:d2:b4:dd:40:41:f2:aa:62:22:df:05:1b:06:
                    81:f6:91:fb:ea:d4:5b:84:15:ff:5e:da:f4:00:02:
                    92:dd:e5:3c:9c:da:aa:cf:87:40:75:c0:4a:20:ad:
                    d1:7e:9b:c4:9c:17:11:73:90:ac:9d:d7:43:b5:fa:
                    e7:96:a3:3e:e5:66:90:f3:a8:3a:91:7d:49:88:43:
                    b8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E3:8F:75:E3:28:A8:8B:1A:F2:5B:0C:1D:35:7D:62:7E:EF:64:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7a31bc12-cb71-362e-aa28-7682e085fb44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.209.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:fa:d6:f8:bf:2a:c7:d6:9c:20:fa:1f:e0:62:29:fb:a0:d4:
         e0:7c:89:ab:75:38:ec:48:52:0a:14:02:73:6a:c8:b3:f6:91:
         d4:ec:d3:17:65:82:6d:13:e4:37:c4:39:c2:2c:f0:e9:d4:49:
         79:ee:6d:c4:6c:0b:10:07:18:90:74:5a:dc:cb:69:35:53:08:
         a1:0e:ad:90:f1:f1:93:08:40:a7:b1:5d:3a:b2:96:a2:89:8b:
         0f:c6:00:c4:45:48:2b:41:db:72:ca:6f:a7:15:97:b1:72:6e:
         c1:a1:00:ba:47:a8:dc:63:6b:c7:80:80:9f:51:be:c6:dc:e9:
         dc:1d:32:53:3e:97:67:64:ff:f8:d6:eb:b8:dd:cc:9c:0b:fa:
         eb:67:c4:b1:d1:fc:96:27:33:0b:56:c4:66:7d:51:51:2b:18:
         54:8e:76:ae:a7:22:56:2b:39:34:79:36:de:d1:43:a1:71:48:
         df:92:a8:65:d9:24:57:f1:2a:17:18:89:3e:6b:c6:7b:92:c8:
         9e:81:bd:95:3b:de:b2:59:0a:19:63:a7:63:0b:58:eb:b9:af:
         52:c2:fc:93:b0:eb:43:2a:fc:35:55:d5:40:88:89:e8:16:86:
         21:fc:85:07:e4:0c:b6:d4:f6:37:32:f4:29:a8:e0:21:78:b9:
         43:d2:1d:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcqRlQkLUi9LRT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
YTE3Zjg1NWQtYjczNC00N2E0LWE3ZjYtNTZmODdmYTUyOTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqb1RxERDnOWXu63C3t1mJWgEi5U9F3/a+X8
Z6XkMGxcfGvWYtIpIiEyVfZI77PfqRA9fbsJNmCX6yK5clh3yG17FsQLJfyDRtlh
Diso0De6FkBv8ylaBllG8O6Xm30IDMGnXDE4t79tRB5HlMqWtkLNR9sDyUFmdjjA
I//yQGjcT8llNMDPELEXy3oYNY5wTtxA8jKPpGO7swfoI+UhZHr+Ksw+fscbf5/s
tUjdE4DnrHGoFtK03UBB8qpiIt8FGwaB9pH76tRbhBX/Xtr0AAKS3eU8nNqqz4dA
dcBKIK3RfpvEnBcRc5CsnddDtfrnlqM+5WaQ86g6kX1JiEO4bQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJnjj3XjKKiLGvJbDB01fWJ+72SfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvN2EzMWJjMTItY2I3MS0z
NjJlLWFhMjgtNzY4MmUwODVmYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NHqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFv61vi/KsfWnCD6H+BiKfug1OB8iat1OOxIUgoUAnNqyLP2kdTs0xdl
gm0T5DfEOcIs8OnUSXnubcRsCxAHGJB0WtzLaTVTCKEOrZDx8ZMIQKexXTqylqKJ
iw/GAMRFSCtB23LKb6cVl7FybsGhALpHqNxja8eAgJ9Rvsbc6dwdMlM+l2dk//jW
67jdzJwL+utnxLHR/JYnMwtWxGZ9UVErGFSOdq6nIlYrOTR5Nt7RQ6FxSN+SqGXZ
JFfxKhcYiT5rxnuSyJ6BvZU73rJZChljp2MLWOu5r1LC/JOw60Mq/DVV1UCIiegW
hiH8hQfkDLbU9jcy9Cmo4CF4uUPSHXk=
-----END CERTIFICATE-----
Generated at Sun Sep 20 18:01:39 2026 by rpki-client