Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7c9e1684-c9b5-3aac-aedc-ef5798a4f309.roa
File:                     7c9e1684-c9b5-3aac-aedc-ef5798a4f309.roa (raw, json)
Hash identifier:          cnDsZZLl2pTR9CXGCemrjkz0VAXBMS5ZW7vX6LYBarE=
Subject key identifier:   E6:A3:92:F1:2A:FC:E2:FE:AD:42:CE:F2:19:EE:05:79:F3:2D:32:73
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CB0C8A3F648E28D5282340
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7c9e1684-c9b5-3aac-aedc-ef5798a4f309.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     36522
IP address blocks:        204.101.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:0c:8a:3f:64:8e:28:d5:28:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=76273839-4702-4224-bda0-87c404e7cb7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:49:48:4d:46:fa:f6:52:bd:0b:df:5e:88:fa:
                    bf:8d:08:76:2d:f0:2b:93:d3:8b:e9:72:d4:a9:5f:
                    76:f6:88:15:9c:ef:3b:56:2b:d8:d9:d2:a4:53:a7:
                    0a:c0:a1:5d:91:a7:9e:33:3e:ab:2c:91:c8:e4:a6:
                    49:c4:ee:98:7a:09:f1:80:3a:11:5f:48:de:0f:67:
                    21:ba:4e:14:58:7a:e7:6d:a0:5c:41:0d:1a:6f:b9:
                    50:0f:57:9c:b6:7c:32:40:df:21:2f:4d:3b:db:41:
                    00:9f:09:90:43:d0:75:ba:3f:a1:19:a8:ab:15:90:
                    42:56:55:87:f7:a0:d4:43:e2:92:79:40:90:6e:68:
                    af:54:2d:f1:27:a4:e2:d8:36:0a:1a:91:43:72:41:
                    7a:0d:46:ef:17:b0:85:ac:77:cf:0d:68:8e:6d:d2:
                    9b:41:10:4f:b7:e0:1d:4a:c7:61:2a:b1:39:91:0e:
                    0c:5b:d6:ef:d7:e3:82:d1:fa:b9:2a:c4:7d:c8:ef:
                    06:a5:b2:e8:f2:7d:69:34:61:fe:a3:94:3c:73:93:
                    d1:05:1c:00:16:af:1f:7c:f1:db:25:cf:b7:c9:f3:
                    60:f2:ea:9c:fe:17:9c:eb:1e:29:5d:cd:17:6a:0b:
                    9a:f6:52:b1:85:02:0c:34:40:7f:e1:9b:a7:05:52:
                    49:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A3:92:F1:2A:FC:E2:FE:AD:42:CE:F2:19:EE:05:79:F3:2D:32:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7c9e1684-c9b5-3aac-aedc-ef5798a4f309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:55:cc:62:2f:90:9e:e2:2c:1a:3a:c9:48:d3:71:f5:e5:3b:
         4f:c0:05:29:47:c5:18:11:f6:45:d2:2f:63:79:52:d5:d0:9e:
         50:33:94:a8:c0:29:d8:ff:a0:45:ef:f0:83:bd:69:01:2e:7a:
         34:9d:ca:0e:99:5e:cd:5b:45:bd:69:7e:03:18:92:8f:b1:46:
         61:aa:a1:13:c4:b5:85:5c:a2:84:5a:ab:ab:75:d9:7b:96:e9:
         57:cd:17:1b:f5:e2:61:85:48:d9:f6:bc:26:98:5a:7a:43:76:
         8d:4f:02:85:31:76:bd:87:09:fe:64:2a:d8:ca:c5:5e:92:95:
         48:d3:a3:15:91:97:ec:5d:6a:fd:25:c0:88:ad:ff:10:04:14:
         bf:ba:1f:23:35:d2:c4:a4:67:97:6e:97:8f:62:39:ee:56:23:
         f2:a8:62:9a:f8:08:f5:77:bc:2f:b1:b4:bd:ee:98:4b:da:d5:
         06:34:c3:31:a7:03:77:b1:5e:ef:73:02:17:37:2f:ca:cf:aa:
         ff:75:20:93:76:54:75:0e:f0:e4:b6:16:2d:20:aa:32:cd:e1:
         97:4a:a2:af:8f:31:f3:62:e5:7b:c0:4c:f6:b2:b5:d5:83:65:
         8c:f5:fc:41:83:23:ee:5a:b8:aa:f5:e7:06:a7:fa:5a:47:c9:
         2c:6f:f5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:47:04 2026 by rpki-client