Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/85f42bf5-8658-340f-a1b1-9e1ffa384c31.roa
File:                     85f42bf5-8658-340f-a1b1-9e1ffa384c31.roa (raw, json)
Hash identifier:          q2kubNcJnYwt/NkOg3x8lm853auMGH1sWCeWv3PgMa0=
Subject key identifier:   DF:3F:17:68:D0:FE:BF:C2:8B:0D:13:02:61:9E:7E:A6:3F:C0:0C:2C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06729D4C24820D60BCEAE880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/85f42bf5-8658-340f-a1b1-9e1ffa384c31.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     397168
IP address blocks:        206.47.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:9d:4c:24:82:0d:60:bc:ea:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=b5323cf7-a80a-40ab-88a8-084fc228baff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:62:72:c8:4c:bc:91:74:9d:9c:ae:2e:6c:cd:
                    09:a5:82:a0:c5:7e:63:e6:88:93:0a:cb:0b:48:b3:
                    0a:e3:c7:fd:33:7e:a3:68:6d:2e:42:f1:b6:dc:9c:
                    b6:cb:e9:96:0a:1c:90:83:44:28:51:5a:a6:73:b7:
                    db:3a:31:c0:d9:f8:0c:5f:bd:c7:eb:88:04:26:ac:
                    34:1e:16:bf:a6:91:fb:58:1d:68:4e:27:2b:93:26:
                    00:ad:35:f5:b9:4a:1f:10:52:e2:1d:8b:14:b9:98:
                    57:88:25:20:46:c0:d0:e5:83:1e:ad:97:35:8a:6f:
                    86:7a:03:0e:a5:7e:55:ea:5e:f9:81:f4:8d:b5:cc:
                    99:06:6d:c6:b9:3f:54:66:eb:1c:09:44:b7:03:44:
                    14:24:28:5d:40:5b:bf:b4:f4:93:3f:c9:56:39:77:
                    79:83:8b:ae:05:47:bd:76:2f:98:b0:0f:e1:9c:56:
                    cf:46:4f:c0:66:6d:bf:80:e1:50:b3:8c:d6:3c:16:
                    a7:0d:46:80:57:50:86:c6:7b:41:e8:1d:45:ca:fe:
                    02:02:d1:89:86:53:5b:08:be:77:8e:f0:c0:40:8d:
                    98:1f:6d:6c:4e:25:0d:79:80:45:f2:67:dd:f0:63:
                    91:43:fb:e6:15:8d:07:c1:20:f2:49:5a:0b:07:9c:
                    09:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3F:17:68:D0:FE:BF:C2:8B:0D:13:02:61:9E:7E:A6:3F:C0:0C:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/85f42bf5-8658-340f-a1b1-9e1ffa384c31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:cd:27:60:fa:ed:6f:69:c9:07:67:61:6d:a4:60:5f:5c:ac:
         9f:9f:02:ec:70:1b:51:5a:9d:9f:c6:18:83:70:2a:64:f9:3e:
         33:4c:14:8d:17:c3:81:c0:9a:07:9d:5f:5b:65:27:89:da:10:
         37:76:0a:fa:76:ae:60:26:bc:8d:6a:26:84:a7:0a:6e:3d:5e:
         0c:56:37:cb:bc:e7:5e:0f:70:ad:a1:9b:b2:04:c6:76:d3:11:
         47:e2:bc:d0:80:09:9f:6e:a7:36:a9:1b:ba:c0:bd:21:c6:d4:
         b7:1c:9c:95:3d:3b:be:d7:f1:0a:68:72:c7:48:e1:6f:67:70:
         a3:f4:8c:68:06:f5:c1:c7:6b:1e:a0:aa:8a:8c:d1:2f:7b:7f:
         30:40:31:c3:ef:0c:38:ea:c0:8c:d7:4a:8e:94:82:bb:f7:3f:
         51:c8:19:88:d7:cc:04:85:bc:db:c3:83:d6:c5:26:f7:ef:71:
         b5:19:7b:bc:89:06:59:27:68:c1:e5:6d:f0:b8:1b:ce:35:57:
         d2:d1:44:24:1f:30:f4:6c:08:89:ed:06:3c:10:74:b2:f4:48:
         02:5f:1e:bc:46:f5:c4:9d:88:06:9c:5f:79:91:b7:9d:11:bb:
         ef:aa:b1:19:ec:47:a6:63:b3:91:18:5b:cc:60:cd:27:67:16:
         de:b3:37:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:19:17 2026 by rpki-client