Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9079d15d-686c-37dd-9143-0a54c5830c31.roa
File:                     9079d15d-686c-37dd-9143-0a54c5830c31.roa (raw, json)
Hash identifier:          ldT65aU+Zzb+wMr6klK4xAgcsS6Q3R2yXsDlludwi7Y=
Subject key identifier:   75:40:FA:F6:91:78:94:84:9A:32:20:64:A1:C1:F7:0A:39:E8:63:1F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06722864558A09F919698850
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9079d15d-686c-37dd-9143-0a54c5830c31.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     21723
IP address blocks:        206.172.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:28:64:55:8a:09:f9:19:69:88:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=76521ae0-fc8d-47e1-9d0b-9705c9015cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5b:9c:ec:38:ee:08:2a:20:f6:43:2a:66:17:
                    11:e4:a1:4b:c2:98:1b:cd:70:86:0c:a9:4e:c5:3a:
                    95:98:d7:a0:2d:23:ca:a7:52:e7:8d:79:04:d3:8f:
                    d0:9c:0c:2c:92:b2:9d:c3:ab:95:af:90:34:e6:52:
                    a6:a7:0b:5c:f3:69:01:19:9e:2c:a0:6d:f8:b9:e8:
                    ab:82:40:bd:44:ad:63:03:e2:5f:7c:f0:03:75:75:
                    bf:90:b5:e8:c7:ad:28:39:06:f7:a9:d6:86:0e:6c:
                    95:01:12:20:b1:55:87:02:89:d8:6e:c7:b7:71:fd:
                    e5:3c:60:e5:be:b2:72:e9:03:27:8e:2d:c5:dc:cc:
                    97:59:45:b4:a0:91:a6:03:09:51:00:76:c2:45:70:
                    9e:e5:cf:da:4b:90:b3:c9:90:a0:94:da:c4:ac:9a:
                    1e:d3:61:72:12:0e:90:9c:fd:80:3f:1f:64:c9:3c:
                    3e:6a:28:0e:7f:15:42:58:1a:c8:9b:62:71:0d:42:
                    eb:80:4f:69:16:d9:e7:1d:7b:7d:34:ab:68:ac:cd:
                    f6:cb:7a:b0:02:7a:b9:2b:0b:b4:d2:5b:d9:78:79:
                    b7:31:6e:dc:57:ac:93:f9:2e:29:1e:1a:a8:1d:3e:
                    81:c4:8b:1e:a1:96:4d:07:eb:70:58:5e:bd:69:67:
                    8c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:40:FA:F6:91:78:94:84:9A:32:20:64:A1:C1:F7:0A:39:E8:63:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9079d15d-686c-37dd-9143-0a54c5830c31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.172.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ba:e6:68:ea:be:09:b1:a9:bd:19:a1:af:09:75:80:6c:da:
         24:5c:2b:e8:3e:d4:f3:7b:3b:0f:09:fa:df:14:cd:93:08:e4:
         28:0e:91:87:6a:60:ba:ee:31:68:9d:8b:cc:03:d8:c5:e5:04:
         ab:aa:28:c6:11:83:96:1d:7c:3d:f8:c6:11:5a:7c:13:f7:f3:
         73:20:1d:44:52:a4:43:98:00:b1:2d:ca:47:8a:bb:dd:95:ac:
         a4:2d:6a:6f:94:d1:5e:90:25:cb:a8:e1:1e:cd:4d:28:c4:49:
         b4:7c:6f:72:52:aa:a5:a9:2c:de:ec:81:ea:0c:cb:57:58:fe:
         3b:37:07:ee:6e:62:03:98:f7:a5:96:36:9e:a9:ad:1e:26:5a:
         72:7f:4c:85:65:24:ca:a6:32:89:fb:e1:9b:9c:57:6e:1f:a7:
         c6:64:ec:fd:9f:4e:07:13:f6:6f:d1:28:98:9a:b0:b8:d5:e2:
         be:47:bb:91:1c:f1:14:3f:06:69:19:c0:36:02:00:82:9e:d2:
         31:ef:94:c6:c9:66:79:d0:f8:86:a0:44:45:77:69:5a:8e:e9:
         4c:40:f7:6d:64:30:fc:84:58:3a:77:17:e3:59:fa:c2:c9:16:
         2d:fe:1b:36:d5:17:f2:33:d4:93:61:8f:de:9d:b2:33:32:f1:
         ca:88:19:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:26:34 2026 by rpki-client