Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9651826b-f003-38f3-8de2-d0acf4f2800f.roa
File:                     9651826b-f003-38f3-8de2-d0acf4f2800f.roa (raw, json)
Hash identifier:          rmbL2yV3HZWGBivnlduDoRTQVJtlSCV+KJIMwSeIfew=
Subject key identifier:   9A:0C:0A:06:E4:01:18:7B:66:4E:9E:9F:CA:47:98:29:CD:D7:55:7D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CA93A523D13B543CD35388
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9651826b-f003-38f3-8de2-d0acf4f2800f.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     577
IP address blocks:        184.147.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:93:a5:23:d1:3b:54:3c:d3:53:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=e5958f30-c21c-4b39-bb65-c37e46c9417d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9e:d0:b0:90:0f:eb:2a:85:7c:36:8f:18:8c:
                    d5:6d:85:a7:49:d4:e6:a3:93:61:6f:ad:e1:2d:33:
                    52:3f:81:9c:7c:45:9a:9a:8f:c9:46:ca:c4:0d:3a:
                    1c:36:af:4e:cf:5b:74:e3:e6:14:14:e9:2c:f6:3d:
                    be:1d:3b:56:b7:e0:b4:2e:3b:b3:de:cc:33:aa:26:
                    4d:13:f5:57:95:66:6f:d1:e4:92:e6:de:35:3a:e8:
                    db:fa:23:88:5d:d4:63:14:61:86:4e:fb:ec:5f:39:
                    f6:c0:b6:a2:b5:5e:52:cc:f1:86:ef:36:8b:08:2d:
                    83:48:51:ea:79:12:60:6b:21:14:64:ab:50:07:cf:
                    77:1e:ec:61:b5:54:3f:9c:e2:18:8b:77:95:01:6b:
                    46:22:aa:ef:b7:3a:e9:28:2c:4c:36:3f:82:06:3d:
                    5c:4e:36:eb:3a:87:60:95:94:a6:76:2c:bd:3c:4a:
                    c7:09:a0:37:00:66:91:55:99:ff:00:d7:25:d2:25:
                    0f:c2:0a:26:f3:27:93:35:b1:c7:52:92:86:24:11:
                    11:7b:79:78:aa:01:fd:31:b8:4e:47:a6:bd:34:58:
                    34:eb:b9:28:49:b6:0c:c5:43:a8:83:37:c3:ca:7e:
                    75:f7:a5:24:f1:b1:e3:96:04:9c:00:b8:34:12:b3:
                    e4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0C:0A:06:E4:01:18:7B:66:4E:9E:9F:CA:47:98:29:CD:D7:55:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9651826b-f003-38f3-8de2-d0acf4f2800f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.147.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a7:0d:3c:1b:f4:63:c6:16:93:e1:d9:8d:d2:12:67:bf:b0:
         7a:27:c3:32:be:9c:b4:f2:f9:4c:7c:be:34:c1:ca:2d:4a:b3:
         20:69:bd:c0:87:88:18:50:1b:fa:41:3b:04:57:07:d8:ea:69:
         d6:d9:a5:e2:98:2d:1c:0e:9f:92:47:4b:f9:61:e5:cf:96:4a:
         b6:2f:9f:f3:50:c1:c2:66:6e:cd:89:74:67:70:57:6e:38:e3:
         66:db:4d:31:60:46:18:fd:e0:88:4b:69:ae:80:7b:81:68:65:
         3c:93:0b:07:ab:3c:d1:4f:fe:92:41:54:6a:f5:30:7b:45:08:
         7d:73:cb:18:2d:02:c4:d7:b9:5f:6b:48:a0:f6:a7:8e:c5:57:
         f1:be:3a:8e:f6:77:8d:bc:42:a8:96:e6:0b:67:39:67:38:8f:
         b4:46:3f:ac:f2:95:2a:7e:19:8b:0c:8a:b2:2f:88:a4:e2:07:
         6b:e4:e1:b8:cc:c2:21:09:ca:c7:75:50:1a:1c:5e:13:e0:4e:
         62:cd:28:2d:66:90:c5:1e:8d:20:0e:be:76:18:e0:d6:4f:7e:
         29:98:56:da:d9:4e:b3:37:da:fc:8c:91:6a:dd:79:7e:de:86:
         82:26:cb:d7:f2:f6:bd:26:aa:db:b4:44:40:2b:28:32:0c:1e:
         b3:8f:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:43:39 2026 by rpki-client