Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/aa878224-7fca-35df-9123-e1b697789083.roa
File:                     aa878224-7fca-35df-9123-e1b697789083.roa (raw, json)
Hash identifier:          GS4OOoLExEbXCOZZgv93P+Uztbtf8hsJ6Tv8/LW1KtI=
Subject key identifier:   07:7D:32:15:CD:4D:05:3D:0B:0D:2E:62:E6:50:3C:87:C0:8B:FA:F1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F0672A55AD64AF624EFA62000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/aa878224-7fca-35df-9123-e1b697789083.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     36522
IP address blocks:        216.208.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:a5:5a:d6:4a:f6:24:ef:a6:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=ab27b713-d469-4842-a4fb-ac44fd9c65df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:51:e6:0b:a2:42:65:07:1c:ba:51:5c:e5:ff:
                    a0:c7:db:6e:4b:d3:a8:d2:49:d1:b1:8f:1b:f8:da:
                    68:dd:12:04:ee:e6:1d:e7:ab:d0:67:bb:94:b3:45:
                    0b:7f:d5:90:b4:35:dc:48:c2:90:c8:e8:32:46:98:
                    38:73:af:a9:67:d4:ea:1e:6a:19:41:b2:13:17:c6:
                    92:2a:00:b3:5a:48:8e:f5:ae:b3:1e:96:9d:23:8e:
                    0d:02:ff:5f:a9:8d:2a:a4:74:f2:32:f9:df:21:31:
                    90:7a:e6:14:23:0a:0e:d3:ce:bf:3b:29:4c:7e:55:
                    e5:00:e0:46:a7:0c:fa:84:72:aa:49:6c:59:cb:0a:
                    17:92:b6:03:81:11:ca:fb:e6:da:9e:fc:cb:f7:aa:
                    d0:0d:f8:d2:75:14:e0:f7:94:38:2a:12:17:4a:c6:
                    7e:ee:f0:25:4f:0a:81:e8:a5:51:d6:fd:64:e7:b0:
                    d0:cf:5e:2a:1f:11:01:45:db:00:8d:0b:48:9d:8b:
                    3b:38:59:44:dd:59:a0:7a:44:13:56:be:e8:1f:a6:
                    ca:f1:3c:98:96:a0:cc:33:bf:f5:bf:62:4f:ed:55:
                    b2:96:ac:38:cf:a9:56:18:98:2e:82:d3:b4:82:9f:
                    ef:d0:83:ec:5d:0d:f4:a7:30:7e:ff:00:49:6e:35:
                    8f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7D:32:15:CD:4D:05:3D:0B:0D:2E:62:E6:50:3C:87:C0:8B:FA:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/aa878224-7fca-35df-9123-e1b697789083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:79:8e:eb:5e:27:2c:56:d9:31:fd:f9:01:75:b4:c9:76:21:
         ad:4c:66:ac:72:55:86:19:40:24:d0:15:45:63:fe:f5:28:0c:
         21:d9:20:0e:b1:5a:06:2f:ef:d7:3e:0a:44:37:ec:eb:1c:bd:
         b3:9b:3b:12:1d:b0:0f:95:4d:9b:17:a6:36:8a:de:69:4b:74:
         eb:49:36:63:57:ae:67:69:7a:15:e7:4d:04:b6:96:21:3e:d9:
         e7:1b:0a:3a:0e:81:0a:88:86:39:95:af:c5:4c:f6:af:c2:30:
         79:55:62:6a:7f:57:13:17:22:df:58:6f:a2:64:f4:dd:36:60:
         5f:97:06:1b:2a:ff:d0:b3:71:f9:7d:52:10:0f:40:61:80:61:
         db:eb:cc:7e:05:42:df:f7:cc:03:9a:3a:9f:74:80:74:83:55:
         1a:37:bb:54:65:88:d1:85:2d:d7:7c:39:94:12:29:51:f7:e2:
         bf:80:c9:08:02:89:e0:dc:74:66:f4:0e:fc:64:dc:f1:97:d1:
         39:91:26:e7:05:ff:5b:49:a8:ce:87:aa:45:a8:f0:cf:4d:df:
         54:a0:c4:02:00:e8:00:37:14:96:de:79:98:65:8a:dd:9d:81:
         87:5c:cd:5d:16:ef:54:1f:c6:fd:71:a2:ad:cb:58:e9:5c:45:
         b7:89:bd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:22:07 2026 by rpki-client