Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b63b3f9d-84ca-3d21-bfe0-a0d71602db4b.roa
File:                     b63b3f9d-84ca-3d21-bfe0-a0d71602db4b.roa (raw, json)
Hash identifier:          xOXUfJ83ZI9utT9CO6+ih4fpPgNpB6m7aAoZLRiN1uY=
Subject key identifier:   EE:87:49:08:F6:D2:AD:BC:91:96:4E:D6:E3:99:2B:E3:A1:11:27:CB
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CA8F20E271A1BC65240D00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b63b3f9d-84ca-3d21-bfe0-a0d71602db4b.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     36522
IP address blocks:        207.236.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:8f:20:e2:71:a1:bc:65:24:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=fcfe3b5d-027d-460a-85ab-8d2082016af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bb:1e:fc:24:fb:f7:5b:be:ad:07:97:50:99:
                    d4:e5:f4:af:dd:96:8b:aa:3a:a3:5e:85:77:fa:64:
                    ed:28:2f:b4:55:8c:52:87:aa:d8:49:35:1c:e9:a5:
                    dc:5a:83:a9:9d:53:22:a8:37:09:ae:b6:86:c0:1d:
                    16:9d:93:fc:01:e3:3b:30:ba:e7:d0:2e:f4:2e:3b:
                    12:e4:ca:3f:e9:78:77:25:77:bc:5d:f8:20:09:2d:
                    6b:d5:ac:6b:c4:9a:b0:5d:cb:b1:9b:a8:26:ce:70:
                    68:f5:63:b5:16:79:21:18:a4:74:0a:05:4e:34:f8:
                    7d:ba:93:d0:19:ce:e2:ff:80:a1:22:1e:c5:f9:20:
                    14:03:76:07:fd:33:4c:79:61:0f:63:f7:0e:93:f9:
                    9e:35:01:da:ff:58:f8:93:0a:cc:58:42:3b:16:d8:
                    e4:24:81:ff:2a:27:c7:fd:8d:f4:50:a2:9d:83:57:
                    c2:9d:26:25:08:63:29:e7:c1:96:09:a9:f9:fd:5e:
                    da:ef:bf:e1:69:42:d0:ed:58:53:8b:ad:19:78:88:
                    1e:93:76:f7:a1:dc:7b:ae:46:48:60:ba:e6:17:74:
                    e8:e6:b4:24:b1:78:17:a8:88:9b:ef:c0:45:0c:4a:
                    ec:9e:1d:0e:38:45:ba:ac:4a:cb:4b:43:08:07:c3:
                    d3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:87:49:08:F6:D2:AD:BC:91:96:4E:D6:E3:99:2B:E3:A1:11:27:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b63b3f9d-84ca-3d21-bfe0-a0d71602db4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:10:a3:28:f4:5f:c1:3a:9c:78:fe:65:94:35:68:86:22:b8:
         47:a5:62:06:54:f2:eb:db:22:87:cf:ad:55:80:ac:ee:21:8f:
         2a:40:e2:43:ee:fc:eb:82:94:08:4f:bb:53:e4:af:93:65:10:
         fd:61:7a:35:52:6b:6f:d5:f5:ec:50:80:74:45:08:88:1f:ae:
         d0:67:b9:d9:95:56:a0:e6:12:6c:f5:0f:d5:74:e3:56:b8:b8:
         51:02:10:5c:11:c3:33:fc:ad:5d:70:70:1e:6c:87:b4:3a:02:
         8a:cb:6f:48:e7:0c:e3:14:1e:84:33:ed:8d:e4:a5:dd:0e:4c:
         f1:48:43:d8:f9:cd:27:d6:a9:65:c0:a3:fd:14:cf:dd:78:b4:
         4f:61:84:7c:e3:a5:e8:10:86:24:c4:cb:7d:b5:d0:74:88:e2:
         7f:94:9a:11:fc:a3:bf:15:a7:78:f7:80:42:3d:05:cf:25:a6:
         d6:95:b2:6a:06:e5:34:d6:f1:86:0b:04:cd:03:1e:ef:d7:57:
         f2:cd:a5:d1:bf:5f:c1:0c:a4:10:63:fd:a0:5c:5c:52:a3:2e:
         fc:64:cb:da:8f:b2:ff:6e:a9:4d:83:9a:21:2b:5b:04:14:73:
         0f:33:14:fe:1b:32:a7:bd:f5:d4:d0:f5:1c:bf:9e:c2:3f:a8:
         a4:03:5f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:09:13 2026 by rpki-client