Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bab4351e-10ef-3f0a-8dc6-69fe5edca1e2.roa
File:                     bab4351e-10ef-3f0a-8dc6-69fe5edca1e2.roa (raw, json)
Hash identifier:          EIiQXGxe95U4+9Ee0yt6Hfhl0iFAzhFUuAxhy2wlh6A=
Subject key identifier:   9D:89:38:16:88:09:E3:37:AE:45:45:03:53:20:7F:83:13:94:D2:ED
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06722B459B10B50C729B42C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bab4351e-10ef-3f0a-8dc6-69fe5edca1e2.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     21552
IP address blocks:        206.47.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:2b:45:9b:10:b5:0c:72:9b:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=5c0a15fd-e47e-4524-b8aa-99d2c418d82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2a:31:81:cd:ee:8b:7e:02:00:81:bc:fe:b6:
                    07:70:39:05:34:70:46:c2:c8:8d:a6:79:00:ea:6f:
                    07:77:27:18:2f:53:15:9a:49:6f:ae:ba:3a:be:46:
                    39:cb:36:dd:9f:04:2a:6d:02:61:8c:f1:96:74:fb:
                    0c:2a:3b:74:7f:c3:96:79:3d:05:b3:ad:3a:c2:72:
                    d7:c4:a3:7b:3e:2c:78:ee:d8:4e:cc:c6:fe:08:12:
                    c6:10:81:c9:b6:22:8d:62:27:32:65:0a:b2:eb:17:
                    58:d7:0d:c5:77:9b:ba:cc:ae:b7:09:bb:61:e3:09:
                    8a:12:4a:ba:dd:a4:97:74:32:40:ce:35:2f:14:1f:
                    4a:ed:1b:0c:07:e8:83:22:17:c0:15:d0:3d:38:12:
                    4e:83:20:9f:fc:46:6c:12:a1:29:ed:41:7a:6c:4c:
                    71:00:e4:64:7c:c3:90:df:da:c0:4d:db:5c:26:a9:
                    47:9c:00:7a:3a:98:11:ee:f6:ee:ff:9e:fa:78:95:
                    75:de:f6:dd:03:60:68:91:53:c1:db:64:7c:1c:5a:
                    7c:53:53:11:ea:2f:c6:e8:83:81:6d:68:f5:ee:62:
                    d2:d7:23:6a:23:13:27:af:5d:aa:31:a3:93:5b:40:
                    44:63:f9:fa:31:47:ee:1e:25:ff:70:2f:6e:81:e7:
                    6d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:89:38:16:88:09:E3:37:AE:45:45:03:53:20:7F:83:13:94:D2:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bab4351e-10ef-3f0a-8dc6-69fe5edca1e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:89:86:07:a1:ee:66:91:de:7a:32:4d:34:75:18:3c:63:3a:
         52:f8:55:2d:19:8f:00:7c:5d:99:c6:eb:82:1e:68:5e:67:df:
         2c:dd:94:44:e9:d5:fb:e3:3f:28:97:c5:85:7d:0f:eb:6f:84:
         2f:e1:1b:4b:ba:4b:93:cb:ea:5f:4f:87:85:b8:5c:71:52:9c:
         ae:0e:10:e4:62:2d:26:ad:1c:53:07:7d:81:80:33:10:15:9f:
         ad:ce:b6:ca:8c:e3:81:d6:4f:3e:25:bb:72:29:cf:b7:3c:0a:
         aa:c6:6a:72:d6:32:4d:ad:8b:c7:91:f3:ee:42:c7:f5:d9:2e:
         2e:c5:0b:0f:87:f6:ed:c8:a5:25:ef:a4:6f:8b:59:43:aa:13:
         c2:a3:a3:23:97:be:60:15:78:28:ab:59:bd:20:07:f7:5c:29:
         ed:14:05:3a:36:b2:7c:56:8a:cc:25:99:af:3d:f4:da:79:90:
         d7:e7:f1:b3:20:62:9a:51:9f:2d:72:c2:84:9f:be:3f:8b:92:
         08:47:2d:d0:4b:31:d2:c8:80:8b:2d:e7:c6:0f:64:44:91:ff:
         0e:14:a5:9c:db:ea:dc:03:bc:89:20:c5:87:36:e4:c0:01:1b:
         5e:6d:3f:8c:d6:50:0d:ac:bd:fa:5a:2b:44:3e:97:2f:6f:1d:
         32:30:d4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:51:37 2026 by rpki-client