Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c25aeaea-e33a-35ca-b384-7085b16124c1.roa
File:                     c25aeaea-e33a-35ca-b384-7085b16124c1.roa (raw, json)
Hash identifier:          v8IdO/dnrg7QbqjT+h+UwIBZQxaNeffVjY2+8tnNrus=
Subject key identifier:   AD:0C:9E:83:A5:E4:2A:C9:76:E4:E4:D8:20:2C:8B:04:F9:13:27:48
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06722C4832FF3D33618A2B00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c25aeaea-e33a-35ca-b384-7085b16124c1.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     21724
IP address blocks:        206.47.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:2c:48:32:ff:3d:33:61:8a:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=10457ef6-3628-4a73-810d-e2443836b9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:80:65:9f:69:29:f9:30:48:87:1d:fc:33:c9:
                    ab:17:94:24:f7:8f:2b:a7:13:e8:9b:6c:1c:ff:a7:
                    2f:b8:54:b9:4b:4d:65:9a:4a:1a:83:b3:55:2e:1e:
                    fc:a5:e0:40:ce:ce:fa:16:14:e5:c0:ce:f7:f8:76:
                    59:24:16:ee:77:84:14:bb:11:c3:3d:74:0b:81:fb:
                    26:60:7a:5b:91:71:3a:e4:69:f3:75:78:ae:cd:91:
                    bd:b2:a4:92:c3:c9:8c:27:cf:e9:90:af:60:52:cb:
                    db:a3:02:58:3a:32:2a:bf:5c:cc:1b:24:c4:92:d7:
                    d9:02:dd:a1:4a:f2:69:12:00:08:7d:0b:0a:72:fb:
                    d9:73:9d:a4:3f:7a:df:61:2a:2d:c0:26:88:85:47:
                    75:d9:09:0c:17:1a:6c:63:29:b7:69:de:33:a8:eb:
                    22:65:04:bb:f9:25:83:dc:e9:b7:55:74:68:5f:9b:
                    64:e8:07:a3:05:47:d3:c0:b1:f1:a6:7a:0f:99:ab:
                    20:5e:03:7d:a8:9f:88:3a:17:28:87:ab:77:b4:52:
                    fc:9b:a3:de:7b:f7:7f:15:6a:4e:72:8b:fe:40:fa:
                    8f:7e:58:ec:6c:f9:e4:0d:80:5e:47:df:65:ed:00:
                    18:7d:93:a3:3d:ea:bd:72:a6:3d:a7:8a:d2:e2:cf:
                    f8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0C:9E:83:A5:E4:2A:C9:76:E4:E4:D8:20:2C:8B:04:F9:13:27:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c25aeaea-e33a-35ca-b384-7085b16124c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:47:61:b5:32:6b:d6:cf:47:a2:f1:4c:05:29:1c:e8:4a:25:
         48:1f:a5:04:c4:d2:84:e8:f9:c4:be:22:a4:55:60:79:c5:80:
         f8:80:7a:ca:d3:a7:f2:c4:5c:b8:1a:3e:15:e3:14:9c:ba:ed:
         47:27:81:5b:41:52:de:78:d9:2a:d5:ad:b3:ce:c6:b8:24:a0:
         cc:73:b4:1f:78:79:5e:55:50:f5:13:76:24:a5:55:c5:d6:cd:
         35:bc:94:d1:e4:24:0e:be:05:73:9c:76:f6:e9:d1:83:88:6d:
         3e:35:92:11:7e:79:4b:c6:95:37:1c:74:95:48:88:2e:c0:03:
         7c:2e:dd:45:cb:73:3d:f5:59:a2:6e:0b:1f:93:a9:d6:4f:19:
         95:00:52:e0:a8:37:cc:d0:8a:9c:f3:02:68:4f:ae:d1:60:d5:
         5a:e8:33:c3:94:88:c1:f4:e8:e3:f3:2d:10:b5:4a:c1:ff:1c:
         83:d7:80:14:f9:9a:4a:35:a2:69:dc:67:68:aa:46:dd:50:05:
         ba:c8:66:88:97:8c:62:d9:93:1c:30:f5:f7:01:36:bf:65:2a:
         29:3a:13:61:f2:46:d3:01:95:9a:64:a4:ac:91:7b:6c:c7:35:
         25:20:33:bc:bb:a5:ea:52:96:22:92:66:a2:90:3c:65:60:74:
         28:c2:cd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:40:29 2026 by rpki-client