Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c754594f-ddf5-3f9a-8b50-e7b0b0a9be8e.roa
File:                     c754594f-ddf5-3f9a-8b50-e7b0b0a9be8e.roa (raw, json)
Hash identifier:          Yadop657yKdAIE64XBEnBgWDhrDBraB/8zb1XV+8s00=
Subject key identifier:   AD:42:CA:6F:5A:EC:A1:AB:FF:70:3C:2A:91:82:0C:FE:C2:3D:18:88
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06723C6140CA162A0E100500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c754594f-ddf5-3f9a-8b50-e7b0b0a9be8e.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     15321
IP address blocks:        216.209.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:3c:61:40:ca:16:2a:0e:10:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=6096ebc7-242d-4815-82ed-56b081b2d1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e0:e8:dc:5e:cb:38:89:1e:f9:ce:c3:b7:9f:
                    c6:9a:4b:3a:cc:72:ed:f0:ce:42:b1:0e:6c:85:af:
                    bc:ad:e9:d8:03:39:0a:50:b5:93:09:69:fb:c2:96:
                    71:a5:e4:0d:49:a4:36:61:98:08:4b:0d:9e:5b:ff:
                    c7:ea:be:4e:27:f1:17:ee:75:a3:2a:7e:00:1b:b0:
                    12:81:af:94:8f:75:07:2a:a5:b5:6a:cd:be:9a:2d:
                    42:e3:db:0e:f1:5d:e9:2b:bd:6a:2c:92:f3:86:60:
                    53:23:ce:96:3c:5d:fd:46:ee:9f:57:30:8b:4a:6a:
                    11:a4:b3:1a:dc:a5:4c:aa:75:df:bf:42:3d:8c:7e:
                    ed:12:49:43:82:da:c0:38:d6:83:ee:7f:ed:17:e2:
                    ca:02:6e:89:38:6b:5e:3d:b6:a2:49:3b:b9:0e:61:
                    cf:f8:82:d2:c5:a3:42:c0:81:ea:bc:78:b1:58:b4:
                    66:75:7a:1a:e6:3d:7f:d9:0b:8f:2e:75:38:32:f0:
                    cc:0a:d3:12:48:31:d0:50:5b:3e:2d:e6:40:c7:69:
                    e0:50:07:a0:ea:16:64:d2:5e:94:ec:18:3f:d6:3f:
                    09:10:1f:11:40:e4:68:d6:89:6b:7c:d9:22:15:c8:
                    68:2c:3c:be:94:69:1e:53:92:f3:c8:0f:5e:d7:14:
                    41:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:42:CA:6F:5A:EC:A1:AB:FF:70:3C:2A:91:82:0C:FE:C2:3D:18:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c754594f-ddf5-3f9a-8b50-e7b0b0a9be8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.209.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:f6:55:18:d1:50:eb:84:c6:45:b4:e2:79:10:32:a8:95:6b:
         d8:45:30:d2:f0:94:31:ed:38:0e:71:f1:2b:5a:8e:05:41:42:
         d6:42:ce:88:3a:2a:bf:19:f7:2d:84:94:80:27:a5:a0:45:c7:
         13:31:3a:18:ca:a9:2f:d7:b7:9a:1d:67:1f:64:cc:19:90:8d:
         49:b2:29:b0:8c:d6:67:85:3f:f8:31:cc:d6:ad:05:47:3c:eb:
         12:60:06:51:72:02:d8:09:b1:95:af:bc:f3:bb:51:b5:90:aa:
         85:4b:b0:84:b7:d6:77:4f:ca:41:a5:f5:8a:a1:55:9d:78:d3:
         df:03:b7:a0:35:c8:a6:c7:d7:a0:b7:ea:0d:f6:c4:20:d5:ed:
         1d:f2:0c:67:5f:a2:58:22:6e:75:b2:6b:a3:8c:d8:8e:cd:db:
         32:e5:2d:b5:f3:56:45:24:d0:a0:7f:02:f7:13:a6:30:9b:6e:
         95:d6:63:27:21:91:1a:ff:22:bc:ca:db:cd:ac:4f:ec:f3:66:
         70:73:f2:89:1a:b7:5a:ca:54:05:b0:13:dd:a8:dc:bc:cf:61:
         ee:e6:eb:7c:95:9e:3a:8a:3b:24:9e:34:1a:f6:39:6a:65:b9:
         51:74:6b:20:6f:47:4c:e1:92:51:9d:16:11:ce:c7:59:d6:01:
         b8:fc:d8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:26:49 2026 by rpki-client