Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c78609ca-74a0-3677-a5be-7d8811baca50.roa
File:                     c78609ca-74a0-3677-a5be-7d8811baca50.roa (raw, json)
Hash identifier:          yeKBXLnvgeCwZfx4NqFmCmwOgZH2+lAzI9j8GD8cco4=
Subject key identifier:   93:53:53:F4:2D:ED:BC:48:9D:89:08:0E:80:D8:87:24:B0:DA:77:0D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F0672A24C02E4CCFEB3610920
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c78609ca-74a0-3677-a5be-7d8811baca50.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     397168
IP address blocks:        204.101.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:a2:4c:02:e4:cc:fe:b3:61:09:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=2a459814-4915-42ba-8dd2-98083b76f77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3c:c1:63:3f:03:9c:8e:12:ca:62:de:58:82:
                    28:ec:05:13:de:f6:e9:23:e4:de:05:4d:c1:05:2c:
                    44:bb:a0:db:ef:1c:14:68:7e:ca:7f:49:ad:c9:58:
                    ac:10:ea:31:cb:dd:2a:39:c9:b7:e7:c2:40:c1:4d:
                    a8:96:aa:c4:71:57:0f:e0:3a:1d:57:f9:55:42:5b:
                    d1:78:72:00:76:3d:58:39:ff:86:19:10:ff:49:82:
                    df:33:86:67:d3:00:10:eb:6c:d3:f1:aa:0b:65:39:
                    a5:48:f5:a9:26:11:a2:ee:e0:91:69:49:68:e5:48:
                    c1:94:24:00:30:98:90:c0:eb:96:a5:d2:a4:c3:27:
                    1c:9e:ac:89:eb:1b:27:b0:00:17:d8:57:0a:a1:d7:
                    7f:12:7b:ed:70:00:33:2f:7f:4d:c2:cd:0f:8e:95:
                    8e:30:53:cb:f5:55:db:84:b4:b5:b9:d6:d9:5d:c4:
                    0e:29:5b:4b:1d:cd:38:60:b6:35:2f:28:96:9f:45:
                    b8:24:85:0c:fa:07:cd:09:36:08:b3:43:1b:49:7c:
                    a0:d6:c4:e4:2e:c0:b7:0c:89:87:c2:5c:20:fd:e2:
                    8d:e1:9d:07:cc:b8:2a:3e:c1:b7:0d:c9:03:01:49:
                    11:ca:d7:9a:db:c5:db:9e:77:28:fc:26:9f:ab:5b:
                    f4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:53:53:F4:2D:ED:BC:48:9D:89:08:0E:80:D8:87:24:B0:DA:77:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c78609ca-74a0-3677-a5be-7d8811baca50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:bc:7c:24:be:e9:e8:bb:f2:55:01:2b:2c:3d:af:35:79:8b:
         8b:5f:3c:b2:1a:97:f5:73:74:57:81:4c:05:d7:97:53:4b:76:
         68:96:78:25:ee:f3:f5:93:b1:8b:ca:b0:cf:a3:44:f9:96:fb:
         1c:f7:7d:54:65:55:0f:63:d9:2d:16:55:e2:03:ad:25:27:82:
         db:6f:d4:bb:9b:e3:f5:1a:96:06:20:47:67:04:68:87:e9:99:
         f8:5e:53:d2:45:53:cc:27:4a:5a:74:d1:1a:01:0e:ca:df:f1:
         25:39:88:6b:e3:2c:4c:04:10:9b:87:57:81:2a:7f:ec:4f:85:
         36:3d:f5:5e:4a:82:98:5e:23:6e:dd:a4:98:ed:5c:9d:a0:75:
         19:78:53:26:71:61:e9:16:3b:56:fe:d4:80:0c:42:a8:57:45:
         cd:e2:c7:6c:56:b4:7c:bf:45:45:ba:60:3f:8d:38:07:35:0a:
         34:fc:c7:b0:53:b6:be:57:fb:51:85:01:88:01:41:b9:6c:bf:
         dd:51:a5:a7:35:96:52:88:fb:96:1e:46:1d:36:45:4d:c3:bf:
         18:18:dd:c3:dd:5c:61:5a:14:12:39:67:d7:19:84:f6:16:d5:
         af:47:b9:9c:d9:16:e3:4e:dd:64:71:41:a7:85:9b:01:a1:74:
         8c:e2:a5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:45:17 2026 by rpki-client