Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d5c4ed68-831f-32c5-baa9-bb61a9db3132.roa
File:                     d5c4ed68-831f-32c5-baa9-bb61a9db3132.roa (raw, json)
Hash identifier:          80fczCTr1XymBW5bj7upPimAVtVUq1/H9mGOwKX52OQ=
Subject key identifier:   2C:1C:DF:34:35:5D:87:A2:B4:A8:37:42:1C:04:4A:83:76:10:26:E7
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06722979E8D07615713E9F40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d5c4ed68-831f-32c5-baa9-bb61a9db3132.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     32463
IP address blocks:        209.226.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:29:79:e8:d0:76:15:71:3e:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=38e5db64-6d13-4dcd-9f37-b6006d555b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b6:8f:be:97:33:3c:03:ce:72:d9:f9:f2:1f:
                    ef:fe:e1:f6:06:d5:d9:92:82:36:bd:92:81:d7:eb:
                    ec:7c:95:6f:76:bc:af:95:5e:27:1e:d4:b6:a4:2a:
                    55:e0:e1:1b:36:50:c5:f4:c7:4c:cb:3c:e6:b0:57:
                    03:22:79:68:87:be:b4:67:26:75:90:ec:c1:b4:e1:
                    3c:52:01:85:f9:09:f5:7a:96:95:ed:5c:27:39:8e:
                    44:a3:85:07:2b:5c:e0:db:3b:62:58:24:3d:9d:e2:
                    62:c0:97:14:95:fd:23:ac:f1:75:6c:6e:89:39:1a:
                    84:68:39:db:a3:17:1d:71:d4:11:da:0c:96:34:a1:
                    50:f3:c8:88:56:96:16:5b:55:76:96:58:a8:6e:af:
                    bd:e8:22:84:d7:7c:7f:1f:55:f2:eb:98:c9:e8:8a:
                    6a:3a:ee:d3:96:df:72:e3:58:85:2d:1e:75:69:08:
                    f6:c7:58:89:5c:78:6d:25:9a:23:e1:bd:8f:ef:0a:
                    12:c7:20:fd:2a:fc:98:dd:71:84:f5:e7:38:8e:5e:
                    03:e1:77:49:29:cc:75:ea:16:3f:b4:9d:7b:82:a8:
                    4a:4d:98:7f:6c:77:34:62:14:cb:f3:b3:cf:85:85:
                    43:c7:66:92:17:8d:68:09:09:b6:38:47:29:af:d8:
                    28:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1C:DF:34:35:5D:87:A2:B4:A8:37:42:1C:04:4A:83:76:10:26:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d5c4ed68-831f-32c5-baa9-bb61a9db3132.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:0e:dc:db:b2:9d:be:80:35:de:0d:01:40:a2:c7:19:81:81:
         88:ee:81:15:17:e8:9d:ad:b7:88:31:a9:ac:7f:2d:21:0f:83:
         3e:ad:a3:22:ef:46:b8:fe:20:dc:d3:e3:00:6b:96:99:cf:99:
         a3:95:91:01:6d:f5:27:f6:86:f6:38:89:74:fe:f1:7b:d1:37:
         dd:4a:9b:6b:7a:aa:0e:3e:77:75:4d:36:d1:67:2b:60:3c:9f:
         a9:34:56:e3:77:cf:8a:6f:e9:99:89:5b:b5:e0:30:de:a8:08:
         e2:c0:89:b9:ba:09:c1:50:5b:df:1b:b2:90:f7:68:7a:ca:07:
         34:54:5a:8f:b9:72:ce:fc:c5:91:df:15:da:df:72:f2:43:bb:
         6f:a5:11:7f:2e:89:eb:cc:ca:27:74:f1:dd:1a:82:3d:16:b3:
         30:3f:c4:d3:d8:9c:4e:d0:d1:df:b6:a5:a1:67:31:ee:14:12:
         73:c0:cc:bf:ad:d6:14:58:e2:4f:83:1a:ba:77:40:c6:21:31:
         5a:a9:24:e2:ac:2c:92:82:35:17:e3:e6:9b:c7:b5:bf:81:61:
         17:b4:37:17:88:b3:08:5a:01:46:89:ff:92:ef:24:f7:fa:0b:
         3f:61:d7:c1:05:19:a6:18:ca:2a:1e:cc:74:e2:4a:84:50:a5:
         e7:ae:9b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:59:19 2026 by rpki-client