Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d9c9e057-9c7b-349b-824e-72dff5208ec8.roa
File:                     d9c9e057-9c7b-349b-824e-72dff5208ec8.roa (raw, json)
Hash identifier:          QdxJsQIucqb+BMPoZLqjsIh2wGiUa4TK1EIStdFgfeo=
Subject key identifier:   D0:A7:EB:47:EF:AE:4E:00:0C:25:93:8C:BB:3B:1C:0A:3A:D2:AD:9E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D86954E466BB0175C14308A40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d9c9e057-9c7b-349b-824e-72dff5208ec8.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     394974
IP address blocks:        207.164.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:4e:46:6b:b0:17:5c:14:30:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=f64ef302-f496-4772-bdfd-e586cee00fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b3:8d:dd:0a:66:13:13:26:7d:34:ec:d6:bc:
                    07:74:6f:33:7a:59:c1:95:34:75:c5:17:7b:9e:2a:
                    1b:fb:22:36:a6:7e:f0:98:33:c1:a2:d0:f4:2f:78:
                    be:f0:47:ae:76:9e:7b:41:66:f1:d3:35:74:fd:1d:
                    d6:cc:07:40:77:b0:7b:58:ce:99:38:ef:73:cd:cc:
                    29:d4:25:46:e7:35:58:5f:82:55:90:5b:ed:23:e5:
                    0d:b4:fc:cd:14:b1:db:2a:14:00:a0:b9:9e:37:71:
                    b3:8a:53:af:2b:21:76:06:a7:37:47:1b:d6:43:76:
                    31:80:36:f1:74:13:01:d4:d3:cb:72:dd:35:47:78:
                    8f:22:28:9c:70:e3:d2:4b:69:d1:10:ae:da:01:6c:
                    cd:8f:ac:3a:73:97:ff:f2:5c:80:20:e9:7c:6e:ee:
                    5f:7c:74:94:b1:bf:f0:44:df:30:8e:c9:93:fe:55:
                    ea:7b:ef:7e:61:5c:f3:be:94:ff:b5:6b:ba:68:60:
                    75:d0:dd:43:50:7e:e9:28:1b:5e:ea:20:8f:ed:32:
                    cb:2f:5e:52:00:37:69:ed:91:95:87:e1:14:99:8e:
                    25:bd:2a:76:6a:79:5e:1e:34:31:28:a9:fd:ee:d3:
                    38:ec:72:bf:90:3a:fe:b2:0f:80:6b:17:16:cb:80:
                    42:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A7:EB:47:EF:AE:4E:00:0C:25:93:8C:BB:3B:1C:0A:3A:D2:AD:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d9c9e057-9c7b-349b-824e-72dff5208ec8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:39:91:4b:8a:e3:fc:f0:71:6f:31:1c:ed:9f:45:b4:7d:63:
         18:68:1e:fc:23:c1:9e:6e:a9:29:41:ad:c2:4a:60:61:b0:b0:
         b3:a8:6d:53:fe:34:a3:6c:2f:78:10:16:77:c1:82:e0:e0:df:
         0d:d1:44:13:dc:7e:51:e3:4c:10:3b:69:db:0f:4b:01:75:a0:
         9d:7d:98:ce:e9:8f:5b:f4:23:f8:68:53:c4:b0:46:80:e8:c7:
         05:35:40:9b:6e:4b:d8:a4:0f:15:b4:c2:cf:fd:54:b5:7d:1f:
         f7:2a:db:b9:aa:0b:2c:4b:5f:6a:b2:5d:b0:bd:a3:35:de:60:
         c3:f5:cf:1c:76:3a:40:0d:8f:c5:79:f9:c3:0b:ca:32:ce:40:
         ba:ae:a3:5e:58:9f:45:15:a5:81:5b:24:ec:51:e6:30:a4:9f:
         39:85:f4:61:5a:5b:a3:45:59:fb:46:5d:d4:30:c9:2e:ca:75:
         2e:9c:fe:13:ae:d4:20:f6:19:e5:69:8d:22:95:44:9b:8a:e3:
         49:e0:da:4e:ff:1c:73:75:fd:51:5d:47:b3:31:38:89:7b:a2:
         d9:26:e5:e5:64:f5:07:0f:00:0f:5f:c5:08:5b:5a:f7:7e:a3:
         18:3a:89:90:be:eb:f1:0f:2d:27:13:08:6b:f7:fa:55:5c:a6:
         0a:b6:0d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:11:06 2026 by rpki-client