Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e459c9e2-87c5-38a0-936f-a0fc401eefea.roa
File:                     e459c9e2-87c5-38a0-936f-a0fc401eefea.roa (raw, json)
Hash identifier:          f6gtVrsDAWJxBq/0SFeJmhH40Pog5rxWgI3Zc8lNjSg=
Subject key identifier:   E9:E3:35:A1:4B:1D:33:C8:78:46:FA:39:6C:2E:C2:82:00:F8:FA:29
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06721DAF773DBD57465D65C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e459c9e2-87c5-38a0-936f-a0fc401eefea.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     36522
IP address blocks:        204.101.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:1d:af:77:3d:bd:57:46:5d:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=af184ce0-c2f6-40bd-a949-9e6777bb7f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a2:e9:d6:84:da:3e:0a:cc:01:40:6d:61:e3:
                    7f:74:ca:a4:8a:70:c0:4a:23:16:65:bd:1e:a9:a2:
                    f7:0b:20:0a:55:5b:5d:62:5d:32:ce:c3:e1:06:76:
                    c9:64:e5:75:95:bf:df:a2:b1:d6:5b:2b:1f:83:8e:
                    d4:95:54:b5:d6:7c:69:9b:17:c8:99:23:61:07:b1:
                    b0:1d:2e:b6:ae:91:c3:35:0d:35:f5:b0:e6:32:ef:
                    56:4c:4e:d5:90:0f:ee:24:92:0c:29:af:dc:56:e4:
                    fa:3b:0a:2c:e9:88:89:57:01:b2:dd:d8:69:19:cc:
                    1c:ef:74:f1:37:f0:db:8d:87:05:2e:e8:10:1f:7e:
                    7c:e3:cf:ee:e7:21:8a:fe:e3:0e:f2:35:6d:6d:33:
                    0d:79:96:5d:08:8e:19:82:d5:5a:d2:ee:cd:3f:c2:
                    ec:d9:5b:73:89:0d:75:d5:7f:a5:09:e6:f8:8b:44:
                    d2:45:1a:1d:43:75:77:af:e5:df:cf:01:1f:63:7e:
                    15:06:48:c6:1b:f7:08:92:55:99:20:79:3f:7f:a1:
                    36:18:78:77:07:c4:bc:d0:85:4e:0f:fc:47:7a:17:
                    66:a1:99:a6:de:12:7c:25:7c:68:93:9b:9d:95:7e:
                    6d:bb:2c:0e:00:61:1b:6c:c7:87:cc:58:7c:2f:a7:
                    ad:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E3:35:A1:4B:1D:33:C8:78:46:FA:39:6C:2E:C2:82:00:F8:FA:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e459c9e2-87c5-38a0-936f-a0fc401eefea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:59:c2:16:ca:82:06:da:60:b3:0d:9f:de:b9:50:8e:b3:dc:
         26:88:2c:6c:07:09:71:1d:63:58:be:6d:2d:90:7a:6c:2c:a2:
         51:ad:57:f2:73:34:c2:e6:d7:aa:0a:c1:67:84:14:7b:c1:90:
         af:82:d2:f2:70:76:ef:75:46:b1:57:ca:8c:18:78:bd:51:d5:
         d9:24:ed:e6:01:dd:b5:0b:36:1e:78:24:e6:45:81:6e:6c:c1:
         72:5d:d2:8c:cf:a7:0a:d6:42:51:50:1b:d5:b0:9b:22:dc:d9:
         1d:4b:11:86:f6:25:5b:be:a0:5b:cb:27:af:1c:74:ed:15:10:
         85:72:60:79:5b:c3:03:4d:c9:a0:bf:55:47:c1:b3:ce:55:60:
         94:00:61:ee:59:b4:40:46:5d:7a:88:df:bd:59:f7:10:8e:d2:
         34:d0:ce:65:f9:03:35:54:d6:06:88:c5:e0:65:09:99:3e:eb:
         c1:f1:90:b0:02:d1:1d:26:75:0a:82:27:66:0f:9b:60:ae:8b:
         96:23:f9:23:ae:bf:df:36:25:aa:ac:f1:d1:d1:56:1e:ae:76:
         2a:b4:19:46:b0:6d:5f:9e:24:75:ad:67:d2:d4:36:94:42:10:
         47:25:ec:ea:59:04:f7:4e:4c:2a:c2:38:5d:49:ed:e8:19:3a:
         ac:2a:a0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:47:08 2026 by rpki-client