Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f75cee38-1281-3d0d-8219-63a7c9ee855a.roa
File:                     f75cee38-1281-3d0d-8219-63a7c9ee855a.roa (raw, json)
Hash identifier:          DSGJSp/tSra+rTTzQjXdsnKtO24AmEAv8gDneMWDUsU=
Subject key identifier:   55:C4:F4:2C:48:0B:87:AF:60:1E:2F:83:F4:A5:3F:25:51:78:56:FF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06722253C878E40981C7A580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f75cee38-1281-3d0d-8219-63a7c9ee855a.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     397168
IP address blocks:        206.47.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:22:53:c8:78:e4:09:81:c7:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=d3d34ee5-4490-4b96-8cd8-f075f46ed0bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:93:db:2f:e4:ae:40:c1:de:d2:14:da:c6:7f:
                    07:50:a6:83:c9:f4:16:90:af:6f:78:53:07:f7:ea:
                    00:36:89:81:e5:22:aa:78:1d:ba:4d:7f:33:25:81:
                    48:ec:18:73:fe:45:18:73:d7:f8:6e:ea:9e:9c:c8:
                    a7:4d:f7:1c:56:fd:0e:3f:92:7d:2f:1a:8a:9e:5d:
                    bf:16:d8:a7:f9:5f:cb:10:30:ec:54:25:4a:c5:b2:
                    9c:9b:c6:fe:03:54:9e:ab:dc:5f:85:5a:68:05:3a:
                    c3:3d:bc:73:12:50:75:88:37:03:20:3d:b5:37:52:
                    44:b8:a1:58:8d:21:07:a1:3f:0c:89:78:bd:cd:62:
                    82:da:96:04:b8:17:49:90:83:6a:b1:e3:1f:69:16:
                    99:2d:71:05:2a:73:f1:72:0d:60:48:86:ca:d2:19:
                    ae:db:9d:79:e0:4f:80:4c:48:c8:67:b6:2d:f1:97:
                    a5:b3:e2:84:fd:e0:1f:58:05:d2:9e:8a:97:c1:59:
                    b0:42:91:a7:ea:f1:d4:14:19:d3:fd:4c:a4:e6:55:
                    83:ec:ff:aa:d3:02:27:ac:65:7a:d3:2a:74:82:fc:
                    e1:57:dc:0e:00:56:52:f6:63:be:8b:06:8a:d2:1b:
                    ef:68:3d:84:3e:a4:14:ea:af:42:95:3a:28:cc:f6:
                    01:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C4:F4:2C:48:0B:87:AF:60:1E:2F:83:F4:A5:3F:25:51:78:56:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f75cee38-1281-3d0d-8219-63a7c9ee855a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:e9:cc:5c:36:87:a1:2d:6c:48:96:f1:91:87:81:51:2a:01:
         ae:b2:eb:46:c1:95:ee:04:12:08:c6:52:40:30:68:bf:6b:e9:
         ec:5b:ea:1d:f4:2f:c4:73:74:ea:4c:d3:5a:22:46:e6:c9:78:
         74:cd:9c:7f:11:29:51:ef:3e:f9:5f:d9:41:31:46:90:a4:12:
         8d:35:12:c4:4f:18:c4:31:2a:2d:76:17:1e:9c:26:45:18:3a:
         4a:77:dd:1f:b1:ab:f9:f5:1c:96:28:b2:2c:2d:8c:02:10:81:
         f2:18:79:36:ff:4f:b3:93:c7:f7:ff:6b:fd:36:92:6a:d6:17:
         59:aa:a1:a8:96:9b:33:e6:35:49:0f:38:2f:92:80:87:bb:d9:
         b3:e5:ab:3f:bc:20:69:cc:dc:10:70:8a:cb:bd:01:86:4f:20:
         d8:b6:db:2e:1c:1f:ad:f3:e3:2b:29:14:13:9e:a5:f4:1a:ac:
         c5:8d:13:88:45:ad:72:95:30:76:95:6e:b3:c4:74:cb:f2:a8:
         25:f7:b6:e2:67:25:30:d7:2a:c1:5c:65:29:c8:7b:0a:4c:d2:
         4b:e6:66:af:58:70:e4:47:98:a7:6b:d1:1c:07:e6:68:1f:95:
         0f:18:61:3e:78:a7:bc:74:66:b7:fc:61:5b:61:bb:bf:cd:07:
         0c:4a:bf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:01:35 2026 by rpki-client