Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/91804e58-d81a-31f0-a939-18575472de0f.roa
File:                     91804e58-d81a-31f0-a939-18575472de0f.roa (raw, json)
Hash identifier:          On1WjrWBzK6J3SMXFsqjdQXp/mwVkwXFv9TKMrgEM5w=
Subject key identifier:   FC:85:17:69:B3:6D:AF:B3:17:76:1D:AD:12:B4:D3:57:39:BC:85:7B
Certificate issuer:       /CN=b741a525-1b5e-4308-93b6-815fed38e182
Certificate serial:       010D0C9F4328584EA7970D2C9C07271562E23F80
Authority key identifier: B9:2F:F8:2F:D3:08:81:EE:3C:3A:BC:B0:88:BD:60:E2:F0:88:EE:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/91804e58-d81a-31f0-a939-18575472de0f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26253
IP address blocks:        199.101.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b741a525-1b5e-4308-93b6-815fed38e182.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b741a525-1b5e-4308-93b6-815fed38e182.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:0d:2c:9c:07:27:15:62:e2:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b741a525-1b5e-4308-93b6-815fed38e182
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9d29bd67-0939-4794-be64-e35d92aa8467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d1:dc:62:57:69:3a:c9:a9:82:f3:2b:80:ba:
                    63:dc:79:cc:12:e0:e6:55:16:f5:e5:24:ad:40:00:
                    06:ea:d0:6d:1c:63:76:ca:07:f0:7b:bb:1f:ac:50:
                    cc:d9:a5:0b:47:74:f3:10:cc:11:42:7e:7f:9b:10:
                    73:43:e8:0c:c3:68:59:06:bf:6d:c8:20:bc:67:52:
                    26:b3:a4:87:ce:fd:cc:4c:62:fe:54:d7:e1:fe:60:
                    d0:56:61:8e:f1:26:ce:76:22:ff:58:99:3e:ee:83:
                    71:4b:93:7d:86:c0:9b:5b:4f:e4:0a:15:28:c3:47:
                    90:ac:14:9d:af:a0:c1:2e:ad:e9:36:cf:37:d2:7f:
                    6b:c1:ee:72:43:10:68:50:a9:d9:80:73:6c:78:da:
                    e7:98:f6:fe:e9:ec:90:bf:63:4e:eb:be:e3:ac:3c:
                    ab:14:f2:3c:a2:8b:ef:ba:39:8d:5d:cf:8d:0e:77:
                    59:31:58:ae:c4:ca:0e:8f:a3:4e:07:7e:8b:58:ef:
                    09:eb:ca:66:30:9f:82:c3:1b:3a:2f:3e:bc:33:92:
                    a6:e2:78:fb:08:40:05:6b:58:10:56:46:76:f8:a8:
                    e0:57:76:83:bc:bf:bf:e9:55:72:31:4c:66:e0:ee:
                    40:74:f8:1d:b1:8a:03:a4:5c:db:7a:10:df:4f:68:
                    21:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:85:17:69:B3:6D:AF:B3:17:76:1D:AD:12:B4:D3:57:39:BC:85:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/91804e58-d81a-31f0-a939-18575472de0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b741a525-1b5e-4308-93b6-815fed38e182.crl

            X509v3 Authority Key Identifier:
                keyid:B9:2F:F8:2F:D3:08:81:EE:3C:3A:BC:B0:88:BD:60:E2:F0:88:EE:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:7b:d7:bc:95:01:aa:39:6c:c7:f1:50:ce:13:a9:19:30:95:
         60:30:58:ae:97:ac:d2:d2:85:2f:cf:70:82:ce:82:19:5d:ea:
         ef:16:bb:ac:cd:b8:be:7d:3f:f4:e8:69:15:ce:ff:89:45:b5:
         78:9f:45:f7:d8:c0:d1:b9:83:9b:86:4a:e3:57:24:8d:9b:83:
         ac:22:e8:d3:3a:81:60:c2:91:ba:aa:65:3c:81:3f:4c:4a:f6:
         42:12:33:61:01:91:d7:2b:e4:3e:5a:76:e5:fe:26:9e:ac:c1:
         1d:b9:52:43:50:1a:03:ac:bf:f1:c0:10:0e:7f:ef:a4:ab:45:
         c3:a3:fc:25:91:88:e9:ea:f0:38:56:75:ee:20:79:5e:bb:68:
         47:31:52:32:91:f3:71:ba:ed:73:db:56:7a:ac:a8:a9:10:2c:
         81:0a:0c:8d:40:e7:9f:e1:bb:04:93:51:59:75:76:7a:9b:88:
         ca:d6:f3:0f:85:95:ab:b0:29:42:85:0c:a8:86:8d:90:40:c1:
         3c:14:0e:8f:29:ff:5c:7b:9a:8a:8f:1f:69:e1:be:b1:e5:90:
         ed:3d:06:04:6f:db:33:38:6e:80:02:75:71:50:c5:f4:38:2e:
         48:21:5e:7c:98:5d:d6:77:87:02:41:ee:f6:8f:b3:27:1d:98:
         83:a5:32:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlw0snAcnFWLiP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc0MWE1MjUtMWI1ZS00MzA4LTkzYjYtODE1ZmVkMzhl
MTgyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OWQyOWJkNjctMDkzOS00Nzk0LWJlNjQtZTM1ZDkyYWE4NDY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9HcYldpOsmpgvMrgLpj3HnMEuDmVRb15SSt
QAAG6tBtHGN2ygfwe7sfrFDM2aULR3TzEMwRQn5/mxBzQ+gMw2hZBr9tyCC8Z1Im
s6SHzv3MTGL+VNfh/mDQVmGO8SbOdiL/WJk+7oNxS5N9hsCbW0/kChUow0eQrBSd
r6DBLq3pNs830n9rwe5yQxBoUKnZgHNseNrnmPb+6eyQv2NO677jrDyrFPI8oovv
ujmNXc+NDndZMViuxMoOj6NOB36LWO8J68pmMJ+Cwxs6Lz68M5Km4nj7CEAFa1gQ
VkZ2+KjgV3aDvL+/6VVyMUxm4O5AdPgdsYoDpFzbehDfT2ghZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPyFF2mzba+zF3YdrRK001c5vIV7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNzQx
YTUyNS0xYjVlLTQzMDgtOTNiNi04MTVmZWQzOGUxODIvOTE4MDRlNTgtZDgxYS0z
MWYwLWE5MzktMTg1NzU0NzJkZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjc0MWE1MjUtMWI1ZS00MzA4LTkz
YjYtODE1ZmVkMzhlMTgyL2I3NDFhNTI1LTFiNWUtNDMwOC05M2I2LTgxNWZlZDM4
ZTE4Mi5jcmwwHwYDVR0jBBgwFoAUuS/4L9MIge48OrywiL1g4vCI7ngwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNzQxYTUyNS0xYjVlLTQzMDgtOTNiNi04MTVm
ZWQzOGUxODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2XMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADV717yVAao5bMfxUM4TqRkwlWAwWK6XrNLShS/PcILOghld6u8Wu6zN
uL59P/ToaRXO/4lFtXifRffYwNG5g5uGSuNXJI2bg6wi6NM6gWDCkbqqZTyBP0xK
9kISM2EBkdcr5D5aduX+Jp6swR25UkNQGgOsv/HAEA5/76SrRcOj/CWRiOnq8DhW
de4geV67aEcxUjKR83G67XPbVnqsqKkQLIEKDI1A55/huwSTUVl1dnqbiMrW8w+F
lauwKUKFDKiGjZBAwTwUDo8p/1x7moqPH2nhvrHlkO09BgRv2zM4boACdXFQxfQ4
LkghXnyYXdZ3hwJB7vaPsycdmIOlMmg=
-----END CERTIFICATE-----
Generated at Thu Jul 30 07:09:37 2026 by rpki-client