Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/01ac784b-149f-3773-b272-d5dee72dd7e2.roa
File:                     01ac784b-149f-3773-b272-d5dee72dd7e2.roa (raw, json)
Hash identifier:          a05emt0tZVoT5TYXKcd9Ia8yp6TeayR3ImZkV39MDPk=
Subject key identifier:   C6:89:58:B0:7F:1D:3F:73:32:7D:F0:7B:34:65:89:B4:57:C1:F4:DE
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19713D4D5971A38E4597F80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/01ac784b-149f-3773-b272-d5dee72dd7e2.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     397829
IP address blocks:        209.226.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:13:d4:d5:97:1a:38:e4:59:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=015dbcde-b888-4173-8585-90fd21fe012c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:3f:7f:5e:04:34:a1:01:9e:b5:99:77:ec:
                    05:49:dc:0f:a7:6c:a0:2f:57:b6:84:cd:2a:57:b7:
                    e7:0f:15:9c:a5:41:84:e9:4a:c9:48:1b:c4:5a:aa:
                    35:63:5b:d1:31:26:93:27:64:2c:1a:7f:16:b3:2c:
                    eb:8e:a6:71:0f:ef:3a:b3:aa:e9:e6:1a:95:9d:d5:
                    dc:11:5b:0f:62:e0:13:4a:b3:69:49:1d:f5:da:56:
                    e9:01:ce:12:21:1f:ab:50:08:77:bf:6f:42:66:50:
                    c0:7b:4c:ef:de:ff:21:b1:3f:ae:5b:2e:80:d8:0f:
                    fa:17:43:09:87:c0:46:62:36:0c:76:10:b7:c6:1c:
                    e6:35:82:e9:55:32:51:8c:1e:0d:08:73:dd:ac:81:
                    5e:2f:0c:ef:e7:f7:11:bb:d4:00:89:f3:e5:18:b3:
                    4a:d5:02:2b:c8:7d:e2:78:45:99:34:e6:2e:5a:6f:
                    0a:16:f4:c3:da:ea:7d:42:02:23:61:08:a6:0a:5a:
                    05:c2:3a:b5:d4:ed:8d:e0:9b:d5:21:98:0d:29:7a:
                    0b:61:48:25:ea:8e:e9:7e:9a:75:cc:cc:19:4b:da:
                    e4:18:26:09:58:2f:ac:42:c4:ac:07:59:5b:c5:de:
                    bf:db:73:46:96:6b:51:73:73:48:91:60:fe:cf:88:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:89:58:B0:7F:1D:3F:73:32:7D:F0:7B:34:65:89:B4:57:C1:F4:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/01ac784b-149f-3773-b272-d5dee72dd7e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:9e:9e:7b:ed:fb:be:c3:75:d3:73:91:fa:1c:75:9f:aa:02:
         29:d6:d9:ce:8a:e7:38:15:f5:df:45:51:b7:6f:fd:a4:0e:45:
         d2:56:10:14:5c:7f:d8:7c:e2:1d:da:9b:19:30:31:75:4e:4d:
         1c:51:b4:5e:05:a6:96:4c:5f:db:45:ee:58:e6:7d:56:cf:33:
         4c:3c:a8:1f:53:1c:8e:27:e3:a7:84:2d:40:f2:51:05:c5:02:
         15:68:c4:c1:1a:5c:5f:b8:49:da:30:d8:eb:e6:da:1d:06:a2:
         94:ab:77:b0:18:f5:b4:3b:f8:2b:81:16:de:a1:aa:f5:3c:f4:
         6e:3d:85:c6:a3:95:22:72:0a:f2:8c:32:74:0b:56:1d:81:e2:
         03:b8:9c:e4:e8:a3:8e:4d:14:d3:e0:d1:34:52:78:5a:b1:e5:
         6d:88:e1:89:30:10:60:d1:3f:f7:94:9b:5e:67:69:35:11:9f:
         3c:a5:d8:42:b2:f6:08:67:82:14:c4:7d:87:9c:fc:e2:28:f5:
         6c:70:bb:c6:89:ac:b0:d3:fc:73:28:ff:e6:6a:82:0e:0a:c6:
         a9:80:12:cd:ff:b6:1d:bc:11:08:9e:b0:3a:9e:65:ff:c0:63:
         72:e0:1e:7e:9a:2f:de:3e:13:91:05:57:9d:46:77:96:e8:31:
         95:f9:9e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:24:51 2025 by rpki-client