Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/216ee214-f573-33f9-8397-656938b36e20.roa
File:                     216ee214-f573-33f9-8397-656938b36e20.roa (raw, json)
Hash identifier:          UkR/HAYjFlPV3iXT4HacHw1YaWFRJiBISg7aQ2gUKG4=
Subject key identifier:   CF:83:5C:5D:74:37:83:D4:43:A8:29:92:5B:33:04:62:79:54:ED:6E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F71EDB74F799E70B61836AD80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/216ee214-f573-33f9-8397-656938b36e20.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     3848
IP address blocks:        207.236.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:b7:4f:79:9e:70:b6:18:36:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=3067ae67-4acc-4334-a871-2397a2674aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ac:60:3a:cb:7b:2f:94:17:e8:b8:2b:39:0f:
                    47:15:78:9a:be:0e:dc:5b:88:03:15:be:f0:ce:0b:
                    5d:58:01:94:bb:65:db:1c:41:b9:b6:c9:42:ca:e2:
                    24:53:e6:e1:07:a4:f4:f1:84:71:01:63:9c:09:87:
                    cb:3a:3d:ab:94:8f:f5:1b:4e:91:35:f5:34:0a:92:
                    4a:71:b5:06:9c:6d:2d:41:66:26:10:f4:d6:76:b6:
                    98:02:af:07:a4:19:2c:a8:ff:19:25:80:f8:69:40:
                    dc:92:a9:4a:88:83:e7:e7:11:23:e9:0a:8d:e2:99:
                    41:16:de:3e:37:49:05:79:15:24:5c:3e:c0:f7:ff:
                    fa:90:c6:38:b4:e6:54:f5:b9:04:ae:b8:19:f7:f2:
                    e7:b2:e6:04:54:53:84:07:04:9b:c5:11:d2:1a:0e:
                    1e:b7:39:21:33:d8:04:9c:41:87:6e:ca:cf:7b:85:
                    51:53:bf:c8:d7:11:a0:68:29:72:eb:8f:8c:be:a6:
                    f1:7b:81:27:34:0c:15:ca:45:d8:08:df:06:63:63:
                    83:b0:01:ff:17:20:f3:da:04:08:19:78:ec:28:12:
                    70:90:db:a1:e8:4f:57:78:5a:b4:ff:d7:64:b8:f9:
                    63:70:dc:62:63:43:b7:73:a5:cb:38:2b:ea:97:2a:
                    01:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:83:5C:5D:74:37:83:D4:43:A8:29:92:5B:33:04:62:79:54:ED:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/216ee214-f573-33f9-8397-656938b36e20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a6:46:04:19:07:df:fd:8a:b4:f7:6e:ad:de:cf:51:32:ba:
         da:72:0f:c3:08:d5:20:b0:e0:a1:82:6d:1e:6f:b4:4f:39:21:
         91:6e:e6:f1:2b:03:29:85:2d:d3:8d:73:1b:32:7d:8c:15:82:
         97:6a:68:65:de:f9:ac:69:cd:d2:f6:4f:94:c4:69:aa:20:59:
         e2:81:ce:90:e1:02:f5:60:51:01:83:f4:79:1a:b9:a1:e3:2d:
         46:ef:d3:9d:e5:7a:2d:10:a8:d7:9d:0e:b0:f3:6b:2a:b0:90:
         97:be:ab:80:75:16:71:2b:8b:c3:4f:b3:06:03:bb:84:c5:a3:
         ba:af:f2:d1:8e:21:53:63:f5:1d:e6:97:79:ba:af:35:47:d1:
         13:b5:90:86:a5:23:af:90:f1:fb:e9:1d:b3:51:a1:e0:df:52:
         a1:ac:11:28:49:af:0c:4c:8a:68:89:8b:93:97:c3:10:70:cc:
         83:48:ef:4a:4f:b3:a4:11:7d:11:e1:e0:3c:c9:ef:28:cb:c6:
         23:7c:0d:18:e6:25:42:33:96:56:77:87:55:64:ae:7a:32:81:
         dd:b9:66:11:d3:aa:ea:6e:65:f3:9f:9d:c1:88:3e:88:13:a1:
         a4:cf:03:65:05:13:7c:4a:f7:47:b9:3e:f9:5d:26:c9:16:ab:
         74:fc:8c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 03:48:55 2026 by rpki-client