Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/391e8f61-201e-3631-a3f5-756f871d22bd.roa
File:                     391e8f61-201e-3631-a3f5-756f871d22bd.roa (raw, json)
Hash identifier:          uSdXCuBmMw5iBNHm6xR41HGPirBTryPKvM+u6l3TEpI=
Subject key identifier:   9E:1D:26:3B:75:E4:89:99:AA:C1:C2:5E:EF:79:D1:19:AF:00:8C:8E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F0672220C382A5F7F00E70E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/391e8f61-201e-3631-a3f5-756f871d22bd.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     11831
IP address blocks:        209.139.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:22:0c:38:2a:5f:7f:00:e7:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=ccbf1f7d-a081-44b1-a610-cb2005c037cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d8:ee:ce:af:63:4c:99:13:d6:26:dd:27:96:
                    fe:dd:c1:3a:58:3c:b3:9c:51:28:d8:2d:e2:b8:da:
                    18:52:1c:f3:47:b3:e7:17:13:2c:bc:f2:53:a9:b5:
                    88:a0:d6:c4:d7:e7:4a:e8:79:e8:f0:17:70:c5:40:
                    46:eb:69:04:8e:1f:ed:49:b7:08:df:24:d3:9f:36:
                    ad:1f:37:dc:0e:30:1f:b4:c0:16:68:4f:69:54:b8:
                    8f:ec:7f:7f:f9:41:14:b6:91:bd:e0:d5:07:d8:2a:
                    8c:a4:83:48:1e:68:f0:1b:28:23:c4:79:11:1b:1c:
                    77:0f:a5:6a:de:26:5a:96:07:c5:55:b2:a3:e6:e4:
                    25:a1:0d:f6:ff:cd:5a:1a:cb:7c:a6:49:5b:16:9e:
                    b0:8b:ac:d4:e8:fd:97:33:f0:72:15:b0:b2:cf:65:
                    6d:d2:ae:d5:0a:04:27:bc:61:03:51:6b:e3:a2:50:
                    9f:4b:8c:3f:ba:a0:83:cb:66:20:0c:e7:b4:d8:ee:
                    bc:8b:0d:78:35:35:b3:53:53:27:9b:5c:e0:b7:b8:
                    0a:c0:0b:af:51:9d:08:0e:35:16:33:9d:ee:9d:c7:
                    93:42:b1:ed:61:19:25:13:48:e8:1c:ff:fa:e4:11:
                    bd:ec:75:eb:7f:56:72:a0:4f:91:b2:3a:dd:cf:31:
                    12:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1D:26:3B:75:E4:89:99:AA:C1:C2:5E:EF:79:D1:19:AF:00:8C:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/391e8f61-201e-3631-a3f5-756f871d22bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.139.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:cd:95:52:b0:99:c8:f3:9f:b3:c6:01:a1:0a:1a:76:54:6b:
         59:74:1b:7a:d1:11:50:98:76:9a:5f:4b:1c:34:b7:7a:06:a9:
         00:40:31:3e:2e:8b:bd:f6:bb:62:30:1f:58:77:75:03:35:9d:
         58:d0:e2:b9:bd:6f:75:64:31:88:27:88:ff:30:b6:f4:44:19:
         7d:db:72:e9:a2:d8:0f:d1:cf:ab:b6:6d:8c:04:5d:a7:d6:75:
         39:b6:cb:8a:d0:37:a8:5f:c3:16:1f:98:1c:95:a5:e7:c3:db:
         4c:8c:c0:cc:8f:78:be:47:62:a4:60:e8:4a:ce:91:b1:51:57:
         aa:f8:7c:ea:11:76:ff:e0:c5:96:27:1e:e9:f7:51:01:e3:43:
         2f:f4:95:9b:fd:cf:8b:76:5e:ad:a5:f8:c2:ce:02:68:0c:4a:
         24:6e:62:ec:a6:51:e3:d2:da:d2:09:03:f5:9e:d2:10:56:96:
         5a:c0:dd:30:61:2f:70:a5:d4:4d:f2:7a:d6:43:96:66:ab:17:
         6f:46:4b:46:16:8a:d2:95:e9:27:50:dc:47:8d:ee:43:83:72:
         46:ba:e4:1a:f2:03:b7:1d:d6:0b:e8:f7:74:d3:34:a8:29:3e:
         f6:ee:e6:07:d2:65:69:71:93:ba:02:d8:9c:54:69:70:7f:0e:
         5a:91:48:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GciIMOCpffwDnDoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2NiZjFmN2QtYTA4MS00NGIxLWE2MTAtY2IyMDA1YzAzN2NmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitjuzq9jTJkT1ibdJ5b+3cE6WDyznFEo2C3i
uNoYUhzzR7PnFxMsvPJTqbWIoNbE1+dK6Hno8BdwxUBG62kEjh/tSbcI3yTTnzat
HzfcDjAftMAWaE9pVLiP7H9/+UEUtpG94NUH2CqMpINIHmjwGygjxHkRGxx3D6Vq
3iZalgfFVbKj5uQloQ32/81aGst8pklbFp6wi6zU6P2XM/ByFbCyz2Vt0q7VCgQn
vGEDUWvjolCfS4w/uqCDy2YgDOe02O68iw14NTWzU1Mnm1zgt7gKwAuvUZ0IDjUW
M53unceTQrHtYRklE0joHP/65BG97HXrf1ZyoE+RsjrdzzESgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ4dJjt15ImZqsHCXu950RmvAIyOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMzkxZThmNjEtMjAxZS0z
NjMxLWEzZjUtNzU2Zjg3MWQyMmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0YvQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvNlVKwmcjzn7PGAaEKGnZUa1l0G3rREVCYdppfSxw0t3oGqQBAMT4u
i732u2IwH1h3dQM1nVjQ4rm9b3VkMYgniP8wtvREGX3bcumi2A/Rz6u2bYwEXafW
dTm2y4rQN6hfwxYfmByVpefD20yMwMyPeL5HYqRg6ErOkbFRV6r4fOoRdv/gxZYn
Hun3UQHjQy/0lZv9z4t2Xq2l+MLOAmgMSiRuYuymUePS2tIJA/We0hBWllrA3TBh
L3Cl1E3yetZDlmarF29GS0YWitKV6SdQ3EeN7kODcka65BryA7cd1gvo93TTNKgp
Pvbu5gfSZWlxk7oC2JxUaXB/DlqRSEA=
-----END CERTIFICATE-----
Generated at Sat Oct 10 00:27:00 2026 by rpki-client