Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/41d05922-8047-3448-916f-23c9508ef27b.roa
File:                     41d05922-8047-3448-916f-23c9508ef27b.roa (raw, json)
Hash identifier:          Q9MLZMhOpE2T5uqVjhWWtMht/8rVKi7GEHbTJ6no8/c=
Subject key identifier:   DD:F4:E1:76:2A:D1:8A:37:44:56:F3:33:67:71:B7:50:25:A7:FE:E2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F0672A52387839531707535C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/41d05922-8047-3448-916f-23c9508ef27b.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     30048
IP address blocks:        209.226.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:a5:23:87:83:95:31:70:75:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=abadd55a-ab32-4f61-a746-229b73f89d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3a:4f:c9:48:e9:d2:76:1d:e4:cd:e4:d3:a3:
                    f1:18:18:93:e9:86:20:bc:3f:c7:86:24:5d:9e:d0:
                    bb:ad:7b:ed:ff:6d:d5:eb:bb:ec:18:1f:83:27:78:
                    d2:25:bc:2f:7b:97:9e:97:79:65:c5:9f:f7:5e:85:
                    32:34:5d:0a:16:27:6a:42:5d:7c:7a:a2:e1:8b:61:
                    b3:95:33:b2:64:cf:8b:7a:1e:57:a6:af:18:c0:d2:
                    41:25:00:e9:b0:ee:83:db:cf:6f:75:8a:90:a1:c9:
                    d6:e4:e2:47:31:c8:0d:af:e1:bb:2c:01:75:b7:58:
                    84:d3:18:da:e6:06:a6:13:c7:49:af:ae:c4:ab:6c:
                    40:27:38:4e:9c:74:8a:13:66:c1:e9:6c:85:83:d9:
                    61:8a:43:45:f4:e9:f1:90:8b:a2:4d:63:94:1b:c8:
                    7c:ff:8d:ae:c4:ce:b1:b4:e9:d1:44:f8:5a:09:da:
                    e3:aa:6a:ad:c2:d5:84:95:06:3b:e8:23:b6:fd:f6:
                    7f:12:4b:60:c6:65:e5:bd:36:dd:0a:2e:8f:ba:36:
                    d5:14:19:73:3f:18:ec:c8:ac:5a:eb:17:81:38:a5:
                    14:ae:7e:2c:05:ef:f8:49:f3:47:85:31:21:ca:84:
                    77:d7:35:5e:51:e8:7b:c8:8d:78:d9:00:f7:77:5b:
                    ff:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F4:E1:76:2A:D1:8A:37:44:56:F3:33:67:71:B7:50:25:A7:FE:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/41d05922-8047-3448-916f-23c9508ef27b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:09:44:5b:dc:54:70:dc:c0:87:03:ce:d2:ff:ed:5d:91:53:
         89:26:29:14:50:52:5b:22:22:b1:ab:4b:70:bb:d0:fc:43:5f:
         63:90:d5:67:41:c4:d0:84:e5:44:60:d7:fc:8d:6b:f7:43:4d:
         f9:f9:e9:0b:fd:22:31:01:c5:b6:e6:a6:ce:e5:f9:68:b8:64:
         64:fb:27:ad:5f:e3:03:20:c1:f1:85:9d:39:b1:a9:2d:57:ea:
         b2:99:01:33:82:e9:a2:56:7d:7f:39:d3:c8:bb:c8:5c:3e:e1:
         2c:e4:08:26:6d:3c:55:c9:b0:12:1b:ef:ef:3e:4c:f4:5f:19:
         66:45:84:f0:10:0f:cb:f4:7b:77:9c:ca:86:cd:53:92:85:4f:
         78:23:9c:f4:09:af:21:8f:bd:87:9c:0f:62:fd:54:70:d4:e3:
         3d:a2:2d:39:6f:86:6a:98:7e:3f:a0:3c:5d:fb:61:e1:91:0c:
         b3:e2:fe:15:03:da:4b:12:81:4b:a3:6c:13:ab:bb:32:1d:4b:
         25:44:d3:06:5f:2d:ef:97:6c:2a:2f:ff:6e:8c:92:8f:17:6d:
         11:64:7c:92:fc:34:3c:78:06:4e:44:14:f3:85:d7:14:05:41:
         83:06:ab:fe:98:18:80:ff:de:b5:de:ed:f6:2a:39:b2:77:1e:
         7d:5b:f3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:17:25 2026 by rpki-client