Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/550896cd-3abe-345f-8674-fede421465c9.roa
File:                     550896cd-3abe-345f-8674-fede421465c9.roa (raw, json)
Hash identifier:          +D/ncooREhFvS5ywnoEjnJ9Hkg8Vnb+PKsFmnpIdq3k=
Subject key identifier:   2B:67:AA:FA:4F:5B:0D:33:1E:CC:C3:5B:16:CF:58:DC:0C:08:A6:F3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F0672365C9EC2FD7ED0CDA280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/550896cd-3abe-345f-8674-fede421465c9.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     36522
IP address blocks:        184.151.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:36:5c:9e:c2:fd:7e:d0:cd:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=2d218151-2a8d-4c54-af94-603d98bfc98e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4e:78:18:bd:87:8b:eb:ee:47:b0:be:76:49:
                    e1:6e:50:2c:d5:3f:d8:47:f7:93:c6:37:16:4f:83:
                    8e:c4:ca:ea:2f:a0:cf:11:87:85:46:b5:07:a9:19:
                    06:40:e5:0f:09:69:2a:4e:32:49:1e:39:9d:9d:b6:
                    b1:09:1b:42:31:9d:35:47:03:1c:5c:4c:1a:10:0d:
                    f3:da:1e:bc:fe:47:4a:bd:b7:2e:f5:91:a8:cf:4b:
                    b0:9d:9c:80:9a:4c:6c:dc:91:fc:d7:bb:12:75:8c:
                    83:a2:d7:00:82:2c:76:cd:30:76:a4:4b:66:12:1f:
                    74:dd:dd:de:cb:59:75:19:9c:0e:f0:1f:06:ad:d4:
                    d1:22:6c:6b:56:06:73:3f:98:2d:e2:5e:2b:09:2f:
                    c0:b4:26:c1:95:73:e7:d3:5f:04:66:37:22:16:bb:
                    44:b2:76:a7:74:31:c6:7a:b5:60:f4:5d:c0:62:13:
                    87:03:33:16:f7:5b:70:2d:03:17:e3:ab:82:67:ad:
                    24:b7:f7:a7:61:3e:b5:2a:40:60:3b:00:36:47:b4:
                    e9:f9:8c:0c:bd:6d:e0:a6:cd:67:53:ef:dc:8b:08:
                    eb:fa:4b:51:bb:96:04:7c:6e:21:f2:b9:dc:7e:a9:
                    49:ae:73:08:2e:6f:8e:e0:a9:1d:30:82:3d:36:07:
                    97:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:67:AA:FA:4F:5B:0D:33:1E:CC:C3:5B:16:CF:58:DC:0C:08:A6:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/550896cd-3abe-345f-8674-fede421465c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:d4:e7:06:fb:db:0e:92:43:77:63:6e:d6:ea:8d:78:75:8f:
         3f:9f:12:9d:b2:5c:05:b3:13:7e:3a:05:b3:18:80:67:71:fb:
         4a:90:ec:08:37:fc:b8:fe:3f:6e:5c:e7:16:79:6b:c1:6d:ec:
         3a:7d:26:49:3d:43:0b:50:f8:bd:22:54:92:55:3d:5c:4d:40:
         05:12:a2:3b:aa:34:15:72:f8:ce:16:fb:c5:94:9e:5c:f0:b9:
         a2:f1:f0:69:30:da:29:1d:ea:09:4f:33:0e:66:98:0e:04:8b:
         e9:8f:80:52:f6:73:b9:31:95:ea:99:a4:45:22:91:15:6c:a7:
         4f:7f:04:eb:52:de:d7:97:8a:6e:ca:96:30:19:cf:7c:78:17:
         ef:56:2d:51:f0:39:ae:18:42:21:cf:7a:48:2b:fd:7d:fa:93:
         d8:71:27:aa:59:25:d7:41:9c:cf:c2:cf:2a:98:4e:ea:c9:6c:
         c3:15:4c:3a:52:7d:aa:81:d4:3c:3a:4b:06:47:b8:56:00:fa:
         1a:e8:de:21:e4:db:35:21:a4:34:3e:70:c3:7c:65:d2:e3:16:
         c7:44:ab:08:b6:17:4d:91:8a:8f:c4:5a:da:5a:5b:09:35:b5:
         aa:d6:5e:52:b9:d9:60:95:5f:93:af:db:61:37:45:7e:60:f3:
         1b:8c:ed:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:15:36 2026 by rpki-client