Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5a61b9a5-4d40-3fb7-af25-bfba697cd0a8.roa
File:                     5a61b9a5-4d40-3fb7-af25-bfba697cd0a8.roa (raw, json)
Hash identifier:          sTVWjkKI6BS7mSY7ZJtNttxI+kiF6HmMP9zQNMWwF8g=
Subject key identifier:   AC:54:E4:D3:0B:63:80:95:78:4B:D4:27:F5:DE:C6:9D:0A:40:E2:09
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06723E7731D574DF029F3650
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5a61b9a5-4d40-3fb7-af25-bfba697cd0a8.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     21723
IP address blocks:        206.47.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:3e:77:31:d5:74:df:02:9f:36:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=91ef1baa-a06b-4b46-9604-46ea3f165a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2a:15:22:fb:f8:fd:91:c3:b3:0e:54:88:0c:
                    70:f3:8f:6f:25:73:85:a9:ee:bb:06:43:e6:55:68:
                    72:d7:6a:31:7e:83:e5:55:12:27:58:75:59:2f:e3:
                    1c:e9:84:a2:40:f2:a5:4a:ca:7d:de:37:c5:de:79:
                    67:1d:ca:72:d0:fd:21:9b:a2:5b:7e:a8:5c:bd:e2:
                    8a:1e:41:5d:fe:48:4d:e3:e1:da:39:00:d7:7d:e9:
                    d6:48:e1:67:7a:f1:51:6f:82:f0:53:ff:2d:3b:80:
                    fe:8e:c9:52:af:e7:da:7a:2c:1d:6c:97:d7:d2:67:
                    36:61:1e:d0:20:9c:bc:52:96:56:c0:93:0d:3e:e7:
                    18:3b:52:ae:12:4a:5f:43:5d:95:42:52:29:1a:af:
                    45:09:52:31:52:92:a2:f9:c1:58:de:96:78:47:52:
                    66:a5:9f:14:c4:ee:1d:75:8a:3b:fc:86:4a:6e:b7:
                    2f:fe:66:44:85:13:d8:c9:43:9c:55:68:cc:5b:17:
                    2d:ff:da:60:96:0d:d7:cd:80:3c:b2:92:0c:da:a1:
                    82:2b:8e:9a:00:c6:c0:7b:aa:10:76:72:a6:08:eb:
                    f9:8d:ab:cd:e0:f5:79:0d:e8:14:4b:05:b1:7e:6b:
                    30:10:1e:33:a1:e8:17:0d:2c:c5:a2:07:8f:90:d1:
                    85:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:54:E4:D3:0B:63:80:95:78:4B:D4:27:F5:DE:C6:9D:0A:40:E2:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5a61b9a5-4d40-3fb7-af25-bfba697cd0a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:8d:28:94:e7:d4:0d:7b:24:3d:30:e4:56:5a:b7:a7:6b:a1:
         11:c0:c4:35:82:c5:ff:1b:22:36:1e:c3:c4:ef:4a:d6:2f:c6:
         7c:7f:46:a7:36:5a:62:37:b8:9b:cf:2f:49:4f:e1:2f:df:63:
         7c:6c:2c:0e:3b:3e:1b:d9:b5:67:f9:5e:a7:73:e7:77:02:af:
         48:31:71:58:94:3c:8d:2f:ad:7a:d9:5b:e5:fb:a9:19:86:57:
         c6:3e:41:2e:db:69:55:ad:2a:83:90:be:af:55:ed:a4:d6:32:
         9f:07:70:45:44:76:43:df:a2:ee:17:e8:b3:57:77:18:f0:04:
         77:fa:28:96:5f:f7:1b:1d:3e:1b:51:e8:5e:d4:6c:bf:d6:27:
         f3:f2:8d:96:7a:57:4d:6a:26:15:03:4a:f7:29:7f:13:7c:38:
         01:fd:da:68:ba:a7:f7:3d:fa:52:da:ea:77:13:6f:7d:11:6a:
         a1:5b:d5:34:a3:8b:1f:5e:58:b6:f9:83:25:42:ab:de:63:3e:
         25:b6:f3:c5:de:0b:e5:fc:0f:16:1b:29:a5:71:81:eb:e7:39:
         4a:10:e1:0f:de:5e:ae:03:8c:2c:1f:5b:75:85:b0:93:14:8b:
         68:0e:e1:fa:bf:79:69:5d:22:a7:f3:6e:7a:ba:bc:cf:c9:ed:
         b4:cb:9d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:24:16 2026 by rpki-client