Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/956b58ed-d46e-39ed-94e2-6a381a63f6de.roa
File:                     956b58ed-d46e-39ed-94e2-6a381a63f6de.roa (raw, json)
Hash identifier:          N11oCx9TeJ95XXhn4oOOD/jAqijID3RVolL36Vo98oQ=
Subject key identifier:   0D:B8:F4:4E:69:48:C7:BD:A9:C0:EA:82:6B:8E:D6:E3:9C:42:13:49
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06729D40C00EFD106B596C80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/956b58ed-d46e-39ed-94e2-6a381a63f6de.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     40575
IP address blocks:        209.128.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:9d:40:c0:0e:fd:10:6b:59:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=76e21426-e053-4429-9c06-5e4b6eb97a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:22:ee:6a:7c:ef:3e:9d:78:80:1b:f2:c3:20:
                    77:3a:0d:66:ac:cf:97:0c:e9:a2:64:c9:d4:fe:2a:
                    cf:5b:f5:ec:16:2a:da:b6:c2:7c:f3:81:c0:e7:a2:
                    a3:3e:2a:7e:90:78:7f:fa:b1:a7:eb:75:58:c2:b1:
                    9b:e2:03:f2:2e:16:bf:f2:ba:c3:f9:1e:f4:d6:41:
                    f7:41:df:9f:95:0f:80:85:ed:08:69:d0:e9:fe:95:
                    a6:6b:12:be:57:05:c1:85:f7:a7:9b:78:50:50:3d:
                    bb:63:16:84:da:33:7d:dd:e8:b8:35:c7:cd:5a:27:
                    71:93:95:78:ce:cc:b0:c2:18:f9:1b:4f:b5:91:1c:
                    7d:be:0e:55:44:c0:3b:79:d9:f5:7c:e6:de:58:1d:
                    44:42:d7:30:ae:c8:70:35:fc:bc:03:16:bc:91:00:
                    35:70:fe:1a:3b:24:21:f5:4b:a9:18:f7:3d:e2:b8:
                    6b:da:e9:66:b8:e8:f9:de:ea:f7:73:54:37:e8:0d:
                    1a:66:35:af:6f:1a:73:28:8c:29:73:eb:e3:ab:53:
                    bb:e3:95:27:d1:63:94:ab:a1:4f:cd:55:b2:b2:40:
                    94:48:bd:9a:f4:a2:35:d8:8a:54:67:b1:4a:d9:f5:
                    33:51:ce:f8:53:b3:d9:de:0f:d6:bd:7c:67:fb:e6:
                    b8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B8:F4:4E:69:48:C7:BD:A9:C0:EA:82:6B:8E:D6:E3:9C:42:13:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/956b58ed-d46e-39ed-94e2-6a381a63f6de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.128.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:25:24:93:7e:33:a2:76:cb:5e:2c:db:7e:15:bc:ca:a1:1f:
         a5:97:d3:c6:41:ab:da:f5:12:ee:f5:b4:1c:43:d1:a2:35:a1:
         60:3a:28:7b:6a:85:e9:da:9a:7c:f3:35:f6:25:91:64:e3:bf:
         e1:15:e9:00:a0:08:33:31:ef:dc:d2:60:10:60:fa:a0:b8:8d:
         96:cd:6b:75:d8:29:42:3b:5f:30:8d:2f:3f:a2:94:52:a8:d0:
         37:e8:8d:c0:eb:40:49:b3:57:d1:fa:31:b1:17:1d:7e:35:b4:
         9a:d6:ba:1b:e9:5d:35:99:74:2f:de:09:78:8a:55:44:08:c2:
         46:75:2f:27:70:75:4a:e4:4a:44:a2:f6:37:af:4b:2a:bf:e1:
         20:f3:89:7c:38:3b:4d:89:d8:34:e4:b8:f7:08:ea:e6:4e:da:
         18:4b:d3:ad:08:57:4e:84:56:20:03:82:c3:5d:07:99:06:ea:
         ff:56:a4:9d:a2:14:40:87:c4:d5:2c:90:b6:bb:d1:4f:32:59:
         e9:a2:aa:d3:9e:55:c9:cf:81:cf:28:f9:9f:d7:21:23:a0:cc:
         3b:11:b7:a4:78:a2:94:0a:ee:b4:98:d0:45:f8:60:5d:19:5d:
         52:35:a0:0d:06:48:e9:d1:8d:8a:d6:68:9b:44:ff:eb:c2:bf:
         09:9e:a6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:13:15 2026 by rpki-client