Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9a367750-18b4-3f25-98b8-b28005dc9f7a.roa
File:                     9a367750-18b4-3f25-98b8-b28005dc9f7a.roa (raw, json)
Hash identifier:          fVakM/RrQRmETYSJhFDbhQkZWKb3KX5dZSH3HhDZS84=
Subject key identifier:   D6:28:0D:E9:C6:F0:B9:32:43:DA:9A:7A:8B:93:48:8A:E5:F9:DE:6E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19706E409BFAF347C85DB20
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9a367750-18b4-3f25-98b8-b28005dc9f7a.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     35911
IP address blocks:        209.226.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:06:e4:09:bf:af:34:7c:85:db:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=2ae52862-0f3d-4495-adb6-08677a79a1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:de:0e:11:d7:e7:fd:6e:ae:66:ab:4b:65:ee:
                    b9:72:d1:b9:02:5c:32:52:50:3b:71:a7:ec:8e:a5:
                    85:26:09:b0:35:54:51:66:bb:d6:fa:04:82:b2:8d:
                    a6:81:1b:e4:11:75:43:4f:c5:40:1e:3e:07:66:bc:
                    91:04:a0:65:51:47:3d:be:de:a8:cd:3b:37:f2:26:
                    bf:f1:f8:05:d8:e8:a6:ce:63:36:8c:7d:53:6c:da:
                    5d:cd:2b:d9:65:d0:4f:55:fc:83:43:94:f3:aa:54:
                    cb:23:99:b7:9b:02:e5:5e:26:b1:92:b8:71:89:b0:
                    a3:20:e3:75:e1:4a:ea:2c:f1:d9:de:0d:78:c9:cc:
                    f6:f5:8f:0e:f9:ee:42:75:55:fa:b0:c5:1e:ea:2f:
                    6b:72:f2:8b:c9:04:d5:35:d3:5a:92:1a:d1:4a:5a:
                    1e:6c:c4:ff:a4:63:f1:0e:7c:51:f0:99:95:9c:c1:
                    09:21:71:70:39:18:f7:67:42:b1:6c:88:aa:cb:0f:
                    c4:54:5f:c9:1d:49:8a:20:8a:53:27:07:e2:97:14:
                    62:1d:34:9b:78:f7:57:1e:53:24:36:a1:3c:92:ad:
                    d0:93:1f:41:3b:63:c7:8f:80:b1:91:12:df:1f:38:
                    96:09:dc:ea:bc:03:94:63:45:ef:cb:d3:5a:03:20:
                    0c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:28:0D:E9:C6:F0:B9:32:43:DA:9A:7A:8B:93:48:8A:E5:F9:DE:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9a367750-18b4-3f25-98b8-b28005dc9f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c9:4b:45:09:4a:07:48:0c:1e:d5:b1:de:5d:a7:31:69:6b:
         6a:f0:d4:11:d1:11:c1:3e:ae:0f:9e:4a:9b:5c:77:70:f6:80:
         fb:af:9a:5b:64:81:8e:4b:e9:ba:74:90:5b:37:a6:de:1b:84:
         f2:9d:1a:90:8a:cb:d4:56:a1:e9:4c:51:d5:ba:50:87:e1:27:
         47:f8:8c:55:fb:28:0e:7b:e0:bb:8b:ed:62:21:e7:ab:dd:80:
         d0:d4:6b:b7:e5:a8:2e:90:20:55:6b:1f:4e:96:06:55:98:da:
         aa:91:3a:67:5a:86:9c:42:39:ee:b0:48:84:49:e0:bc:03:4c:
         b5:02:bf:3a:96:b1:68:af:53:1e:6d:1d:3f:12:a8:6c:cf:f6:
         c7:33:e4:99:a5:8b:2e:bd:6d:76:f1:fc:9c:7d:2e:ef:e1:c9:
         8d:8b:79:08:4e:de:84:76:ad:8c:f5:1a:12:65:34:09:c3:eb:
         c9:20:9f:fb:ae:d7:8c:68:ad:09:57:86:12:19:bc:a8:e2:b7:
         f5:fe:4c:f2:9a:19:cb:d3:6a:af:02:ff:95:a7:18:ed:cd:5b:
         08:74:25:c1:95:86:67:62:bd:57:b6:ce:a0:fd:95:bf:e5:9a:
         a4:14:9a:ac:5e:e7:e7:8d:e7:31:3d:19:ee:40:6b:f0:c9:a3:
         a9:f0:d8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:57 2025 by rpki-client