Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9a367750-18b4-3f25-98b8-b28005dc9f7a.roa
File:                     9a367750-18b4-3f25-98b8-b28005dc9f7a.roa (raw, json)
Hash identifier:          CsgZcp9eoTFy1RYW9bBd4FDKcSlmSVt6bofsMZ6fnko=
Subject key identifier:   01:03:09:4F:FD:5B:E5:14:F9:B3:D1:D3:33:EF:4E:E1:E6:29:64:8D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAB2855BB211BF92B96B00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9a367750-18b4-3f25-98b8-b28005dc9f7a.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     35911
IP address blocks:        209.226.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:b2:85:5b:b2:11:bf:92:b9:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=96437f2a-de8b-4577-a20b-66a032973026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c9:bc:14:c0:50:6c:a9:c0:44:4f:87:2e:17:
                    1a:32:ae:65:33:26:97:67:65:47:8d:1e:f8:26:11:
                    5e:ea:b8:0d:04:36:9f:80:b6:b0:a0:2a:e3:c4:f0:
                    dd:d8:45:c8:1b:07:07:16:d0:25:58:a3:96:e0:c2:
                    47:d3:6a:ab:97:9d:3f:9b:d9:fd:65:c3:ed:d7:0f:
                    6a:cf:cb:43:7e:26:aa:b2:88:e0:ba:94:2e:0e:7b:
                    22:7a:c1:bd:b6:0e:b1:0c:3f:c5:ff:72:f8:85:a6:
                    73:72:49:c2:11:64:bf:79:f6:da:49:6f:7c:c3:44:
                    88:0c:8a:7f:47:23:fb:d6:e6:23:2f:6c:98:8c:1c:
                    38:27:73:dc:e2:56:17:15:f4:0c:6a:c4:8c:b5:27:
                    65:03:a3:04:db:1e:16:48:38:fe:fa:ac:4c:ad:79:
                    1d:fd:e8:12:9f:93:55:84:1b:82:4a:e3:09:8d:ef:
                    a3:e8:e8:25:45:f2:e3:18:9f:00:c5:e4:17:e2:c7:
                    e3:c7:ca:76:47:57:d3:bc:c0:ad:a8:8d:74:55:5a:
                    17:25:ac:df:ac:48:86:af:4d:d6:49:b8:3d:54:8a:
                    b5:35:1f:30:85:e4:c9:e9:d3:15:ab:f5:7f:fa:96:
                    20:d2:55:46:a8:0c:32:3a:2b:06:2d:17:0e:68:26:
                    8e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:03:09:4F:FD:5B:E5:14:F9:B3:D1:D3:33:EF:4E:E1:E6:29:64:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9a367750-18b4-3f25-98b8-b28005dc9f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c9:83:d4:d7:57:68:7b:a0:28:e2:49:34:0e:4b:47:89:54:
         01:07:26:5e:fc:03:76:15:18:6d:e8:cd:ef:78:5f:86:f5:26:
         e0:02:96:78:6e:62:60:88:d4:b3:c0:70:c4:2b:41:ed:d4:b2:
         55:01:6f:cc:01:35:85:4f:90:02:58:8e:5e:f7:4a:84:0a:96:
         76:3a:93:94:63:88:70:96:3a:8a:8d:76:8f:c3:e7:ab:46:b8:
         e0:23:bf:ed:73:68:28:a5:2f:34:7a:bf:0e:9e:94:8d:ad:eb:
         14:de:04:20:b6:2a:26:4c:51:81:0d:22:ca:8b:08:bc:a1:a6:
         1e:70:a6:c8:5c:65:e0:79:9f:56:8d:17:1e:31:36:c5:ef:42:
         b9:ae:46:42:d3:9d:8c:4a:b6:8d:33:34:25:fd:24:03:0b:14:
         5a:2e:4c:db:f5:79:fd:1a:c7:74:30:0a:97:18:31:41:da:68:
         28:29:1b:9b:8c:36:59:46:d4:5d:32:a8:fe:31:17:e0:60:65:
         be:6d:1f:ce:5f:8f:d2:9f:d3:0c:d8:d9:ad:13:5b:a2:2b:9f:
         13:c5:27:84:fe:f9:40:02:28:e0:8b:30:d5:74:ca:21:9f:cb:
         45:54:97:57:28:c4:31:3c:64:5b:ce:80:7d:24:4b:ac:6a:b0:
         70:40:5f:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2rKFW7IRv5K5awAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
OTY0MzdmMmEtZGU4Yi00NTc3LWEyMGItNjZhMDMyOTczMDI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8m8FMBQbKnARE+HLhcaMq5lMyaXZ2VHjR74
JhFe6rgNBDafgLawoCrjxPDd2EXIGwcHFtAlWKOW4MJH02qrl50/m9n9ZcPt1w9q
z8tDfiaqsojgupQuDnsiesG9tg6xDD/F/3L4haZzcknCEWS/efbaSW98w0SIDIp/
RyP71uYjL2yYjBw4J3Pc4lYXFfQMasSMtSdlA6ME2x4WSDj++qxMrXkd/egSn5NV
hBuCSuMJje+j6OglRfLjGJ8AxeQX4sfjx8p2R1fTvMCtqI10VVoXJazfrEiGr03W
Sbg9VIq1NR8wheTJ6dMVq/V/+pYg0lVGqAwyOisGLRcOaCaOdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAEDCU/9W+UU+bPR0zPvTuHmKWSNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOWEzNjc3NTAtMThiNC0z
ZjI1LTk4YjgtYjI4MDA1ZGM5ZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0eLiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABTJg9TXV2h7oCjiSTQOS0eJVAEHJl78A3YVGG3oze94X4b1JuAClnhu
YmCI1LPAcMQrQe3UslUBb8wBNYVPkAJYjl73SoQKlnY6k5RjiHCWOoqNdo/D56tG
uOAjv+1zaCilLzR6vw6elI2t6xTeBCC2KiZMUYENIsqLCLyhph5wpshcZeB5n1aN
Fx4xNsXvQrmuRkLTnYxKto0zNCX9JAMLFFouTNv1ef0ax3QwCpcYMUHaaCgpG5uM
NllG1F0yqP4xF+BgZb5tH85fj9Kf0wzY2a0TW6IrnxPFJ4T++UACKOCLMNV0yiGf
y0VUl1coxDE8ZFvOgH0kS6xqsHBAX6g=
-----END CERTIFICATE-----
Generated at Wed Jul 2 00:50:34 2025 by rpki-client