Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9f140cfb-8151-3b0a-8a6a-3fe4fd74d746.roa
File:                     9f140cfb-8151-3b0a-8a6a-3fe4fd74d746.roa (raw, json)
Hash identifier:          7TrQefpVGs0l7nPuMLIBXgjmn2JMbwb4cwrycmhjGow=
Subject key identifier:   26:3F:02:C3:6B:04:11:1C:AA:4A:C9:F7:81:C6:85:34:E8:BE:F9:32
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F0672A83FDAECF701F8ADA310
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9f140cfb-8151-3b0a-8a6a-3fe4fd74d746.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     11831
IP address blocks:        209.17.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:a8:3f:da:ec:f7:01:f8:ad:a3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=f752f2de-7ec7-4d31-9764-b1868c7b8682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:22:ef:e4:34:d5:f1:8b:d3:0e:a7:d4:5e:
                    98:ab:bf:54:f7:aa:2b:b4:4e:ea:81:74:c9:a4:cb:
                    3b:d3:a9:11:ea:2c:e7:f2:ef:3a:a6:b6:23:ce:dd:
                    99:3f:b3:17:fa:03:68:4e:0a:cd:38:27:e6:e8:a2:
                    25:c2:d2:90:21:bb:bb:8e:6e:c2:f3:87:da:d9:4c:
                    59:00:ed:62:e4:c4:62:c2:3a:0a:68:10:18:07:4e:
                    a1:c1:c7:9a:b0:fa:85:c1:fe:3e:23:77:66:6f:da:
                    a8:26:83:e1:1f:be:5e:5a:d0:a1:e8:26:03:74:04:
                    3f:01:f4:6f:e4:b7:26:a5:06:18:a4:9f:92:58:f6:
                    50:6c:75:af:e4:3b:e5:aa:2d:6c:1a:55:1b:23:1c:
                    4d:de:16:38:99:8e:30:82:21:81:9f:3b:11:61:90:
                    82:8c:03:56:ba:e5:d5:93:1c:a5:89:ba:2f:e7:48:
                    dc:2e:83:f8:c1:f1:3f:19:56:dc:c4:3e:fb:58:d6:
                    65:6f:43:29:87:8e:49:1c:ca:56:6e:bb:0d:95:81:
                    10:13:d2:b4:12:f5:88:25:bb:03:0b:a7:92:26:c9:
                    c6:32:d8:4c:7a:ea:73:dc:83:4d:50:41:57:b1:e8:
                    55:a3:62:e2:33:a7:45:8b:18:51:a2:fd:ba:3a:0d:
                    3c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3F:02:C3:6B:04:11:1C:AA:4A:C9:F7:81:C6:85:34:E8:BE:F9:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9f140cfb-8151-3b0a-8a6a-3fe4fd74d746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.17.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:6a:ce:77:5e:a0:9c:94:a7:7a:af:c6:50:73:29:0e:4f:e4:
         21:4d:65:22:a6:5e:0d:8b:2e:9c:ab:ec:20:ba:4d:be:f7:f1:
         82:e1:48:91:d0:56:de:8f:82:20:93:a3:32:51:f9:a9:93:7d:
         6b:78:9b:df:72:11:94:a1:60:24:ed:8c:42:7c:09:d7:c3:64:
         d7:37:f5:ed:26:9a:76:a7:c7:6b:2c:34:25:49:36:01:fb:ce:
         27:8e:0b:b0:b5:c6:66:76:e7:ec:52:f0:6e:f1:dc:bb:94:55:
         c4:46:aa:21:09:6b:8e:25:bf:93:ac:52:b6:37:f4:f6:18:28:
         6f:9c:a9:6c:56:0d:8a:ae:df:c4:30:f2:f7:f7:4b:76:1b:27:
         c3:34:cd:77:87:92:7a:e0:10:a5:8f:1f:ec:93:a1:53:4b:da:
         dc:a9:f5:86:76:f5:52:4c:7c:fa:12:5f:24:c5:b3:e0:15:17:
         ce:2d:ba:7a:5e:4e:e6:55:0c:29:c2:ed:cd:d5:ca:57:20:43:
         93:03:3c:7f:65:47:c6:90:89:1c:23:de:00:f7:42:33:38:88:
         94:21:5a:91:77:f3:ae:fc:fe:be:d8:58:3a:ab:76:fe:a3:51:
         f4:f5:34:5a:cb:a7:35:27:d0:1a:66:88:5a:17:f5:9a:32:c6:
         ea:49:45:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:02:36 2026 by rpki-client