Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b99907f7-81d6-3b94-8a5f-b54bf2cd9e05.roa
File:                     b99907f7-81d6-3b94-8a5f-b54bf2cd9e05.roa (raw, json)
Hash identifier:          DaBz/uIXLIVV0fEHY8aLJ2mMKZQJ2A8e4UGje6Q/JxI=
Subject key identifier:   B5:92:D8:7F:D7:3F:F7:80:97:83:E3:3D:1A:C4:FF:9D:96:22:7E:05
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06729DB0F4E8D1DAD2EC90C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b99907f7-81d6-3b94-8a5f-b54bf2cd9e05.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     21723
IP address blocks:        204.101.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:9d:b0:f4:e8:d1:da:d2:ec:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=fa8693c0-59ec-47b9-a2df-e814874d6345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6d:9f:75:2e:bd:84:46:92:7f:65:cf:41:34:
                    e3:b5:ec:a9:7b:07:fa:31:7d:0b:90:7d:11:40:6a:
                    27:73:d0:ca:6a:fa:18:49:b2:a5:03:93:a8:dd:38:
                    a2:45:d9:ce:14:75:2f:a3:2e:40:42:85:62:49:30:
                    f0:00:ea:84:0c:dd:5e:b4:37:db:7e:e4:4d:25:5a:
                    8a:69:b2:9f:7d:e0:c0:50:46:77:b4:5d:77:51:71:
                    34:89:4d:59:89:84:99:05:cf:af:2b:df:7b:a8:60:
                    34:9f:e1:5a:50:bd:af:55:fd:18:45:9f:e4:68:17:
                    bd:ea:e2:4b:04:3e:13:48:a4:7f:e8:25:ef:dc:97:
                    51:95:25:a9:3c:9a:6c:6d:af:38:52:9f:df:87:81:
                    99:b6:e8:d1:11:2d:1e:56:b6:93:c8:6f:49:68:ca:
                    0f:73:2c:57:b8:6e:ec:e4:b7:aa:dd:0b:4a:9c:4d:
                    51:41:db:67:d8:5e:62:cf:ed:e8:28:57:8f:d2:f5:
                    bb:03:3b:9c:1a:05:df:25:84:2c:8b:93:02:ec:ac:
                    92:c6:a5:96:ac:df:a5:97:5e:f1:3b:b9:8f:55:9f:
                    c6:4b:91:75:88:9a:f2:00:fc:f4:9b:f7:65:5a:01:
                    08:04:e5:70:60:93:7e:af:4c:0d:4f:ba:12:fe:91:
                    96:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:92:D8:7F:D7:3F:F7:80:97:83:E3:3D:1A:C4:FF:9D:96:22:7E:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b99907f7-81d6-3b94-8a5f-b54bf2cd9e05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:dc:a4:99:44:a5:e9:a0:f1:a1:b4:db:b9:6b:78:4c:b8:fa:
         e1:2e:f5:1b:97:45:fb:b2:df:2d:ea:1a:07:bd:ed:a2:bf:55:
         1a:47:b0:b0:37:9d:c5:78:4f:0a:d4:d4:a3:41:5b:06:55:b5:
         57:16:d4:36:80:23:af:65:66:bb:00:bb:b4:52:31:08:a0:8e:
         43:9b:b6:1b:4e:35:26:c2:5d:70:2e:13:4a:d3:ab:25:e3:c4:
         d2:38:2d:cd:97:69:47:cb:ef:d1:61:86:ae:f7:06:34:1d:3f:
         88:8d:27:e6:e2:87:ad:cc:69:dd:af:97:b5:01:09:ce:a7:de:
         6e:e3:a3:61:a8:af:ed:02:2b:91:f4:31:4e:a3:d9:6b:1f:f2:
         72:54:25:24:4b:fb:e9:f5:e6:9c:02:96:f9:bb:74:df:f0:b9:
         e4:ad:03:72:62:05:c3:93:4d:d0:25:99:60:1e:b6:3c:ea:be:
         16:d6:1b:08:59:d8:93:93:e4:cf:a6:76:e3:77:57:2d:bf:9c:
         98:c0:c2:7e:38:04:bf:b8:6b:83:d4:25:5b:bb:9d:2a:9b:5b:
         a7:a1:44:1e:54:80:0e:b2:c7:6b:13:94:3d:df:21:61:f7:c3:
         fe:38:82:6b:e5:f1:03:ff:6f:c4:e8:02:bc:b0:8b:ce:69:c9:
         56:6f:c7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:09:28 2026 by rpki-client