Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c2afc958-d903-3957-9b3b-b354700fec3a.roa
File:                     c2afc958-d903-3957-9b3b-b354700fec3a.roa (raw, json)
Hash identifier:          2Y+g02qg9A85I4dt8DUUfKTwZV87vChGDqbToV1hEBU=
Subject key identifier:   A3:9F:7C:A9:1A:2C:C8:5B:4D:04:1C:3D:64:71:15:6C:16:F0:76:15
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06729A1169E954E5A537C0C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c2afc958-d903-3957-9b3b-b354700fec3a.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     36522
IP address blocks:        67.69.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:9a:11:69:e9:54:e5:a5:37:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=76eb288b-69f9-429d-9ff9-d9f92e4196d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:76:34:c9:64:4d:f0:88:05:23:e6:59:7e:dd:
                    7b:66:d9:cf:3c:bf:4b:8e:f9:e7:1b:24:66:28:8d:
                    2b:29:b4:c3:48:4a:30:c9:a7:fe:36:9c:79:9f:26:
                    2f:3a:96:4c:5d:82:92:23:56:21:43:24:2e:32:15:
                    23:f1:ec:ad:6f:02:38:91:35:63:63:55:64:23:6a:
                    44:d9:1a:cc:e1:25:69:e4:68:30:69:74:26:45:9c:
                    cb:ce:b5:10:0e:73:32:21:a5:1f:9a:ae:d5:83:d2:
                    f9:fe:6f:5f:00:8c:6b:25:2d:9c:cd:f3:7f:45:e3:
                    11:43:e7:bd:51:09:23:e4:02:93:6a:5a:9b:c6:c1:
                    74:a5:12:23:be:e7:fd:4c:70:d0:56:4e:50:49:64:
                    e6:07:82:6b:ec:fb:14:46:e2:f2:a3:f8:d1:eb:ce:
                    89:72:bf:18:cc:0a:bb:bf:0d:bd:d0:52:9e:b2:ee:
                    04:1a:dd:cc:17:88:75:25:9b:2c:2e:60:75:d8:38:
                    a8:3e:b9:69:24:10:a4:d8:7e:df:d2:d8:89:81:76:
                    10:b3:2d:17:33:b6:0f:7f:7d:4f:3a:d6:94:4f:e4:
                    91:21:de:35:73:92:37:d4:36:54:b6:ad:d2:b6:67:
                    b8:43:54:49:0c:95:3a:7a:1e:9a:fe:0e:61:af:0d:
                    89:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9F:7C:A9:1A:2C:C8:5B:4D:04:1C:3D:64:71:15:6C:16:F0:76:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c2afc958-d903-3957-9b3b-b354700fec3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:10:cd:f5:f5:9d:f0:e7:45:85:6c:b2:ad:7d:bb:e4:bb:7b:
         58:7f:a3:a6:ef:ee:67:71:f3:7b:8b:3f:5f:8c:51:80:13:bc:
         6f:05:00:46:b5:1c:50:d1:fc:93:e4:b0:1a:57:ed:fc:74:ae:
         8e:8f:4e:45:63:2d:be:0d:b9:30:8b:ab:b4:7f:10:94:64:78:
         16:0d:0f:70:84:e7:53:6c:c2:eb:9d:7c:55:bf:28:8a:af:ca:
         7c:6f:fc:84:e1:2b:45:19:ed:0d:de:e9:72:a0:7d:90:91:dd:
         5d:cb:f6:9c:33:aa:68:f3:57:99:90:a1:b9:03:3f:c4:d8:7f:
         09:03:b9:cd:25:92:8a:2d:da:10:75:56:d3:c4:fb:90:56:fa:
         99:bd:3a:f6:0e:07:9e:19:09:30:78:eb:d6:56:83:1b:b5:81:
         57:f5:74:73:7f:9c:a1:fb:77:f3:64:c6:06:fa:29:dd:79:6b:
         de:4d:ff:a2:21:05:26:61:d6:1f:94:25:e9:5e:03:ed:1e:8c:
         2f:29:6b:66:02:68:35:2a:e5:41:22:a2:a0:09:f5:cd:20:ac:
         c9:10:6b:d9:37:e9:22:4b:72:ba:1a:2d:8a:91:b6:2f:9b:3d:
         3f:c3:78:d2:25:3a:58:42:34:1f:0c:07:00:d1:f2:5d:bf:9f:
         88:cb:4a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:16:51 2026 by rpki-client