Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fcc9d44c-18bf-3a54-b74d-04919f63f462.roa
File:                     fcc9d44c-18bf-3a54-b74d-04919f63f462.roa (raw, json)
Hash identifier:          NSxvhfNCFlCMkpeq2xUjjHqcauk2t0QZ/634LBgtmXg=
Subject key identifier:   D6:F1:0E:4E:E9:D7:54:A5:95:4C:D7:65:D8:EB:36:A5:A4:CA:83:E1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06723A2FA6E240D0B5EACF80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fcc9d44c-18bf-3a54-b74d-04919f63f462.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     577
IP address blocks:        198.235.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:3a:2f:a6:e2:40:d0:b5:ea:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=9261f8dd-7d78-4ce8-a33c-5e89d0ad0784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:77:e4:06:10:85:e9:3b:b0:49:e6:b8:13:91:
                    18:5a:98:c7:1c:92:97:a5:bb:a4:cf:e7:0c:1c:c8:
                    b5:1e:7d:89:25:86:8e:9f:10:a8:a4:53:5d:35:e7:
                    f9:43:9a:a8:f9:fb:21:80:be:3f:f6:8b:93:dd:3f:
                    75:6a:7b:66:e1:47:0b:f8:1d:ab:fc:d1:48:44:23:
                    5f:ee:1d:7b:24:af:e3:07:1d:1b:5b:08:b7:9e:79:
                    6d:d6:0c:bd:c2:5f:5e:69:b7:a1:ca:07:2e:a4:ab:
                    05:1f:a5:3f:35:bb:22:7f:96:42:67:62:ce:be:2a:
                    7e:d0:40:fe:30:88:2e:b5:6a:12:cd:d5:b4:a5:fd:
                    c8:36:2d:ce:c7:90:c3:9c:86:73:f4:d7:35:90:d9:
                    c0:29:b3:1f:b4:f4:52:2c:28:a7:a2:5b:4e:93:4b:
                    ba:5f:0a:fd:72:71:62:8e:47:15:47:ec:8b:be:e2:
                    29:af:bf:bb:dc:c6:78:3c:77:d2:68:71:aa:78:b1:
                    c9:0c:af:1c:95:08:ad:7a:ab:a2:33:f1:01:3a:15:
                    c5:4a:b9:57:ca:5b:54:69:15:dc:c8:68:46:0b:12:
                    04:66:18:73:5f:fd:44:f6:16:8d:7e:83:3b:69:68:
                    1e:62:b3:a7:ec:93:0a:bc:5f:2b:3c:55:89:25:da:
                    b7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F1:0E:4E:E9:D7:54:A5:95:4C:D7:65:D8:EB:36:A5:A4:CA:83:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fcc9d44c-18bf-3a54-b74d-04919f63f462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.235.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d0:e0:83:bc:6f:94:bf:1f:ae:dd:47:53:e0:f4:ae:c2:84:
         f5:e5:1d:c6:e9:22:8e:ab:f6:2c:68:e2:fd:c9:fc:d6:88:22:
         89:81:87:f3:d6:23:32:aa:62:7e:f8:e7:d9:36:2c:dc:2a:2a:
         68:d4:41:cc:b3:d3:b1:a7:ea:a4:52:6e:97:24:76:e3:86:fe:
         65:74:5c:a8:c4:cc:29:ce:62:4a:46:c0:e2:b8:a0:fc:86:7b:
         72:7a:e1:f0:32:d8:41:3d:d4:52:5e:9f:34:b8:e6:4d:88:33:
         8c:59:3c:3c:b9:08:2a:b3:cd:d9:52:ce:a5:9d:6f:0a:3a:04:
         4d:65:b0:30:e3:30:d4:bb:84:b6:5d:4f:0e:91:be:43:ee:d9:
         3a:31:9f:0e:ea:f1:8a:75:f5:40:df:7c:f8:fc:29:b2:52:9d:
         b0:28:81:24:54:6d:41:7e:9c:24:f5:0b:a6:bc:29:33:57:ef:
         71:3d:e9:b2:7f:c4:d8:50:8b:a9:2e:04:91:de:48:dc:f0:fa:
         28:6a:3d:81:34:fb:99:46:f2:c4:67:30:61:f9:2b:72:71:cf:
         80:7d:ea:52:87:9a:7c:41:d8:85:07:45:49:ed:35:7f:e8:47:
         64:f2:87:8f:e0:ea:9d:d3:f4:54:e4:fb:62:b5:24:19:80:d7:
         f2:a2:d5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:40:00 2026 by rpki-client