Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/34423bcd-740a-3c03-a949-af49748b22aa.roa
File:                     34423bcd-740a-3c03-a949-af49748b22aa.roa (raw, json)
Hash identifier:          caF67OsABNqB6D1HJY5xq1bjRURvOp+RGLVwUr+AqBg=
Subject key identifier:   BB:E3:A9:D6:1E:13:D5:AC:AA:75:B1:9D:19:E0:59:05:6D:BD:9C:79
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CB1039874B0AC200CEB500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/34423bcd-740a-3c03-a949-af49748b22aa.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     21723
IP address blocks:        204.101.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:10:39:87:4b:0a:c2:00:ce:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=6be5bc75-bae2-484e-bb82-ffca827dc11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ae:7b:fa:cf:ae:15:58:89:87:3b:39:2c:a9:
                    e5:9f:cc:67:5d:e7:4d:ac:b0:b4:9f:43:7b:a8:e9:
                    57:0b:ac:65:ff:cb:d9:b7:d6:13:c5:16:6b:4d:c3:
                    5c:62:71:33:40:28:28:7f:cc:34:d5:91:1c:75:61:
                    62:a1:3e:f8:33:05:ca:9d:11:4c:13:54:ec:b1:9d:
                    e2:6f:03:63:86:92:5b:54:64:ed:09:a0:e0:b5:28:
                    52:cf:e0:a9:76:5f:58:7d:76:9c:e9:42:ef:01:dc:
                    db:38:f9:d1:51:91:12:e6:ce:e3:dc:07:2e:fc:e7:
                    fd:a1:3e:76:c5:2a:6b:2d:43:af:7b:62:17:28:94:
                    27:3b:e9:4e:45:ab:49:22:a9:31:cd:1f:40:4c:a6:
                    0f:bd:89:3f:89:0d:06:bd:aa:49:a3:c6:ee:ca:ad:
                    97:30:58:01:ec:6f:bf:2a:d6:63:de:3e:cf:ce:69:
                    72:59:e8:94:56:e8:4c:1b:d5:eb:fd:13:d1:be:69:
                    3c:6f:58:19:37:55:f1:38:ff:98:d2:6e:34:16:f5:
                    bc:2e:a1:dc:2c:41:03:bd:5f:64:fb:25:0c:73:3a:
                    6d:66:2a:16:88:92:5e:5b:bf:92:04:c6:73:06:e0:
                    ec:5c:31:f2:bc:02:13:a0:1e:6a:26:0a:10:c7:9f:
                    e5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E3:A9:D6:1E:13:D5:AC:AA:75:B1:9D:19:E0:59:05:6D:BD:9C:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/34423bcd-740a-3c03-a949-af49748b22aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:09:79:1e:e0:e1:e8:25:aa:88:a2:b4:61:e5:90:e9:df:64:
         f7:37:b8:e1:c7:d0:17:d8:f2:2c:0b:08:7c:83:e2:63:9f:d4:
         42:04:99:39:e8:d8:ec:02:77:41:94:9d:3a:ac:3a:16:5d:d2:
         28:51:90:5f:af:08:11:11:70:c9:0b:69:8d:48:b5:ff:7f:1a:
         6f:0e:7e:aa:e0:b3:d8:59:3d:7d:e5:d4:1f:54:f3:99:ff:70:
         55:e9:c8:2e:39:b9:44:23:a6:5e:df:34:1c:24:df:89:37:40:
         fc:b5:87:eb:36:1d:86:78:92:31:8b:aa:04:c1:13:d5:c5:3b:
         bc:cc:bc:df:1b:0d:10:93:57:d9:1e:36:22:69:51:8f:e4:c2:
         4f:94:4f:a9:3f:69:eb:9b:ec:2f:e1:8a:52:11:b8:67:47:d0:
         58:0f:0d:9a:31:60:79:02:8e:a1:ff:6f:a0:ca:69:cc:b4:c8:
         54:fd:f7:45:ab:11:c6:2b:2b:54:2a:dc:e1:62:98:1c:14:a8:
         c9:75:b9:26:fd:f8:f8:2a:90:5b:ba:c0:39:25:18:ba:59:7a:
         15:db:6a:17:56:93:22:07:f8:e5:8b:8d:3e:a2:87:f0:17:12:
         9f:c5:33:a3:4e:b6:ef:d4:be:74:fa:2f:78:89:15:6c:79:b0:
         7e:93:88:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:05:29 2026 by rpki-client