Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/385efea8-9f86-3a21-a1cb-e8d2aafb6885.roa
File:                     385efea8-9f86-3a21-a1cb-e8d2aafb6885.roa (raw, json)
Hash identifier:          CjX+Nlja0hcAOGq7Z9Uj2iUh1e5YwFtEyW0XunQ63Fw=
Subject key identifier:   12:8D:04:C4:22:45:AD:F1:3D:07:BB:82:31:72:A8:C5:28:81:E3:D6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CB0C245D0463B469D0DE00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/385efea8-9f86-3a21-a1cb-e8d2aafb6885.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     577
IP address blocks:        70.48.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:0c:24:5d:04:63:b4:69:d0:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=0d3eed38-8c99-4790-8bb2-97d039dada1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ab:5d:4e:4d:f0:c0:20:dc:26:9a:77:28:65:
                    12:2a:01:96:e5:06:82:36:68:e3:46:bd:9a:ac:51:
                    28:a6:5c:ed:69:99:a5:86:e0:01:d6:57:03:d4:58:
                    2a:10:04:c4:3a:49:cb:6e:f8:1b:e1:3a:af:12:63:
                    cc:43:0c:94:6d:27:c3:0a:ae:84:21:0b:c8:b1:1c:
                    ba:4e:57:80:53:13:8f:0b:59:93:b9:4c:a4:1a:ec:
                    58:31:2e:e5:7e:5e:2a:90:5f:c3:5e:f7:49:76:be:
                    66:d2:ed:b0:74:60:59:05:6a:bd:6d:f7:1d:a8:7c:
                    ca:54:42:72:4d:a7:8e:c7:02:91:50:b8:54:59:35:
                    55:62:32:68:79:0f:18:20:eb:2a:3e:49:03:b0:55:
                    92:32:9e:9a:33:68:c5:ee:f3:92:4b:07:dc:5b:65:
                    c1:5b:59:1e:83:db:60:14:ce:28:08:a7:ba:71:a3:
                    bd:33:27:52:03:1e:9b:a5:bb:f5:dc:b7:6d:45:7d:
                    e5:9b:63:1a:7a:37:f2:4e:05:e3:a1:b0:c6:21:bf:
                    e8:33:3f:58:f3:ed:27:21:c9:a5:d2:21:68:bd:e3:
                    56:5a:6e:3a:05:a0:4f:1b:8b:a3:d3:3d:2e:58:28:
                    17:2b:95:3f:3d:90:6d:78:81:09:56:10:58:e2:c6:
                    0f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8D:04:C4:22:45:AD:F1:3D:07:BB:82:31:72:A8:C5:28:81:E3:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/385efea8-9f86-3a21-a1cb-e8d2aafb6885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.48.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:c6:11:98:bc:d2:74:b6:1a:94:d0:cb:91:cf:65:57:14:a5:
         4d:13:cb:91:93:09:de:e0:09:76:fb:f2:0b:ed:da:c3:53:1c:
         34:ed:cd:bd:6f:86:06:b0:f3:7f:f1:98:a6:89:d4:90:3c:e9:
         d9:d8:ec:03:c5:a4:26:a3:ac:a3:91:b2:78:04:36:06:16:31:
         2a:f9:40:ef:97:ec:17:10:e3:41:c4:1e:71:e9:dc:16:79:57:
         d3:1e:46:e0:ad:aa:1d:05:12:bf:b2:5d:d2:81:6c:90:dc:81:
         d3:5b:c6:75:26:2e:5e:ac:70:bb:2b:13:72:17:b5:5a:c7:ce:
         87:f3:94:40:17:70:02:5d:3d:b9:81:6c:8b:49:27:70:35:dd:
         a8:86:dc:09:14:fe:d2:34:1c:4c:ce:1d:94:fc:f0:b1:56:9a:
         13:61:cd:ca:10:98:4c:49:fe:29:e9:63:18:f6:96:ef:04:99:
         1b:0d:fb:a2:9b:57:19:e1:d2:67:ee:0a:90:70:cb:15:20:b8:
         1f:0c:76:2f:fe:0a:03:be:5f:5b:58:4e:ac:c0:fc:33:ae:ec:
         15:78:81:77:27:84:40:22:21:3e:23:56:b5:1c:9a:b3:fd:e4:
         66:be:89:17:30:17:54:1d:c8:df:7d:74:da:85:4d:d9:d7:78:
         4f:5f:07:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:40:48 2026 by rpki-client