Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3d5e6c37-d97a-30a2-bfcd-b824afd55a3a.roa
File:                     3d5e6c37-d97a-30a2-bfcd-b824afd55a3a.roa (raw, json)
Hash identifier:          7N1RoFO+KtxVkhhnW0Lll5t7lfQNVMRSLJ5bAtg2ibc=
Subject key identifier:   36:4E:7C:C4:14:73:8F:C5:08:2E:CF:2A:DA:84:E6:5C:32:82:91:71
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CAAA42D0D344D2E4714D00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3d5e6c37-d97a-30a2-bfcd-b824afd55a3a.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     36522
IP address blocks:        206.47.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:aa:42:d0:d3:44:d2:e4:71:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=80f548d6-120b-4274-8d08-303506a72749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:dd:e7:bd:47:25:8d:16:39:57:47:18:ab:8d:
                    ac:7a:bb:cc:43:4c:0c:f9:a9:24:55:ae:ba:29:b0:
                    91:17:a4:f6:ed:ba:d5:6b:8e:95:cf:46:ff:72:43:
                    c2:8d:56:60:1b:16:db:04:d3:85:41:2b:67:40:5a:
                    93:1a:ae:05:27:d5:f5:cf:4b:5e:a9:11:52:81:2a:
                    e6:11:2f:7d:88:f6:18:b6:a5:1d:66:3e:10:68:fc:
                    2d:ad:44:18:df:68:ac:5b:40:69:c6:85:73:78:e4:
                    13:8c:c3:ee:d7:e8:c3:92:e4:0b:12:de:3c:66:98:
                    6d:b8:63:38:a4:a2:ca:29:fc:d5:9c:17:ba:aa:72:
                    55:c6:89:54:6d:76:4b:8a:96:c3:40:9c:c8:b5:18:
                    a9:21:1e:7a:41:34:c2:7b:ff:68:bc:20:58:65:78:
                    c6:55:53:63:dc:39:1c:a2:01:49:67:78:19:52:53:
                    d6:3a:78:e6:cf:4b:24:b9:a8:6f:4e:eb:0a:d6:25:
                    18:cb:bc:d3:e7:ec:b9:b5:14:aa:6a:10:90:ae:2c:
                    89:e0:cb:74:0e:96:d1:da:a5:fe:65:3c:ba:27:32:
                    78:99:80:8a:d0:14:96:b9:b5:42:fd:18:4d:c9:41:
                    78:84:f0:c9:46:c5:d5:a6:21:fb:1c:56:26:86:b3:
                    77:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4E:7C:C4:14:73:8F:C5:08:2E:CF:2A:DA:84:E6:5C:32:82:91:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3d5e6c37-d97a-30a2-bfcd-b824afd55a3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:bb:11:02:74:f7:f6:20:2b:bd:ed:80:f7:75:26:c1:65:49:
         20:ad:10:e0:1a:13:07:53:06:1c:c3:6e:c1:b6:47:e0:a3:ec:
         61:b7:58:3e:2f:57:0b:4a:80:94:18:d8:5b:5a:16:14:6a:6b:
         6d:80:45:f7:42:a2:62:3f:52:10:4c:ea:da:62:d7:7e:53:c8:
         20:53:ee:f4:a7:88:7a:db:46:5b:86:2f:68:66:0d:3c:4a:58:
         c3:d2:dd:29:c3:32:08:68:e5:3a:32:75:43:c1:ac:de:5f:b3:
         20:81:33:dd:9a:c7:2d:64:9b:50:67:fd:be:43:f1:e2:2a:95:
         8f:34:69:c1:45:21:4d:c6:36:f1:50:db:0b:71:c7:d1:9e:de:
         9f:ca:40:48:7a:a6:ab:61:e8:a1:10:ab:df:76:40:47:c8:f6:
         4b:2d:73:45:83:db:e3:ad:80:a7:da:4f:ea:75:e4:2b:fd:38:
         2e:5d:28:1f:ce:26:b1:54:a1:02:59:0c:73:47:62:f0:7a:a7:
         84:3a:d8:7b:53:60:6a:90:b8:bd:81:08:d5:be:b4:97:5a:98:
         2d:95:08:8c:bc:97:e4:99:9b:d4:b1:42:e9:79:8b:ce:dd:63:
         4a:de:62:e8:98:06:e7:a9:eb:b4:89:fd:0b:63:24:ba:85:2b:
         c1:11:97:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:46 2026 by rpki-client