Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/458aa676-e15f-387e-993d-16f00f08f98c.roa
File:                     458aa676-e15f-387e-993d-16f00f08f98c.roa (raw, json)
Hash identifier:          O1+w+H9NsgQCWNkX4Ept4Gl4R9Kzty2sz7bhcROmOi4=
Subject key identifier:   2B:7B:E7:03:6B:7D:D1:3F:7A:70:FA:92:93:86:01:10:11:8A:92:BD
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CB0D2548E0D1EAC32FCF20
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/458aa676-e15f-387e-993d-16f00f08f98c.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     15321
IP address blocks:        216.209.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:0d:25:48:e0:d1:ea:c3:2f:cf:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=2d717efb-c917-4516-b6c2-8e4e3686c293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:08:24:66:81:fa:af:a7:d3:e0:56:6f:8e:db:
                    7c:ee:25:24:1d:a8:a7:78:de:0e:f9:d6:60:f4:34:
                    7d:9a:8a:d8:62:05:b5:fc:d0:a0:eb:a9:db:2c:eb:
                    b4:13:c1:77:8a:36:20:28:9b:68:8c:e9:63:1b:6b:
                    b4:0a:7e:77:8e:c0:00:b5:f4:84:71:2f:c0:ee:ce:
                    b3:33:bc:b0:d3:7d:c7:41:20:e9:14:4e:f3:51:b1:
                    1e:70:ff:09:33:96:ab:27:0b:fa:61:63:c4:ab:f8:
                    a5:1b:11:98:25:32:5b:56:53:ce:85:34:14:23:34:
                    7f:b3:0f:81:aa:60:b4:b9:3b:40:ba:54:d0:7d:79:
                    2a:58:97:9d:6d:7a:96:48:f4:66:f4:bd:5c:ce:03:
                    16:72:c5:08:0d:c6:08:3c:7f:df:e7:dd:64:bd:4f:
                    c0:a5:21:19:0b:19:49:52:b0:b5:f2:0d:2e:87:23:
                    7c:e1:23:91:1c:36:a1:c8:a3:36:9b:b9:5c:1a:52:
                    f3:6b:45:57:f0:5a:c2:1b:65:85:85:e1:6a:ff:25:
                    4b:3f:ef:22:6a:e5:66:a2:93:f5:1c:37:c2:0d:52:
                    62:2f:13:3f:93:70:2e:25:ef:ca:a6:2d:29:25:5c:
                    6d:9e:8a:bd:c1:7c:97:f7:c7:7b:a4:7e:3c:20:0f:
                    a9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7B:E7:03:6B:7D:D1:3F:7A:70:FA:92:93:86:01:10:11:8A:92:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/458aa676-e15f-387e-993d-16f00f08f98c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.209.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:0b:47:b3:fe:94:d0:ce:8c:59:65:5d:cf:35:e2:2b:d2:ea:
         83:ba:6c:40:ac:3a:6e:04:8b:d2:71:fe:df:a8:17:d9:73:c6:
         f6:38:39:8f:28:f9:71:82:31:2e:5c:31:be:42:14:08:b9:fe:
         e1:86:21:0e:0a:a8:4f:12:a0:0f:7d:3f:40:ce:48:fe:32:22:
         45:68:71:3d:8c:c5:af:3e:0e:ba:05:59:7a:a2:91:4d:c9:d3:
         0a:57:14:2f:db:2f:37:51:8d:e1:2f:61:ab:69:97:c7:ad:04:
         a5:90:d2:f5:1f:11:55:6f:ea:8b:ca:2a:8c:5d:0d:7b:b5:6f:
         29:2f:c4:e3:0a:f2:ce:ff:64:a2:5b:b6:58:69:eb:14:7c:e7:
         0c:71:eb:76:c6:d7:dc:d1:13:fe:42:58:bf:6d:aa:1d:82:83:
         c7:8d:cb:5a:23:6d:2f:4d:a1:0d:b6:b6:71:67:93:14:c4:21:
         40:f4:8a:cb:29:42:32:e5:36:f1:d6:80:96:00:72:69:bd:3e:
         c7:42:ba:05:dd:31:6e:a8:be:9e:03:73:93:20:11:b1:43:03:
         3c:72:7e:59:1d:28:58:ed:6f:6f:ff:21:6f:26:4e:7b:4d:46:
         61:c8:d5:ed:80:b9:a2:45:7f:83:2e:fe:cd:3b:f0:c1:27:ec:
         bb:7e:45:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:10:19 2026 by rpki-client