Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4b527702-a4ec-3148-8ebc-61377d76f01c.roa
File:                     4b527702-a4ec-3148-8ebc-61377d76f01c.roa (raw, json)
Hash identifier:          kuyq2RycR7b0J0hXEgPavnq62jhJw4K6I0tR2Q2w5ac=
Subject key identifier:   12:52:DD:83:66:6B:82:E8:1E:BE:CF:08:95:B8:FF:61:D2:8F:E9:4A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CB0A20CEA8E0FBB91BAE80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4b527702-a4ec-3148-8ebc-61377d76f01c.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     21552
IP address blocks:        204.101.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:0a:20:ce:a8:e0:fb:b9:1b:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=cac8c5bb-8640-4654-8d32-40fc1dfb7922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d9:6e:54:52:fe:d4:8e:e2:d0:14:d3:1f:73:
                    81:cf:e7:cb:05:0d:ed:56:f7:0e:7b:2c:10:17:f5:
                    71:2a:02:22:09:d7:12:ab:24:74:f4:8f:24:e7:bd:
                    c8:d1:61:2f:45:b0:0a:b7:a7:69:b2:6c:c0:5c:d8:
                    5a:6c:30:70:b8:01:49:dd:02:c6:20:85:b1:08:f1:
                    33:bb:8a:fb:14:af:ad:d1:44:72:45:a6:41:d9:01:
                    30:27:e6:40:8a:34:35:fe:47:48:b4:e3:47:67:83:
                    9e:ff:1c:81:1a:bb:9a:0a:f9:4e:c0:9a:5c:0d:60:
                    66:4e:1b:fa:83:6d:bb:30:c6:26:f6:aa:e2:2d:c1:
                    e6:9a:80:78:4c:7e:33:6b:e9:99:3b:a8:37:de:51:
                    9f:f4:91:d4:f9:0b:aa:ab:b8:14:34:3a:b0:84:33:
                    ff:38:66:c8:5b:0f:03:c5:21:7d:74:43:e3:20:bd:
                    04:0d:85:ce:f0:75:08:40:18:a2:94:fa:d2:2d:b5:
                    6a:30:db:a4:49:b4:cc:bf:bf:c0:82:6e:57:17:ad:
                    90:4c:49:3c:70:fd:c3:90:ee:53:98:30:f0:bd:2b:
                    a1:e1:b5:7f:8a:ea:54:d0:bf:b6:6d:1c:69:d2:85:
                    8a:e0:17:81:5b:e9:e7:2c:be:7f:ac:1a:4e:b1:ab:
                    8d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:52:DD:83:66:6B:82:E8:1E:BE:CF:08:95:B8:FF:61:D2:8F:E9:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4b527702-a4ec-3148-8ebc-61377d76f01c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:8c:c8:06:1d:6e:04:5e:96:0f:5e:1c:6b:a1:bc:ed:3d:84:
         73:0a:f2:ad:6e:2d:bf:4c:15:e8:cc:52:9a:75:15:87:76:24:
         82:d6:ad:84:ca:ac:e9:04:31:ac:55:ba:de:96:cc:83:8e:63:
         85:b5:32:5e:cc:dd:d8:25:fd:e8:bf:56:d1:2c:cf:dd:e0:c8:
         79:f2:e2:9e:0e:3b:d6:10:38:d4:b6:ad:ba:7f:cc:6f:80:ff:
         e3:de:d8:3e:85:66:4c:f5:a9:23:f0:1a:1f:67:c8:38:5e:b5:
         ae:d2:7d:f8:ab:20:2f:dc:2c:2a:0b:b9:5a:19:df:0d:5f:8b:
         23:bb:5d:8b:b9:79:12:b9:98:33:79:fa:18:49:c4:dd:07:9d:
         f8:9b:ea:33:e2:78:23:6d:cf:b2:61:f6:7f:be:fc:ea:98:9b:
         46:9f:8c:ed:78:fc:c9:7d:cd:76:5e:29:84:c0:ff:7c:52:97:
         7a:c6:b3:e5:f8:09:5d:a3:ab:96:39:11:d3:d6:b9:15:9e:af:
         c8:09:3b:53:31:67:16:9d:9d:89:30:73:dd:4a:15:ef:32:c6:
         f6:a5:0b:34:4a:5b:94:4b:42:ee:f5:0b:6a:19:bb:89:ba:64:
         e4:71:fd:ba:7e:a6:76:da:fe:b8:cc:85:9a:13:67:2b:86:78:
         48:8b:22:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:48:55 2026 by rpki-client