Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67477eed-64e1-395b-a913-8b8a438ebac1.roa
File:                     67477eed-64e1-395b-a913-8b8a438ebac1.roa (raw, json)
Hash identifier:          aK8hSpnukQEGETiemutwh64f/RherKpQZxx9aGdXuhQ=
Subject key identifier:   98:B1:CE:87:A3:52:AE:16:0B:AB:5D:74:10:AD:0D:15:73:C0:DE:C0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CA93DEA4CA5658E52FDB00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67477eed-64e1-395b-a913-8b8a438ebac1.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     36522
IP address blocks:        209.71.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:93:de:a4:ca:56:58:e5:2f:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=3c5db6a7-845c-4358-b360-4543b5eed605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:86:23:ef:93:88:1f:45:92:59:21:ba:4d:df:
                    08:3c:35:9f:97:4c:22:3f:6f:a8:5e:e8:f2:35:bd:
                    42:ff:6e:a2:f9:37:7d:cd:b4:ab:a7:9d:84:3d:3f:
                    c9:da:e5:e0:40:64:a0:da:a2:1f:b1:26:5c:92:b4:
                    07:f9:0a:02:80:a3:f7:26:8b:df:88:74:d9:da:1d:
                    9f:87:3f:9d:82:b5:77:42:c0:38:c3:44:0b:1b:bf:
                    62:0d:8b:37:0c:08:ff:4f:48:62:c0:2e:20:dd:91:
                    2e:1d:f9:73:2e:f3:9b:ec:42:1d:47:bb:26:e4:d3:
                    1c:03:54:d6:ae:86:79:3f:25:be:58:68:71:35:72:
                    a7:c4:a6:6e:fc:90:22:c1:69:7e:a9:7c:fd:3a:33:
                    00:31:77:d4:8d:f6:26:d4:63:28:16:a4:40:41:16:
                    7e:55:29:a5:39:f3:52:a0:93:11:7f:7d:fe:2c:a8:
                    f3:61:34:82:22:93:c1:36:be:b7:d3:99:7e:36:f9:
                    c5:f9:9f:a9:60:f2:39:ff:08:a1:50:b1:15:9a:71:
                    83:77:91:e7:0f:8d:a9:3c:05:41:1d:8c:5c:3a:0a:
                    cc:61:ce:9b:c9:ab:6f:0f:ef:fa:b3:d5:c5:11:c3:
                    7b:72:96:cc:c7:85:ab:a1:00:b1:55:d1:7f:d0:e2:
                    61:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B1:CE:87:A3:52:AE:16:0B:AB:5D:74:10:AD:0D:15:73:C0:DE:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67477eed-64e1-395b-a913-8b8a438ebac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.71.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:e8:cf:bd:a0:bd:c9:4b:9e:4a:6b:a0:b4:c1:42:97:c8:7d:
         30:61:d7:c6:f3:b6:bb:7d:12:2c:26:00:ca:1a:5c:83:e9:1c:
         85:31:de:0b:5f:b4:8a:2f:9f:8f:13:d7:de:5c:de:bb:9a:04:
         05:9b:f0:39:01:88:f0:d3:01:1e:0e:62:63:9b:54:21:9b:23:
         66:89:ae:ce:f2:1b:14:6a:44:c3:4f:58:02:eb:e9:d1:16:80:
         66:63:21:b0:44:48:24:4a:3d:cd:f1:2b:60:a6:b9:c8:5c:49:
         66:50:26:26:2a:f0:e7:55:98:40:11:be:1f:7e:ec:e0:37:37:
         11:d5:06:fc:fc:ef:d6:99:3d:13:23:1f:63:6b:4a:fa:a8:82:
         29:f5:f0:db:71:e0:97:d3:23:be:22:51:8d:d4:ff:3a:29:6a:
         91:17:d8:7a:d1:35:1f:a7:49:fc:a0:11:f8:13:06:c0:cb:9b:
         79:df:5f:2c:25:6f:b6:29:b4:77:0c:9d:22:4f:a3:d9:1b:ce:
         cd:66:7a:c2:e0:25:9c:77:5d:33:01:ce:d3:c8:c7:9c:f5:6d:
         c6:56:e3:f1:96:f5:b7:d6:67:19:64:a8:49:a0:5c:1b:8a:f8:
         fc:75:f0:fb:24:33:30:9c:e3:88:f8:62:60:99:be:00:59:f6:
         33:19:96:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:50:56 2026 by rpki-client