Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/68603bfc-a07e-3a1d-aaf3-a6f9bdd4a168.roa
File:                     68603bfc-a07e-3a1d-aaf3-a6f9bdd4a168.roa (raw, json)
Hash identifier:          Ft9/wH6D9R1bZkZ5WTADFoia61racEnnUaP2x3ByvLQ=
Subject key identifier:   A8:B2:97:82:7A:39:02:B7:1D:3B:48:65:99:F8:20:3D:D4:7C:EB:FC
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CA8E2A366BCD0314143280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/68603bfc-a07e-3a1d-aaf3-a6f9bdd4a168.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     577
IP address blocks:        204.101.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:8e:2a:36:6b:cd:03:14:14:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=e0bc5b3c-3d09-410b-91d1-9caa9797d44c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c2:27:56:e9:b2:0f:63:2b:18:89:42:6d:06:
                    e1:df:89:d7:e9:6d:46:fc:13:fb:6d:40:2f:87:3d:
                    ac:04:79:d0:d2:b3:db:01:21:6b:af:ff:7c:c9:ae:
                    8a:ae:52:5d:92:44:0d:30:86:c8:0d:18:d1:db:fe:
                    e3:2d:16:61:00:2a:11:97:1d:24:33:60:45:d0:97:
                    f1:79:bd:a0:8f:74:eb:80:9e:fe:99:55:42:b4:64:
                    2d:6f:19:82:fd:00:f2:6b:54:f6:13:e5:91:3c:ed:
                    33:0e:21:97:cf:fa:bb:a6:6b:35:1d:a3:19:ad:6c:
                    5d:41:14:59:4b:a2:11:89:72:ce:67:df:6a:83:be:
                    34:ce:ec:fc:7e:c4:a4:e5:6f:c2:18:78:3d:bc:ba:
                    7b:5c:ce:9f:a0:3d:0e:7d:fa:14:77:3d:01:e0:26:
                    23:40:4b:0e:7e:70:c1:d6:92:ba:ac:94:eb:d9:b4:
                    93:ba:34:26:b0:12:3e:e4:73:52:ca:18:d2:e1:79:
                    a6:5a:df:3f:91:32:2f:09:1c:3c:21:b5:f3:20:aa:
                    66:37:f4:5b:6b:cc:d9:a4:9c:3d:3c:4f:25:b3:77:
                    8a:1c:81:21:e4:0a:ca:f9:39:35:1c:a7:62:65:d7:
                    9e:18:09:3b:c1:f4:b7:df:d9:4b:d4:0d:a7:d4:08:
                    d1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B2:97:82:7A:39:02:B7:1D:3B:48:65:99:F8:20:3D:D4:7C:EB:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/68603bfc-a07e-3a1d-aaf3-a6f9bdd4a168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:40:6b:84:a1:44:10:ef:69:9e:54:62:7d:84:a2:9c:30:2b:
         9c:1c:7f:91:1b:25:75:84:1a:84:2d:90:2c:8a:7f:ac:f1:5c:
         f6:c8:cb:38:7f:e1:91:3e:46:7d:38:25:84:30:40:74:0b:0f:
         82:fd:e7:0e:32:f0:0a:4d:14:b9:bf:7d:41:56:7e:c3:68:d2:
         4d:46:91:56:13:b3:73:79:1e:ff:83:7a:3d:c5:ba:a9:47:74:
         d5:83:69:73:c0:1c:03:ed:ea:4b:71:d8:42:33:c6:86:14:cf:
         77:42:bf:c4:32:05:f3:83:50:ac:ff:2d:9f:5a:32:a2:f4:2e:
         c6:6c:33:17:59:cd:f3:9d:0c:94:5d:27:97:ad:2d:70:a1:94:
         9f:69:09:17:0a:62:d8:e0:10:7d:94:b8:ae:ca:78:8b:db:de:
         9b:01:73:d3:2e:ae:cf:5d:85:61:9d:39:f9:3b:e6:07:5d:62:
         a9:fc:63:91:fa:8a:2b:74:15:65:05:36:42:2e:a8:5b:ca:d0:
         a1:0d:0e:50:72:9b:00:c1:7b:88:c2:cd:c1:04:d9:f8:79:f9:
         24:a3:7a:9b:d7:c3:cc:76:e9:e0:a3:9a:c6:5a:30:39:f7:2b:
         f1:78:47:5c:f8:21:59:5c:6d:dc:f6:21:ef:ff:3c:1e:7b:8d:
         0c:2e:f6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:38 2026 by rpki-client