Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/90349ee3-733b-3652-8fd1-ab6a5e57f4f8.roa
File:                     90349ee3-733b-3652-8fd1-ab6a5e57f4f8.roa (raw, json)
Hash identifier:          RYuuf2eCJwhVB7BlfDZoelNVcKHbdTCxSGvIL8gUVa4=
Subject key identifier:   35:D9:07:56:33:58:C8:D9:4E:76:38:72:81:DC:A1:FD:5A:17:F8:71
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CA9321FD3EAAB4D78F4100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/90349ee3-733b-3652-8fd1-ab6a5e57f4f8.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     21552
IP address blocks:        204.101.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:93:21:fd:3e:aa:b4:d7:8f:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=ce438725-b09d-482a-b395-b2f862883ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4f:57:3e:f2:9e:be:64:c9:f6:75:a7:9a:b4:
                    15:9d:9f:0d:b7:e5:90:af:90:7a:6c:37:58:a2:07:
                    bc:79:6b:fb:52:a9:ba:01:49:18:7d:1e:a0:68:30:
                    bc:f7:11:e3:0b:53:5b:1d:28:58:9f:46:2b:9a:ff:
                    d6:70:5c:29:c5:18:f2:bf:1c:a6:d3:68:9d:8e:1b:
                    fb:73:2e:88:6c:b3:c1:27:8e:93:61:b4:0b:f8:e2:
                    69:4b:18:92:4b:a4:82:54:f6:54:ec:8b:21:15:31:
                    6a:02:65:08:d5:4b:5b:7d:a6:d6:61:fb:06:ec:c8:
                    aa:76:40:bb:13:7b:20:c2:50:f7:d1:ae:53:6f:06:
                    8a:9f:9e:5a:97:aa:f9:58:59:77:e7:6e:34:df:50:
                    52:34:be:56:b0:f8:da:15:87:0f:f8:aa:77:06:a4:
                    3b:a2:1b:73:16:84:c1:d2:d2:93:65:8b:83:b0:00:
                    b6:a0:e7:d8:a4:ae:0d:45:5c:52:5e:7c:03:4b:28:
                    1a:3f:fe:d0:a2:fb:5b:7f:15:f0:55:ee:ab:73:8d:
                    0d:d3:68:11:c6:dc:35:42:13:0f:8e:8f:82:a3:d6:
                    c8:74:44:ed:51:33:db:a4:33:47:23:5a:ea:e4:15:
                    97:f4:56:e4:36:03:fe:55:2d:1d:b1:76:d6:e4:3e:
                    16:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D9:07:56:33:58:C8:D9:4E:76:38:72:81:DC:A1:FD:5A:17:F8:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/90349ee3-733b-3652-8fd1-ab6a5e57f4f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:d6:0c:22:b0:73:43:29:3e:9f:66:5e:e2:ac:f5:64:ba:3e:
         6b:27:ea:8b:84:38:a6:73:c2:19:d8:f1:5f:d1:46:81:9c:d8:
         f9:32:a9:ab:f2:52:15:6d:62:a4:52:ed:20:98:fe:99:69:1c:
         b7:70:2b:a1:34:2a:3c:37:e8:c5:fc:39:8a:4d:14:d0:97:52:
         aa:05:d8:c8:95:68:ec:e4:6f:97:99:12:34:d7:92:b9:7f:33:
         e5:e9:73:95:7d:f7:d3:26:c6:e3:1e:9b:1c:ee:3a:ff:0b:e2:
         41:9f:05:ae:71:df:76:19:22:5c:ce:71:5e:9f:ae:50:ba:f8:
         b6:34:13:18:ee:30:44:36:6c:5b:ca:e0:71:f6:c1:b8:dc:16:
         11:1e:a4:6a:30:ba:e8:1f:08:5d:92:05:f5:85:ca:0f:da:2c:
         27:86:1f:bc:37:a8:4f:70:48:e9:cc:d0:02:b8:d8:c1:3b:97:
         84:8a:34:a7:b7:ff:db:aa:ba:e2:bb:6b:28:ee:00:2c:e3:ad:
         76:37:f5:5a:34:13:2c:a5:31:8d:22:47:9d:e7:d9:eb:29:70:
         56:b2:51:b6:68:e4:83:0c:82:c1:de:61:7c:03:fa:84:ea:7a:
         39:14:15:ba:27:85:c3:45:f5:8b:d1:c2:0c:68:dd:eb:b0:75:
         0d:9d:82:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:52:04 2026 by rpki-client