Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b3a586a3-f491-3d55-a1f8-d5062ac35a3d.roa
File:                     b3a586a3-f491-3d55-a1f8-d5062ac35a3d.roa (raw, json)
Hash identifier:          +JN6GOP+CNt9PD14l4EtjyO8mwznKKE7iMRVuv15Ur8=
Subject key identifier:   DD:9D:43:C6:B8:07:9F:BE:EB:25:D8:6B:BE:BD:C5:1E:45:AC:62:B0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA9F70FC3D7138C6DE1C70
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b3a586a3-f491-3d55-a1f8-d5062ac35a3d.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36522
IP address blocks:        204.101.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:9f:70:fc:3d:71:38:c6:de:1c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=90256ce6-79d8-49eb-9c15-f069664a316a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ad:74:c6:bd:d3:0a:3f:d0:21:97:d5:0b:cf:
                    17:23:4b:bf:85:3c:ab:64:ea:c5:80:0b:8c:80:2e:
                    f9:80:59:f2:e1:f0:b1:79:0a:cd:0d:9c:5d:7d:3c:
                    53:08:0a:bc:d6:9e:10:97:a8:f3:33:7b:fd:d9:df:
                    6c:d5:59:b5:1b:bf:fe:47:93:a3:31:64:26:0c:5e:
                    c3:95:14:b1:91:ef:b2:f9:48:0c:7d:ee:8f:79:59:
                    58:d3:88:ba:c7:84:f6:55:f6:0a:12:5b:4a:53:5c:
                    88:e6:11:18:1d:4f:4c:a2:e0:9f:39:50:de:13:47:
                    eb:3e:00:29:44:a3:54:48:af:88:65:2b:33:96:66:
                    08:1e:19:ec:6c:db:fe:91:a5:c8:34:cd:a8:02:c0:
                    6f:f0:7e:c4:7f:81:80:0a:ef:76:92:a9:86:36:e4:
                    16:d9:92:8c:ab:0e:e7:bb:76:fe:2f:37:8c:c0:f1:
                    2b:a8:d2:77:12:f1:f5:f3:81:fb:e4:5c:1b:7b:c5:
                    be:3f:b7:a9:70:e7:41:89:3d:c3:69:57:1b:85:2f:
                    71:7e:b2:77:72:c2:b7:de:14:59:1d:d6:a7:8b:a7:
                    39:e5:2d:b0:ee:b8:e1:49:0d:f1:72:67:e0:5b:23:
                    0b:60:c8:70:d8:8f:3c:c5:93:dc:80:2d:45:08:8b:
                    7f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9D:43:C6:B8:07:9F:BE:EB:25:D8:6B:BE:BD:C5:1E:45:AC:62:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b3a586a3-f491-3d55-a1f8-d5062ac35a3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:07:31:62:3d:86:de:87:72:39:cd:8d:55:28:29:b7:d3:88:
         b0:1d:23:19:cb:1a:72:90:53:06:9e:77:bd:06:43:a8:b5:1a:
         2c:d0:e7:20:4b:4d:a0:f2:bb:73:50:e1:e5:fb:4a:44:d2:de:
         bb:5a:fd:6a:89:ec:77:f6:63:9e:4d:c8:b6:a3:23:c3:bb:cd:
         38:78:bf:47:18:6f:21:0d:d1:6e:42:04:7a:aa:26:51:fe:9b:
         98:9b:94:bf:16:24:6b:9b:8d:47:11:bd:08:2c:1f:62:90:9c:
         00:98:a3:c5:30:79:05:28:83:b3:dc:cd:77:4c:39:d8:1b:d9:
         46:8f:55:53:8e:1d:12:9a:d5:0f:20:e0:b7:62:61:81:42:c0:
         82:29:33:59:b8:38:12:6b:17:c6:9b:20:06:68:95:a4:21:36:
         81:72:b7:e7:9a:96:d9:75:fe:52:93:a7:ab:7d:0f:fe:4f:3c:
         67:6c:53:08:68:fb:f3:e9:dc:25:89:5e:48:73:4d:2f:c8:c8:
         fa:d2:d5:67:3e:74:99:cd:eb:39:e7:71:dc:58:86:30:93:12:
         64:83:e6:61:a2:5e:5f:23:f8:76:05:cf:c1:43:c8:19:43:52:
         9c:8b:3e:92:59:07:f0:d7:d8:ec:50:de:e4:6f:3d:cd:ba:fd:
         b5:21:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:52:55 2025 by rpki-client