Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d0427d8d-8ddc-31d1-9904-96bed6dfe369.roa
File:                     d0427d8d-8ddc-31d1-9904-96bed6dfe369.roa (raw, json)
Hash identifier:          YorYaX+YnhzPQQbmiAN2uOcKTG8IuYNBtxV5LX8JENg=
Subject key identifier:   6A:B3:66:30:04:91:35:0E:35:B4:BD:CB:BF:C6:24:4D:3A:8A:B8:50
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CB09228944DC1C8D8485E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d0427d8d-8ddc-31d1-9904-96bed6dfe369.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     33017
IP address blocks:        204.101.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:09:22:89:44:dc:1c:8d:84:85:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=6dfc79fc-affd-4b39-84ac-6513d6e24003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:6d:07:79:6b:4f:9b:2e:a1:1b:2a:80:93:
                    71:81:d5:8a:b4:96:62:fd:40:7b:ff:75:11:6d:f8:
                    34:75:20:b9:7b:4d:1e:ff:d5:99:80:24:7d:6f:b3:
                    fc:65:3a:12:ab:aa:1a:61:ba:0a:05:5f:ad:aa:43:
                    fc:16:69:f3:8b:8a:6c:e6:9a:52:65:8d:9f:ab:11:
                    a7:95:0a:e1:5e:98:24:9c:cc:80:24:ab:44:f2:ab:
                    97:b1:47:47:f8:de:4b:dc:aa:e2:3a:7b:03:f1:a5:
                    8c:57:d7:39:d4:f2:94:9c:d0:4c:1c:a1:e6:8e:24:
                    7a:0c:3d:b4:f4:4c:e3:f9:d4:da:20:85:57:1d:3c:
                    c2:53:cd:c0:97:b1:77:dd:a6:49:f2:0b:b1:77:ff:
                    07:fc:70:a3:42:9c:4c:19:bf:ed:cf:80:43:1f:59:
                    7b:f7:19:a8:65:2c:52:77:10:78:4a:21:c9:71:9c:
                    60:97:07:4f:b8:c2:fc:3e:ce:4e:91:f6:6c:2b:46:
                    80:06:9f:c7:b7:b2:de:f6:67:32:40:b0:97:43:81:
                    9f:db:d4:21:1a:df:01:10:f0:25:ad:53:b8:6d:00:
                    b6:86:10:87:8e:bd:b8:fc:db:13:2d:0b:ce:39:04:
                    1b:d7:f0:f3:6b:d3:7a:d0:91:af:2f:41:f9:62:0c:
                    db:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B3:66:30:04:91:35:0E:35:B4:BD:CB:BF:C6:24:4D:3A:8A:B8:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d0427d8d-8ddc-31d1-9904-96bed6dfe369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:60:b7:da:8c:bc:92:69:09:42:b2:5d:d3:b0:41:8f:c9:c1:
         31:ef:41:88:d9:e2:20:b7:80:5a:66:98:49:2a:21:6e:ba:19:
         6d:4c:42:ba:2d:30:8f:e6:f1:e1:ae:b8:2a:d8:e8:90:0b:5f:
         b5:91:f7:43:68:72:8b:5d:92:d9:8d:bd:85:d1:cb:b2:d9:29:
         fa:c4:ed:7a:41:fc:31:11:a3:6b:a8:ba:1c:c5:de:a0:18:b1:
         7f:8b:af:81:e2:b0:0c:8d:fb:2b:9f:7f:ab:b9:7a:a9:9e:98:
         48:a7:2e:5d:3c:e0:4f:56:c7:1d:9d:e4:d5:37:19:41:6b:0a:
         20:19:99:57:0c:0d:36:09:1b:5d:74:7c:b5:05:15:24:e8:9b:
         55:22:5c:af:b7:cd:dd:9c:6c:79:a2:a3:d3:64:7d:77:32:23:
         62:81:be:f4:51:c7:bc:3d:72:44:be:0b:53:f7:76:1f:f8:10:
         24:9b:ef:0d:c1:4a:d8:52:45:a7:a4:4d:4a:70:8d:81:a2:6c:
         af:5b:20:32:1e:ef:ed:71:fa:23:7f:1b:13:13:95:5b:68:47:
         45:bb:b6:d2:68:1c:48:f2:58:f3:f7:74:a0:b5:7c:5a:ad:ba:
         66:1a:d1:59:38:51:ac:f3:e6:77:00:2d:c0:6b:cd:00:70:89:
         cb:5b:18:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:30:16 2026 by rpki-client