Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ff00605f-2d82-339c-9b68-74b4486d5308.roa
File:                     ff00605f-2d82-339c-9b68-74b4486d5308.roa (raw, json)
Hash identifier:          bGGrsc1xdSK+iazevaWGsAzkn9jiNxDzZuFmunIeraU=
Subject key identifier:   F4:34:56:97:BD:90:95:F7:43:60:18:DA:8C:22:7E:85:48:06:A5:7B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CA9749965D6021B1A77100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ff00605f-2d82-339c-9b68-74b4486d5308.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     10965
IP address blocks:        205.200.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:97:49:96:5d:60:21:b1:a7:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=a46a3e65-636a-43e9-89f8-c0a2b2d290fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b8:84:ab:bd:e7:d2:9c:a1:75:9b:7c:c7:5c:
                    aa:6d:0b:b8:f6:c6:24:b3:3d:7c:5b:e8:81:8b:b0:
                    cc:aa:94:78:1c:82:1f:4c:23:f4:c7:d4:05:bc:26:
                    8b:5c:58:9b:1f:b2:74:b5:5b:7b:95:6b:1d:51:66:
                    9c:07:de:48:2f:1c:d9:fb:2f:2d:56:4c:8c:d4:9b:
                    6b:91:72:f8:a0:ca:c8:47:61:ad:7f:30:ea:84:c6:
                    cc:d3:69:14:9c:55:ad:de:b9:ff:c5:79:fb:85:93:
                    67:e5:fa:3a:f3:84:8c:19:92:dc:69:cb:94:99:f8:
                    c7:56:5b:2b:3d:af:74:2e:80:df:1d:b9:c3:37:24:
                    66:1a:5a:63:a5:26:f9:58:c9:a4:70:36:eb:34:08:
                    05:c3:a9:77:72:5a:50:7a:40:b5:1c:b7:8d:d7:df:
                    f1:55:b2:0f:61:84:1a:e5:99:ab:b1:f6:c8:b8:ab:
                    b6:2a:34:72:af:ef:59:c2:e6:b4:3e:d8:e2:b2:c4:
                    83:46:bd:6c:ea:2d:b1:fd:bd:99:a8:b9:10:02:07:
                    aa:6b:d4:89:27:62:f5:16:ab:ba:0a:17:d9:5e:d3:
                    81:d7:ce:89:df:71:97:44:97:0a:1e:ba:a5:15:bb:
                    2a:b2:59:aa:4a:47:db:02:7e:e5:53:c1:11:49:81:
                    d2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:34:56:97:BD:90:95:F7:43:60:18:DA:8C:22:7E:85:48:06:A5:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ff00605f-2d82-339c-9b68-74b4486d5308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.200.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:cc:91:28:b2:a8:7c:20:25:4d:3a:0f:8f:5c:64:d6:2f:e1:
         3f:7d:5a:51:3c:6b:38:fe:6f:ff:d8:22:ef:67:37:69:53:0b:
         0a:ad:10:e9:76:ec:48:51:5c:c7:48:64:04:8a:29:43:e9:9b:
         78:e3:21:6c:02:15:d4:6c:23:4a:d2:6c:91:4d:4a:6a:f4:55:
         86:71:07:f1:c6:52:04:f5:4a:31:02:2b:f5:e5:65:53:c9:6b:
         70:e8:08:0d:5b:43:bb:dc:c2:76:cf:73:9e:7a:7b:88:13:1f:
         6c:b5:20:eb:fc:6e:8f:60:7c:2a:b1:df:0f:90:b0:63:20:07:
         aa:78:3c:b7:66:20:b4:85:1a:a6:a9:d4:54:0d:22:da:76:15:
         7b:af:d1:70:f9:07:55:ce:ca:6e:64:25:0a:f0:58:5e:d7:41:
         57:d3:43:ad:4a:4f:8d:5b:ff:52:7c:1d:14:95:72:9f:8d:fe:
         ac:62:55:1e:3e:6e:ec:db:f8:78:db:6d:14:23:75:91:bf:bb:
         2e:ea:44:87:98:29:5b:76:96:ce:c9:9a:79:26:c1:2c:e3:48:
         b5:48:17:a2:06:08:f5:64:e3:4a:31:a8:46:bd:c6:12:b9:4c:
         4f:a5:44:6a:2b:44:65:0b:3e:ea:f5:f3:c8:c2:56:8e:e5:a6:
         57:1f:8a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:34:46 2026 by rpki-client