Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2e8988e3-c958-37c5-9f7c-fd2854f24bd7.roa
File:                     2e8988e3-c958-37c5-9f7c-fd2854f24bd7.roa (raw, json)
Hash identifier:          Ll/gtO4gA2N6f8qjWr86KFpm31KEdLDnvWaNEDpLJyw=
Subject key identifier:   70:33:FD:BF:E9:11:C1:7C:86:83:E3:1D:88:8D:C2:9A:96:07:16:EC
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1966030C32DD22363AEEEC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2e8988e3-c958-37c5-9f7c-fd2854f24bd7.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     21723
IP address blocks:        204.101.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:60:30:c3:2d:d2:23:63:ae:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=f7560033-e6d0-42a1-920b-82d0e4ad26fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8c:bc:a8:42:89:5a:eb:c9:3f:90:3a:3e:43:
                    e3:a1:35:19:1a:b4:48:ca:b9:d7:a0:ea:4c:d0:28:
                    15:26:e3:44:22:5e:dc:d9:eb:d4:b6:23:2b:df:14:
                    16:ae:f9:8b:31:2b:c2:a2:96:53:e9:82:18:a5:4c:
                    dc:04:cb:ed:6b:16:ee:5f:34:ad:c1:d3:5a:9a:e7:
                    81:be:c7:49:9a:94:86:99:c3:8e:b5:9e:fe:c3:c0:
                    5a:63:41:81:fb:9d:4c:a5:c0:79:e5:dd:4f:62:e5:
                    7d:58:32:27:f1:1f:0c:ce:d6:e4:d7:1c:b1:4c:60:
                    0d:7e:52:f6:3e:8d:41:aa:36:8a:fe:88:fb:2b:23:
                    79:d4:db:ec:bc:a8:c9:b3:c3:a3:3d:20:1c:4a:10:
                    21:91:0d:87:f7:1d:2b:ab:7b:83:2e:5a:8f:7b:13:
                    22:b1:3f:a5:20:7e:c7:e8:14:85:73:2a:5a:c8:a9:
                    56:40:ea:26:f1:5e:ca:80:ec:b5:a5:32:a0:5b:48:
                    1f:49:f0:60:70:95:bd:ee:b3:0c:5b:65:18:5d:fc:
                    3d:5f:79:2a:e4:e0:c6:06:5d:1e:a2:98:ef:e6:b8:
                    f4:8c:b4:ae:9b:c9:41:69:c4:f1:05:ba:34:2d:b7:
                    cb:4c:2a:30:68:48:fd:21:fd:ea:18:98:0a:83:d2:
                    19:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:33:FD:BF:E9:11:C1:7C:86:83:E3:1D:88:8D:C2:9A:96:07:16:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2e8988e3-c958-37c5-9f7c-fd2854f24bd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:e8:64:e6:d4:d6:61:b3:95:7c:b8:17:97:68:0c:52:3b:f9:
         7f:16:a8:ef:86:c5:5a:73:7d:ad:c1:e5:ea:b1:10:09:98:5e:
         ef:f7:d0:c2:63:e2:25:76:7e:31:48:0c:38:38:0e:94:9d:27:
         d6:20:35:c5:61:21:01:d3:71:ba:2d:4e:30:8f:70:73:e6:98:
         cc:86:33:aa:e5:7c:89:a9:79:bd:50:e9:38:38:9d:cf:03:94:
         83:e4:1b:16:04:e2:06:04:39:1e:07:35:70:e0:42:3e:fe:ae:
         f9:18:31:45:8c:f5:b9:32:e1:72:13:9a:86:d7:00:ae:75:88:
         99:3a:12:7c:fd:01:3b:3b:36:c5:67:17:04:c1:f4:3f:84:33:
         6d:a2:13:ef:aa:4a:1e:2f:69:e0:2f:67:73:0e:4d:be:d2:ab:
         ec:ec:26:34:fb:0f:61:47:a3:b2:f1:d6:f9:79:5e:bc:60:bf:
         44:27:e4:46:4e:ce:e9:a5:71:3a:ae:ec:5b:32:97:89:d3:f6:
         f0:d5:ad:27:9f:9e:b7:21:c4:4b:ed:83:12:6d:16:30:a7:69:
         19:d2:81:d6:26:26:d5:cb:dc:2e:c6:9b:6e:3d:b1:fb:eb:d6:
         94:37:d2:83:c2:cd:7d:01:9a:e0:c6:24:a8:7b:30:b0:7f:07:
         85:83:23:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:59:51 2025 by rpki-client