Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/60d9c4ad-35b2-3ab5-9d02-921d2e122007.roa
File:                     60d9c4ad-35b2-3ab5-9d02-921d2e122007.roa (raw, json)
Hash identifier:          UBXn3w4nmXHUUKePFeVTtJU9CQNXwAe3tq+78weTSJ8=
Subject key identifier:   F4:7A:49:D8:AA:D0:0B:02:3F:5F:F1:9E:76:BD:79:0C:0B:37:1D:E0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19715D859373A732AD4B080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/60d9c4ad-35b2-3ab5-9d02-921d2e122007.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36522
IP address blocks:        204.101.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:15:d8:59:37:3a:73:2a:d4:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=3ac3cd90-5fcf-464b-89df-b60cfb649fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:02:78:c7:c1:29:c8:30:5c:55:27:0f:48:9b:
                    63:71:21:51:89:51:33:cb:e2:43:97:68:09:79:b9:
                    31:ca:a2:fc:5d:02:54:fb:51:5e:65:9b:b6:f8:3c:
                    a9:3b:01:0a:09:7e:ee:f1:d0:74:1f:7f:cd:f5:54:
                    aa:48:73:15:c6:81:94:07:9e:69:ee:ca:7b:31:dc:
                    7d:f4:d1:7b:da:22:8f:ad:a4:6b:d8:6f:c4:61:46:
                    d9:10:56:00:60:8e:93:aa:ea:79:fb:00:37:ff:bf:
                    ac:73:3e:e1:69:d8:c1:2e:de:ec:36:4e:8c:de:fc:
                    c2:e7:3c:af:fa:9a:74:8a:cb:0e:6a:1b:34:f1:f8:
                    76:40:96:9d:3c:88:0c:4e:97:4f:20:f4:c6:c1:10:
                    19:e3:f1:f4:31:13:f0:17:f4:9e:ac:06:21:20:dc:
                    2a:0f:4a:d1:3b:f4:9b:3f:db:73:19:4d:68:a6:07:
                    52:af:6a:a0:4f:82:85:af:c4:7b:2e:5d:0e:61:c6:
                    a3:12:e6:1b:db:c1:0d:70:27:89:48:ef:52:1f:b4:
                    db:f1:3c:a5:83:12:16:fd:08:e5:9f:38:2b:70:60:
                    a0:91:27:3e:23:17:2e:e5:c6:37:a5:75:b7:d2:09:
                    2d:93:d9:ae:9a:01:92:4f:6f:71:4f:6e:65:74:68:
                    36:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7A:49:D8:AA:D0:0B:02:3F:5F:F1:9E:76:BD:79:0C:0B:37:1D:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/60d9c4ad-35b2-3ab5-9d02-921d2e122007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:63:34:3b:72:e5:2f:7d:47:1c:14:eb:f4:1b:fe:f5:c3:aa:
         f6:79:80:d6:09:5a:e4:1e:5b:f5:45:b2:82:3e:06:e1:24:b4:
         94:a3:6e:01:80:71:26:a9:75:21:1c:be:1d:8b:4d:25:48:bb:
         6c:55:a6:38:5b:7a:3a:ea:12:92:68:63:6b:34:67:94:09:88:
         f1:0a:fb:da:15:6c:ee:13:02:3e:34:7e:7a:ea:1e:69:57:bb:
         56:82:72:08:26:51:83:25:b6:cd:53:39:e4:60:28:72:1b:19:
         7d:da:c6:17:23:93:37:33:2f:47:8f:3b:28:88:d2:d5:5a:4c:
         04:19:d8:ff:6b:85:f4:d4:a0:cf:06:15:0a:b4:60:04:54:d8:
         d7:9f:b7:93:6b:14:8d:ad:a3:1b:08:b1:6e:64:3f:0a:d3:92:
         19:8d:b4:bb:c3:39:f7:54:37:8c:a9:19:a4:c3:d4:cc:20:1b:
         8c:d1:be:f0:b0:e3:fd:c7:30:8c:0c:f0:98:ed:94:c6:ae:0a:
         e1:74:54:5d:74:78:53:4d:be:33:46:e4:d4:87:ef:68:da:ca:
         c0:75:79:59:f3:33:ef:42:3b:d9:e1:bc:24:bc:17:f3:76:ed:
         36:26:85:83:75:3e:0a:53:07:ac:d5:6e:0d:59:2f:63:d7:43:
         45:48:e4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 10:59:49 2025 by rpki-client