Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/68d13344-508b-380b-a917-e526cb4305b4.roa
File:                     68d13344-508b-380b-a917-e526cb4305b4.roa (raw, json)
Hash identifier:          zhjWOk/rnNp3oSbgfHJ1tZBTZ9TFVfFbnUMAvXj8uFQ=
Subject key identifier:   43:C4:64:A1:98:A3:8D:8F:4D:B3:9D:5F:08:50:6B:BA:61:DA:CA:E3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D4D5A43EA13B2F87AAAAE9DC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/68d13344-508b-380b-a917-e526cb4305b4.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     3848
IP address blocks:        204.101.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:43:ea:13:b2:f8:7a:aa:ae:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=ebdb1669-9a7f-4101-b010-e17866666538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8e:ec:39:5f:e0:4b:cb:a2:36:07:82:69:0f:
                    65:01:49:2d:e0:da:c9:1f:b9:f0:29:fb:eb:bd:5a:
                    ae:fa:41:a8:05:a5:90:dd:22:d5:f1:ee:11:b6:83:
                    cc:1e:4a:a7:04:43:d9:dd:94:55:b7:9c:4f:b6:61:
                    30:d6:8b:59:8e:7b:80:50:22:92:51:a7:3f:4e:af:
                    f4:17:2b:09:07:8d:66:0a:72:40:17:b2:df:88:13:
                    fc:c2:fa:2f:63:fd:a5:3b:51:04:a5:64:87:26:90:
                    04:a4:14:0e:c2:f8:85:5e:d4:2c:90:d2:0b:bd:53:
                    45:0d:53:24:fe:e9:df:b3:9f:bf:2e:e9:d5:d7:03:
                    99:a2:8a:2f:42:34:73:d6:86:22:c7:cc:16:8b:e4:
                    75:8a:aa:4f:2d:55:b8:7a:c3:19:e9:4f:a7:e4:2a:
                    f3:6e:65:c6:23:31:13:c8:bd:ff:56:e6:0c:3a:b6:
                    10:61:1b:31:0f:99:27:4d:27:43:e4:e6:9e:c1:64:
                    58:2f:50:1e:d4:cb:e0:be:a3:b6:2f:d8:aa:0c:0a:
                    5b:aa:c2:08:d2:7b:96:1c:52:3f:0f:47:d6:c3:8d:
                    84:ec:20:d7:cd:ee:5f:8a:7c:5a:0d:f2:df:6f:15:
                    ff:f5:6d:27:af:cd:9d:ca:d4:1b:b9:c7:40:13:e5:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C4:64:A1:98:A3:8D:8F:4D:B3:9D:5F:08:50:6B:BA:61:DA:CA:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/68d13344-508b-380b-a917-e526cb4305b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f1:6b:4e:cf:a0:06:7d:d4:70:a1:c6:9e:ff:ff:d3:70:e2:
         b0:ef:e9:d0:89:e7:3e:15:93:a7:ce:ce:63:29:6a:6c:01:2f:
         3e:4a:25:86:93:3f:7a:7b:04:38:e1:4c:bd:62:67:2e:3d:6e:
         cb:aa:70:04:fc:65:14:47:1e:c5:11:f9:9d:e8:76:87:05:43:
         ec:39:d6:31:fc:e8:ec:77:88:b0:62:71:49:9d:e6:0a:c5:ec:
         54:5a:81:65:e0:3e:51:68:e6:3c:f9:ea:72:2c:db:87:10:b7:
         6f:9e:b0:19:da:d8:69:c8:b6:48:03:84:14:28:90:58:53:8e:
         6b:a0:7d:88:3d:a8:33:38:85:3b:c5:76:a4:cb:22:fc:88:f1:
         6c:b7:9b:30:fc:47:75:93:25:03:78:0a:df:8e:ca:4c:d7:33:
         cb:cd:3a:f0:c7:03:96:7d:5a:05:9e:06:06:79:27:b0:2d:4f:
         9d:8f:3e:c7:d0:2c:c3:94:68:7e:fe:17:39:3d:a1:9e:6b:87:
         3b:af:da:ac:f8:50:4c:e1:35:fa:05:c3:cb:98:e1:e9:c5:50:
         99:cd:76:43:d4:d0:5d:81:fb:d2:54:81:d4:14:f4:ff:32:73:
         05:0e:44:6a:84:93:61:9d:a8:72:a8:48:75:01:f6:99:7a:9d:
         e5:82:92:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWkPqE7L4eqquncAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
ZWJkYjE2NjktOWE3Zi00MTAxLWIwMTAtZTE3ODY2NjY2NTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY7sOV/gS8uiNgeCaQ9lAUkt4NrJH7nwKfvr
vVqu+kGoBaWQ3SLV8e4RtoPMHkqnBEPZ3ZRVt5xPtmEw1otZjnuAUCKSUac/Tq/0
FysJB41mCnJAF7LfiBP8wvovY/2lO1EEpWSHJpAEpBQOwviFXtQskNILvVNFDVMk
/unfs5+/LunV1wOZooovQjRz1oYix8wWi+R1iqpPLVW4esMZ6U+n5CrzbmXGIzET
yL3/VuYMOrYQYRsxD5knTSdD5OaewWRYL1Ae1MvgvqO2L9iqDApbqsII0nuWHFI/
D0fWw42E7CDXze5finxaDfLfbxX/9W0nr82dytQbucdAE+Xi0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEPEZKGYo42PTbOdXwhQa7ph2srjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNjhkMTMzNDQtNTA4Yi0z
ODBiLWE5MTctZTUyNmNiNDMwNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGXsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA7xa07PoAZ91HChxp7//9Nw4rDv6dCJ5z4Vk6fOzmMpamwBLz5KJYaT
P3p7BDjhTL1iZy49bsuqcAT8ZRRHHsUR+Z3odocFQ+w51jH86Ox3iLBicUmd5grF
7FRagWXgPlFo5jz56nIs24cQt2+esBna2GnItkgDhBQokFhTjmugfYg9qDM4hTvF
dqTLIvyI8Wy3mzD8R3WTJQN4Ct+OykzXM8vNOvDHA5Z9WgWeBgZ5J7AtT52PPsfQ
LMOUaH7+Fzk9oZ5rhzuv2qz4UEzhNfoFw8uY4enFUJnNdkPU0F2B+9JUgdQU9P8y
cwUORGqEk2GdqHKoSHUB9pl6neWCkuQ=
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:12:50 2026 by rpki-client