Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9f0d302a-7979-337d-9b26-7f6a129e33e2.roa
File:                     9f0d302a-7979-337d-9b26-7f6a129e33e2.roa (raw, json)
Hash identifier:          prJwvqGmIVvt1TbxKe35BG1gkW0YSOXSadHpWTKBLLM=
Subject key identifier:   92:36:EC:50:66:47:46:85:F4:D6:FA:56:CB:65:42:E7:23:CC:8F:5A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D95F01EC14B4C0AAE3D2F1900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9f0d302a-7979-337d-9b26-7f6a129e33e2.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     19842
IP address blocks:        204.101.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:1e:c1:4b:4c:0a:ae:3d:2f:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=3060459a-c3d2-4ad6-a279-4d8b899c2584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:35:89:e5:63:42:b8:b3:55:fc:46:9e:98:40:
                    d3:3b:bc:b8:7b:c3:74:78:14:ab:a4:4a:29:44:cf:
                    1d:fa:e9:57:b3:d6:e8:6c:93:15:f9:e6:69:12:39:
                    af:b3:93:76:11:44:cd:80:be:95:9c:4d:6a:8a:57:
                    a9:11:48:46:05:7c:f8:c4:eb:d7:d9:fc:14:76:6f:
                    b4:55:c6:a7:f7:7b:ea:29:b5:b9:7f:b9:b8:c9:2c:
                    d6:5a:73:6b:ed:79:a3:0b:80:cd:40:26:21:b7:71:
                    3f:8a:96:39:d8:77:59:26:f4:75:34:fd:02:6e:24:
                    37:fa:0a:56:c7:83:46:a2:14:90:7b:7f:23:12:66:
                    a5:ab:e7:47:3a:86:fd:04:c0:3e:2e:34:31:1d:9a:
                    9c:ad:a1:eb:ee:ef:42:88:55:23:d6:1d:51:99:4b:
                    10:91:fa:45:ea:9f:9e:60:0b:84:e1:fd:8f:4a:5a:
                    63:95:d5:b3:53:68:97:a8:9b:29:c2:9b:eb:11:59:
                    62:16:0f:59:98:d9:cf:0d:26:c6:5c:a9:2b:4c:76:
                    91:9f:c1:65:a4:60:53:97:27:2b:d3:0c:09:36:c8:
                    a2:1c:42:ca:3e:86:8d:e9:63:06:72:3f:22:ca:2f:
                    c2:4f:4f:ea:7a:89:03:63:fc:25:82:7f:02:35:0f:
                    72:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:36:EC:50:66:47:46:85:F4:D6:FA:56:CB:65:42:E7:23:CC:8F:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9f0d302a-7979-337d-9b26-7f6a129e33e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:9d:db:83:a1:69:3b:77:e5:c7:fd:ce:62:13:42:0c:cc:c6:
         bc:f2:59:6f:08:42:7c:ce:d7:e1:5a:bf:b1:80:9e:a6:13:93:
         bb:ce:cd:c9:d4:7a:c7:65:17:ed:cc:99:c3:1e:8f:05:9a:02:
         75:2b:ce:a3:97:ee:17:46:88:69:7f:f2:54:0a:0e:0b:06:cf:
         15:1b:4b:fa:9b:f1:5a:75:70:df:73:c4:4b:9d:34:8a:1b:55:
         05:c4:42:71:58:83:d0:54:51:d4:1c:df:2a:ee:80:c5:bd:1a:
         54:8e:6e:c0:c2:d0:ed:1a:e3:35:16:29:cf:27:d8:ed:32:3e:
         91:83:bb:0d:f5:3b:5a:84:20:41:e6:6e:05:d9:b7:4a:44:ec:
         b9:05:b8:b1:c0:0c:6f:48:f4:46:68:03:27:05:c1:13:da:67:
         79:01:a8:48:24:a8:d1:e6:49:ea:5c:9c:18:b7:8e:cc:6d:12:
         77:da:f4:ee:92:a4:15:ba:3d:d7:3d:33:29:b8:f4:ef:85:f8:
         4c:34:88:b0:47:e7:df:4f:2a:19:6e:79:9a:46:cc:b8:93:28:
         3e:29:c3:ca:9b:eb:c4:00:35:6b:94:bf:49:ae:73:74:36:8d:
         0d:85:93:2c:16:a8:15:17:2e:f1:55:31:dd:55:47:e7:ff:0d:
         f9:d9:2d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:09:31 2026 by rpki-client