Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a374e561-5860-34f3-856f-f7e548df2dfa.roa
File:                     a374e561-5860-34f3-856f-f7e548df2dfa.roa (raw, json)
Hash identifier:          IjBbjhv5N+cCLvd8eWQDMyPXHNektWKvPZ/39Bha+8M=
Subject key identifier:   18:FF:F5:85:5E:CC:45:F0:3C:53:FB:7C:7B:E0:4E:EA:82:6B:51:47
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAA03D64450FF0FC15DF80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a374e561-5860-34f3-856f-f7e548df2dfa.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     21723
IP address blocks:        204.101.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:a0:3d:64:45:0f:f0:fc:15:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=5db4d92b-089d-493c-a44b-d0718fb339c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:22:5d:e0:f0:8f:5c:fc:20:b5:c4:91:7f:78:
                    9b:20:6e:ec:67:93:90:eb:40:c5:61:20:ab:35:e6:
                    f6:f1:4f:56:4b:17:18:d5:7b:93:c6:2f:24:9b:9b:
                    ed:73:62:e4:c1:aa:fd:60:90:8c:c4:93:52:77:46:
                    1c:e1:ea:1a:20:38:01:ec:c6:c7:85:9c:ee:ff:aa:
                    ab:f4:8f:3a:c6:44:38:5c:78:dd:cc:ab:d5:be:47:
                    4a:da:f0:6b:b5:45:f8:20:38:23:01:bf:92:3a:d3:
                    3d:59:30:e4:35:cc:c2:72:78:dd:ca:7d:32:53:c7:
                    80:aa:6e:f2:4e:df:16:18:b4:9b:ad:54:cc:98:c1:
                    22:b2:9d:cf:4f:63:76:34:a1:1c:bc:ae:b4:4d:c4:
                    46:54:b1:cd:f1:4f:bd:a3:72:af:7d:ec:d8:2a:3a:
                    5e:38:96:68:66:f9:ef:0f:3c:1f:2f:96:cf:89:a3:
                    14:6a:4b:6e:2b:c8:8a:bd:a4:38:68:3f:41:a8:fa:
                    15:41:ee:af:4f:ec:e3:ed:77:e6:b6:c3:71:cc:a6:
                    03:79:79:9b:35:cb:9e:69:b9:ac:65:4a:62:6a:24:
                    a8:91:8d:74:ad:05:62:b9:13:fd:67:57:c5:92:68:
                    43:27:df:63:55:b5:b2:2c:58:71:d0:e4:9f:3b:f0:
                    f2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FF:F5:85:5E:CC:45:F0:3C:53:FB:7C:7B:E0:4E:EA:82:6B:51:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a374e561-5860-34f3-856f-f7e548df2dfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ce:86:00:07:28:45:24:11:aa:95:4e:ea:23:b0:32:0d:d2:
         cb:6b:d8:13:01:f6:66:2e:c7:c2:c6:0d:a2:3d:df:92:86:f7:
         04:54:af:f9:4a:7b:9d:4b:a7:81:ad:68:3e:c5:9b:55:27:76:
         3b:68:05:6c:15:4c:ce:a9:17:2e:7f:20:ba:79:aa:99:48:18:
         35:f0:ee:0e:4a:82:db:81:31:50:77:2e:51:f7:b7:c1:a4:e9:
         65:7a:da:ac:8b:08:35:c4:cc:79:95:80:f9:da:64:26:71:6e:
         03:12:46:4b:c0:3a:80:22:df:19:85:65:47:2b:14:cd:4f:a5:
         24:e4:fa:31:11:b2:42:70:75:6c:91:e0:7b:36:38:a0:a6:e4:
         4d:dd:6a:84:6b:8f:12:b5:46:25:88:51:62:26:07:df:c5:4f:
         b7:7d:8e:49:c7:c2:de:85:40:a8:21:57:ec:76:bd:7a:c1:84:
         ce:2a:28:e2:06:a3:34:3e:62:96:19:42:02:18:cd:e1:41:3f:
         fd:1c:ff:42:01:0b:0d:72:54:62:11:69:26:75:e4:13:e4:51:
         e9:c7:78:18:a4:67:67:10:98:d9:b2:e3:c1:ae:c1:f0:92:bd:
         7e:0e:dc:6a:8a:d0:14:21:81:52:d3:00:0f:a8:99:b2:bb:bb:
         36:ba:ba:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:03:23 2025 by rpki-client