Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/554acc97-d088-35d7-994e-d23169e6950e.roa
File:                     554acc97-d088-35d7-994e-d23169e6950e.roa (raw, json)
Hash identifier:          N+Ic2wpUyfWxAksZhfApy7q4itNSxS4pSFi3TBA4TwQ=
Subject key identifier:   A0:0E:65:93:C9:FC:83:91:F0:F0:F3:7D:F3:EC:F4:86:E9:99:15:73
Certificate issuer:       /CN=f0998994-1f51-4070-9d55-9e3090085fb9
Certificate serial:       010D0C9F4328584E8F5500B0EDFE4A2601490600
Authority key identifier: 7F:AB:75:76:C0:33:10:58:B2:82:B6:D0:A5:28:FB:2D:37:AF:5B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/554acc97-d088-35d7-994e-d23169e6950e.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     8075
IP address blocks:        206.203.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:55:00:b0:ed:fe:4a:26:01:49:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0998994-1f51-4070-9d55-9e3090085fb9
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=1d1ad376-b359-41a1-8284-5117610b8193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0f:ca:ca:99:24:79:1d:09:c9:4a:12:1f:1d:
                    17:c1:9c:1f:ef:0f:a3:33:0d:96:5e:59:a0:ce:7d:
                    d2:26:fa:8d:aa:8c:dc:8d:dd:e5:7e:c3:b3:ba:bd:
                    ca:2f:d6:db:d6:49:bf:bf:be:20:3f:9a:26:42:49:
                    08:4b:1e:79:f7:d5:98:b4:ff:eb:39:70:14:fc:3d:
                    e2:fd:3a:44:f6:d2:27:67:33:f1:2b:e1:ba:25:93:
                    b3:b8:f0:9b:76:aa:3c:09:65:0a:ff:8a:29:f4:b2:
                    a0:0e:28:89:2d:05:36:51:87:2d:05:c3:83:36:9c:
                    3b:7d:43:9d:df:14:d9:af:cd:b6:d1:af:c3:10:c3:
                    0b:58:aa:6f:d9:80:1c:7c:46:53:73:fb:dd:39:c3:
                    2d:04:fd:98:9f:9e:73:e6:2d:92:d6:c5:16:fc:02:
                    08:a3:77:87:cf:ca:12:62:2e:0a:82:94:7f:3a:1f:
                    9f:13:4e:75:38:3e:0a:7f:79:80:a9:71:6b:b6:ab:
                    bb:5a:8c:d3:57:34:97:7e:67:15:26:c2:c6:14:e4:
                    a8:1a:00:7f:17:da:78:d7:eb:d8:3c:56:13:c0:7c:
                    7e:a0:bb:74:d4:be:21:4a:2c:b8:31:70:f4:e1:50:
                    67:1a:49:df:e2:95:dd:ec:6c:4d:e1:bb:47:c5:35:
                    ce:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0E:65:93:C9:FC:83:91:F0:F0:F3:7D:F3:EC:F4:86:E9:99:15:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/554acc97-d088-35d7-994e-d23169e6950e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9/f0998994-1f51-4070-9d55-9e3090085fb9.crl

            X509v3 Authority Key Identifier:
                keyid:7F:AB:75:76:C0:33:10:58:B2:82:B6:D0:A5:28:FB:2D:37:AF:5B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f0998994-1f51-4070-9d55-9e3090085fb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.203.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:1f:3c:fa:f8:17:e4:72:76:a4:f5:8d:60:b7:1c:c6:91:bd:
         8c:56:ad:f9:89:46:3c:83:a0:ea:da:55:6b:64:8a:22:a0:c8:
         81:08:9d:bb:a6:29:92:4a:1d:d9:d4:d5:65:8d:99:09:ed:17:
         de:b0:2f:19:6f:ae:a4:92:38:40:4f:75:77:08:ca:c5:e8:d9:
         2b:10:2d:93:db:e5:2c:7f:9a:be:7f:cc:df:c6:b9:41:1b:5c:
         b9:1e:66:5b:0b:99:d4:67:6f:57:48:03:fd:41:37:10:a0:17:
         86:64:f6:1e:74:07:ea:68:22:9c:b8:ed:85:85:a4:a9:21:7e:
         34:17:fa:a9:2f:a0:9d:93:0f:4f:d4:d8:39:0c:c8:b1:76:c5:
         83:4b:70:c5:af:d4:8b:8e:46:03:68:9b:55:36:cc:2c:0d:8d:
         c2:89:c9:f9:f5:5f:84:6f:54:1d:de:48:cd:e0:87:9b:45:29:
         8f:07:7d:56:55:e2:aa:37:f6:9b:2c:e9:c7:ab:12:55:0e:6f:
         4c:43:2e:35:c0:09:9a:45:fe:53:95:a3:02:b9:df:fb:d5:6e:
         17:e3:7a:eb:ad:74:f4:fd:b7:5a:20:f5:9b:c5:1c:f5:82:5a:
         5e:1e:0b:a7:b1:52:e5:de:cb:25:1f:81:a3:59:6c:9b:c9:8d:
         68:de:5e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:55:10 2026 by rpki-client