Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/44f0559d-a5c6-3a80-ac22-04bbce794613.roa
File:                     44f0559d-a5c6-3a80-ac22-04bbce794613.roa (raw, json)
Hash identifier:          PK8CA4aHGizLPBI0+ZhqVEBgmZUa4McHbb310E6BUt4=
Subject key identifier:   21:D1:32:F2:4C:8A:DD:34:EE:D3:84:59:92:B5:EA:80:A7:8A:FD:E2
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584E561A0F6D02A30D66C9C56300
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/44f0559d-a5c6-3a80-ac22-04bbce794613.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     54538
IP address blocks:        165.85.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:0f:6d:02:a3:0d:66:c9:c5:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=8a29853a-3331-4d92-9902-f6916dbd2cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:94:9c:a6:25:84:d6:3d:e2:ad:af:82:d1:
                    0b:46:54:d7:a7:36:80:1b:34:8d:aa:d0:2d:4d:4a:
                    cf:7d:13:b7:db:06:b8:3d:77:42:e4:a2:d8:65:ec:
                    bd:10:a5:2b:cd:29:b8:c3:06:4e:7d:26:67:a2:02:
                    86:c0:27:8e:de:8d:4b:b8:4e:55:8f:aa:32:f1:34:
                    77:12:89:0e:1e:a5:84:0b:da:06:35:33:b5:5e:02:
                    31:ad:1c:a7:b9:86:27:d3:69:1f:46:29:b0:3e:88:
                    c2:01:14:30:e5:7f:f1:c0:0d:25:f7:d0:32:d2:e8:
                    97:ae:cd:43:27:52:45:0b:7c:59:f9:47:1d:05:54:
                    e1:1d:b6:f0:7f:44:0d:8b:63:ed:2a:0d:f4:25:0c:
                    89:23:25:ee:02:fb:e3:a0:9d:b2:c1:81:dd:86:50:
                    b3:ee:f4:73:37:59:e7:04:dd:fc:f0:76:aa:07:ac:
                    05:ea:21:8e:10:08:f2:5a:f2:8d:f2:0f:bd:ed:af:
                    b2:85:bb:e3:81:08:f6:eb:18:a1:bb:af:0c:59:25:
                    79:12:90:7e:03:cc:e1:c5:9b:e7:de:f6:6d:0a:50:
                    89:0b:ee:23:ee:cf:0a:73:39:c7:13:32:c9:66:83:
                    89:5c:32:87:cc:69:98:f9:37:b0:91:d7:e1:31:86:
                    46:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D1:32:F2:4C:8A:DD:34:EE:D3:84:59:92:B5:EA:80:A7:8A:FD:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/44f0559d-a5c6-3a80-ac22-04bbce794613.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:17:53:a3:b9:3f:21:60:25:e4:d1:51:f9:16:c9:9d:34:19:
         c6:86:aa:fe:a1:7f:a2:ab:67:8d:4a:83:b2:2f:b7:ac:50:c2:
         69:7c:b8:d1:7b:14:23:ac:1d:98:51:88:59:5a:7f:bf:8e:71:
         66:9e:b7:82:6e:32:39:a8:6c:48:7b:08:2e:e1:79:d2:32:b2:
         a6:30:43:ba:78:72:60:8c:bf:3b:9c:2f:48:13:20:54:54:20:
         18:81:11:6a:01:dd:93:f3:b9:32:40:6a:54:ce:43:c8:65:e3:
         a3:4f:d4:03:a3:32:ff:cd:4b:c3:bb:bf:32:83:d6:55:a9:ef:
         83:bb:71:ba:e1:06:94:68:ab:5a:ad:f5:7a:34:ed:26:db:1c:
         f6:a1:c4:90:94:3d:0e:59:67:72:f3:0b:76:83:bc:89:53:3f:
         6b:9c:b6:3f:56:37:1f:ee:72:6a:70:e9:13:39:21:ef:4b:22:
         68:f0:10:e7:d1:b9:75:51:4f:6a:c3:c9:5b:42:42:35:83:41:
         21:fa:f6:af:f8:f2:b0:44:5c:94:de:51:e0:b2:64:8b:09:0e:
         3e:e7:9b:a5:1c:69:86:95:af:5a:11:87:92:4b:02:70:c4:58:
         75:e8:fa:37:a7:e0:ca:82:42:0f:98:62:cd:27:81:69:28:f9:
         ef:b7:59:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:57:45 2026 by rpki-client