Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/90af9f0e-1dcc-3925-84e8-03ac0ea89524.roa
File:                     90af9f0e-1dcc-3925-84e8-03ac0ea89524.roa (raw, json)
Hash identifier:          RSzCK2hmOvz3XqbNH8EuqjLgg4/Q+lAPbWaNOU4q2qM=
Subject key identifier:   33:AE:C5:73:1D:DC:5A:48:91:42:CC:FF:08:78:A9:3F:CE:23:F2:3F
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F4328584E4F1F3A16B7B70A52BF0FAA80
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/90af9f0e-1dcc-3925-84e8-03ac0ea89524.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     400989
IP address blocks:        192.111.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:3a:16:b7:b7:0a:52:bf:0f:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=30200c4f-0e63-4a3f-8217-f96eceef8528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bc:4a:fe:4b:db:52:a4:73:35:25:4e:02:7e:
                    5c:ba:78:59:7a:15:18:48:c0:ca:4a:e6:41:f2:29:
                    fa:ca:a6:af:0a:3b:d4:10:08:26:84:96:05:3a:cd:
                    fe:1f:31:8f:cd:27:e5:cc:73:3c:5a:39:67:38:d5:
                    0c:73:9c:8e:3d:9d:70:e7:9f:af:19:da:b5:25:1f:
                    c9:1c:30:92:81:67:42:f1:b0:e6:5d:68:ce:2d:9d:
                    96:8e:1e:ee:bd:a8:2d:66:47:ea:5b:b7:7b:23:34:
                    96:e2:0c:81:e2:4c:12:d8:07:13:d2:ed:c5:a4:c5:
                    02:a8:88:a5:5f:a0:4a:fc:25:21:56:7a:47:49:66:
                    f3:5c:55:6f:ab:df:04:ea:8d:da:d6:0e:b3:12:e3:
                    e6:f0:36:c5:3a:3f:f9:56:9e:71:28:25:a8:ab:bf:
                    59:70:70:69:89:ce:bf:80:61:46:a8:4b:4e:76:19:
                    d9:f7:f2:8f:76:c7:b9:09:10:03:2b:fa:ba:76:3b:
                    ab:bd:a7:7f:c5:7d:99:4b:7f:0a:51:6d:7d:ff:f4:
                    2e:da:50:c5:03:9d:80:64:91:1e:7c:db:89:f8:4d:
                    15:f4:63:9d:a1:b8:ba:b5:6c:c9:a2:49:71:f0:b2:
                    40:14:6d:a0:ee:07:d8:a1:15:1b:21:11:67:63:4a:
                    f1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AE:C5:73:1D:DC:5A:48:91:42:CC:FF:08:78:A9:3F:CE:23:F2:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/90af9f0e-1dcc-3925-84e8-03ac0ea89524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:21:5e:72:a8:30:f5:66:b2:c7:21:ad:46:e1:7b:10:26:47:
         6e:67:22:bf:23:fb:63:83:96:89:2a:cb:e3:dd:84:18:f6:14:
         ee:99:9e:02:e5:85:95:32:35:63:97:c2:ff:e3:30:02:76:87:
         ba:37:b3:96:eb:7f:16:c0:21:bc:68:a7:e3:99:4e:0f:6a:de:
         02:d9:88:71:72:7e:a6:57:df:70:1d:84:03:40:01:3e:35:6b:
         d1:cc:5c:9c:8d:8b:e8:e1:00:e4:1d:3b:e9:3e:0b:4b:67:48:
         1d:7c:d4:f0:d1:c2:c7:5b:3e:2c:75:b5:38:95:2a:ef:e6:2c:
         75:8a:73:08:cb:7e:1f:92:6d:e0:d7:e0:a3:5d:4f:b2:4d:41:
         cb:76:42:d4:7b:87:62:cb:b9:61:03:c4:90:e9:86:43:66:6f:
         99:07:52:ed:60:a0:b9:6a:bc:1e:f3:c0:d1:97:57:69:45:3a:
         c6:bd:55:ee:f5:33:b5:44:a8:d8:2a:e3:a8:f4:32:fa:05:4b:
         4b:91:6e:cc:3e:da:a8:e0:fe:f8:0e:06:1c:5f:09:6b:9e:ab:
         94:ef:ed:94:7f:13:8a:4f:80:c9:e9:92:8c:16:e1:8c:f8:2b:
         32:e4:ee:b7:8b:b8:60:1d:17:7b:d9:bd:4d:14:03:fd:d2:0d:
         dd:3d:53:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:30:12 2026 by rpki-client