Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a759a366-45ed-3c18-90f5-a5e5c535bbe5.roa
File:                     a759a366-45ed-3c18-90f5-a5e5c535bbe5.roa (raw, json)
Hash identifier:          R7iHr/9lnOfwuqXIT94HhjjMrrgMSHZVbnS24U1mbI0=
Subject key identifier:   C3:57:F2:D0:E7:05:66:E1:FF:1E:9A:74:4E:C7:CA:02:7C:19:8D:21
Certificate issuer:       /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Certificate serial:       010D0C9F4328584D95EFFAEFA5F8447BD92C1640
Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a759a366-45ed-3c18-90f5-a5e5c535bbe5.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     393474
IP address blocks:        64.90.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:fa:ef:a5:f8:44:7b:d9:2c:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=901a923e-a6a7-4587-963d-620e37b8182b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b6:5f:c4:3d:f3:f6:37:e7:e2:be:89:b4:11:
                    98:d2:96:8e:26:90:ab:be:0b:8b:bd:e2:08:c4:15:
                    78:32:8b:3a:38:ad:67:3f:81:3e:ee:13:91:28:d2:
                    fd:6b:4f:e8:70:fe:73:f7:33:0c:6f:92:76:08:03:
                    a1:90:85:06:ec:a0:c4:d9:c7:7c:8a:0b:21:bc:58:
                    d6:d7:91:c1:9d:2a:0f:e4:b5:0a:96:e6:d6:31:c4:
                    1a:c3:66:fe:dd:dc:ab:82:cd:a9:15:f0:22:82:f2:
                    90:55:8a:34:7d:7c:5b:33:7b:39:ca:f4:8f:f6:04:
                    75:aa:ba:8f:a7:d5:b5:91:bf:f3:5a:45:14:d5:46:
                    cb:01:f5:da:f0:27:b1:df:cd:eb:ef:a2:37:8d:0a:
                    fe:94:4f:49:97:c3:99:3c:60:ef:1a:ee:a8:76:7e:
                    ec:6a:36:ff:7b:39:00:53:4d:99:14:b9:7c:aa:e8:
                    c3:97:fc:9b:c0:b1:f0:57:eb:0c:ac:ca:95:ec:44:
                    a5:e1:86:50:e4:3c:c5:ec:a4:2e:e3:77:2a:dc:4e:
                    5d:eb:19:e8:ae:97:14:45:1d:3e:d5:02:d4:06:db:
                    1c:60:e6:15:51:12:c1:dc:71:a6:cb:70:62:b0:6c:
                    a9:eb:9d:03:51:61:5c:66:f1:71:84:19:91:5e:8b:
                    e1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:57:F2:D0:E7:05:66:E1:FF:1E:9A:74:4E:C7:CA:02:7C:19:8D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a759a366-45ed-3c18-90f5-a5e5c535bbe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.90.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:19:c7:5b:f1:ef:d3:cf:93:e6:bb:4a:88:87:6c:b3:8d:f1:
         08:65:02:e2:55:20:68:f9:ce:aa:50:e3:27:8a:a9:b0:21:13:
         04:81:13:5a:2c:b7:25:27:c8:83:8f:2e:96:39:aa:11:8f:d4:
         20:ad:e7:e1:4e:37:6c:e4:94:bc:a8:89:d9:98:45:8b:1e:80:
         66:64:53:6f:b4:41:62:06:28:60:8b:88:90:c0:f1:ab:a3:b6:
         30:10:60:e0:ce:93:50:e3:bb:7b:88:8d:1e:ed:12:e8:e3:e7:
         6f:1f:55:22:f4:97:ce:80:8a:2c:ea:3a:2e:56:81:b2:31:61:
         68:2b:4a:d3:e2:ca:c0:95:8e:62:08:47:50:d2:43:9c:7b:2f:
         01:11:0a:35:91:af:b4:62:41:07:0c:fc:ea:18:d4:98:b4:c8:
         02:5d:ab:83:85:c5:1a:80:a7:82:1e:95:ae:87:ae:58:2b:d1:
         5d:c1:eb:04:f8:22:0c:53:b3:7b:43:2e:f1:94:4e:56:05:df:
         9d:37:c4:25:13:d5:bd:cf:a6:bf:73:0a:fe:8c:81:e8:74:5b:
         e1:aa:14:6e:f8:d0:4c:86:b5:90:93:bc:85:c1:b6:fb:fe:f0:
         29:a0:52:25:6c:ba:36:bd:78:30:cb:88:55:65:4f:ae:ad:a6:
         ec:7e:ca:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 22:22:41 2026 by rpki-client