Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/09bc33a9-c3ad-3518-882e-c74760a95334.roa
File:                     09bc33a9-c3ad-3518-882e-c74760a95334.roa (raw, json)
Hash identifier:          fjFn9HpjaC+U+hDYzPClCtD5ryOcgsf45G+ArGX5Jmg=
Subject key identifier:   B7:62:4A:FB:15:F2:6B:E6:27:09:18:5F:0A:93:F6:C9:3F:F8:84:F4
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584EA78867405E2DCC5C80E2E900
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/09bc33a9-c3ad-3518-882e-c74760a95334.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13768
IP address blocks:        69.90.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:67:40:5e:2d:cc:5c:80:e2:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e5d9ae75-df63-4626-84cb-480083dce53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7e:2a:bb:72:ce:3f:bd:b6:19:b3:bf:61:60:
                    0e:ef:6f:b2:d7:c8:fe:38:9b:ba:6d:9c:d1:62:78:
                    ba:18:3a:8f:b1:37:91:1c:5f:fc:fb:fc:c7:f0:bd:
                    9e:17:7c:30:f0:9f:b0:72:a7:cb:b5:1f:17:32:58:
                    fe:ed:b0:b0:04:6b:aa:fb:4a:a6:36:b5:98:36:f6:
                    d8:9a:c7:a5:76:69:3a:c8:da:f3:d6:0c:82:6a:87:
                    c9:b0:f6:f5:91:cb:8d:44:8d:25:63:56:b9:9c:2f:
                    3b:20:f9:e7:1f:4b:85:68:f5:c8:83:09:20:04:64:
                    74:aa:ab:08:b5:2d:c5:f4:ce:a7:b6:16:5f:2d:1c:
                    13:a5:e2:76:30:13:b6:c1:59:fb:ad:03:7f:25:59:
                    f3:cb:18:eb:66:6c:db:fd:94:00:89:85:32:76:11:
                    d3:eb:c9:68:a2:0d:a8:ed:91:fa:95:c5:c0:9a:2d:
                    77:5c:4f:21:be:08:8b:cb:e7:39:cc:46:79:c8:49:
                    3e:5f:3b:e7:d8:50:47:05:19:98:ae:61:5e:3e:3e:
                    f8:bf:1d:ab:ea:5f:e2:f4:c6:40:e0:a0:f9:31:a6:
                    8a:b4:35:a6:3e:cc:4d:1f:72:84:cf:a1:5d:80:47:
                    84:d2:69:c8:ba:37:65:f6:1c:53:42:30:5b:1b:bc:
                    25:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:62:4A:FB:15:F2:6B:E6:27:09:18:5F:0A:93:F6:C9:3F:F8:84:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/09bc33a9-c3ad-3518-882e-c74760a95334.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.90.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:1e:9e:3c:a5:f3:e9:ef:b4:58:6c:bf:62:03:2e:72:90:67:
         55:74:8b:47:85:7d:b4:c0:2b:40:0b:a4:e7:1d:9c:06:d0:4f:
         14:bb:5b:4f:8f:33:f0:14:58:c0:8b:81:08:55:83:f1:45:7c:
         5b:3e:df:a6:bc:54:ea:4c:10:c9:86:f7:b7:5b:63:79:fc:88:
         aa:58:a8:3a:33:38:5f:5f:4f:5f:59:61:b1:60:50:0e:00:00:
         fc:2e:d3:63:17:60:7c:38:cf:4b:07:ac:58:68:f3:f7:9a:5b:
         56:cf:7b:ee:0f:a7:c3:6f:8d:7a:61:7a:77:ea:64:6d:eb:71:
         b3:42:0b:54:66:df:7c:a9:a9:13:c2:6f:13:a1:07:10:a0:64:
         fc:b4:20:cd:12:2c:bd:1e:bb:91:4e:93:54:4e:1c:d0:f7:4e:
         d9:81:64:d5:83:aa:f2:09:b5:80:15:f0:ff:da:0b:59:ea:81:
         c0:01:2c:ec:12:e1:43:ba:d5:74:fc:b0:24:1e:b3:47:42:c6:
         87:55:49:41:b2:db:39:8d:76:f9:81:58:20:4c:c1:bd:db:f4:
         81:1c:ae:94:c9:53:5b:cd:d2:fc:65:b4:9a:6c:d5:af:b0:c6:
         ac:2d:c8:f8:b9:88:3d:47:c5:ef:bd:9c:61:08:7c:ff:53:4d:
         b1:32:1e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:36:51 2026 by rpki-client