Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/f8796acd-4b2e-379c-a69b-c56f029b2103.roa
File:                     f8796acd-4b2e-379c-a69b-c56f029b2103.roa (raw, json)
Hash identifier:          dIvImXhgZcUAwC6UNAtwgSO+xjZ1GYxCLFjZEGqSeAw=
Subject key identifier:   28:3B:DD:8A:12:91:C5:B2:A9:E7:30:62:FF:37:2E:04:66:9B:8A:29
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584EC371CB45DE014914F8F903E7
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/f8796acd-4b2e-379c-a69b-c56f029b2103.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     15197
IP address blocks:        69.90.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:cb:45:de:01:49:14:f8:f9:03:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=d2c3db01-49cd-4543-a36d-537380808c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:c1:01:6d:53:eb:c0:62:41:b0:30:c0:90:
                    a2:fa:67:c1:c1:f1:4e:33:3b:41:a9:5f:0c:41:40:
                    05:88:90:eb:3c:85:3a:11:ce:f9:eb:5b:44:fe:1a:
                    91:8c:64:a7:ce:ee:d4:9d:a3:fd:5a:cb:55:23:5f:
                    ca:b8:04:d7:bc:43:e3:83:49:c6:05:23:62:84:f9:
                    ea:ca:00:a4:dc:c0:79:ae:ee:e5:7e:fd:4c:47:a0:
                    50:18:79:16:36:55:8f:c6:64:77:a4:63:6e:df:4b:
                    2c:51:58:13:33:00:fb:46:5e:9f:d4:80:85:20:1d:
                    7d:3c:11:df:8a:b7:88:54:b6:84:5d:c0:5c:69:a0:
                    96:a0:df:3e:5f:12:ff:39:a7:84:a6:a8:86:ec:e2:
                    e4:f7:e5:49:6d:a4:2d:80:b8:45:b6:25:65:c6:1c:
                    87:2d:b3:b6:6c:b5:e2:b6:97:a2:26:0e:05:19:f1:
                    a0:50:d0:23:e7:19:18:aa:98:bb:8f:72:85:32:fc:
                    23:ea:4d:c9:be:99:cd:e5:1d:e4:90:0c:c8:e3:fc:
                    54:8f:7c:cf:31:59:05:c7:b6:81:f6:c8:8e:cb:3a:
                    fa:a3:ee:fc:53:f7:39:8f:16:45:07:68:62:f4:18:
                    e1:61:c9:88:76:b7:60:a7:ce:eb:8a:e8:59:c6:c7:
                    c5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3B:DD:8A:12:91:C5:B2:A9:E7:30:62:FF:37:2E:04:66:9B:8A:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/f8796acd-4b2e-379c-a69b-c56f029b2103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.90.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:b1:e1:75:e4:9b:b9:9a:2f:32:2b:46:1d:2a:59:a1:78:14:
         35:89:1e:a0:55:3c:ba:ae:47:98:0b:c1:00:10:62:11:e7:de:
         5c:c5:db:ce:65:03:9b:e4:9e:70:7f:f8:e4:d6:83:71:13:c5:
         5e:c2:ed:53:5f:1a:45:79:04:03:a8:8a:c0:bc:31:e4:df:b9:
         d6:1a:79:1f:01:26:dc:2e:e1:9d:e8:4d:6d:d5:2c:98:8e:52:
         37:db:76:a4:ad:fc:a5:03:9e:8b:1c:9c:0e:0b:d8:6c:f6:e3:
         97:1e:57:11:79:aa:f3:30:56:2d:08:60:50:01:3d:8e:82:63:
         2e:69:fe:ac:ab:f3:19:89:ae:c2:60:80:f5:8c:58:f6:be:53:
         5d:6e:37:f1:87:a7:8c:8f:b3:72:c6:19:31:66:84:02:78:e0:
         d8:17:94:93:3e:31:a9:de:de:fe:93:29:6a:79:ed:ca:9a:e2:
         ea:32:19:ce:79:f7:79:ff:f3:9a:e3:3f:34:78:99:d5:af:f5:
         93:5e:d5:37:4d:9a:ec:e4:a2:5f:58:6d:cf:f7:99:e0:0c:3b:
         dd:a0:52:4c:0c:1d:c5:84:6c:35:90:44:1b:70:f0:c8:c9:96:
         dc:55:d6:d8:5f:af:e4:73:d0:93:49:44:9a:7a:e5:20:50:1f:
         d3:8e:a4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:36:47 2026 by rpki-client