Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fb5ca363-35b4-3f9f-ba9e-07931bb79a32.roa
File:                     fb5ca363-35b4-3f9f-ba9e-07931bb79a32.roa (raw, json)
Hash identifier:          0Aik84GW6VehQJEgZD9nTmqFDO+O5yl1rN/5ghNQJeo=
Subject key identifier:   79:C9:E0:DF:BF:E4:D7:A7:2D:68:5E:B2:2E:AC:85:13:67:99:2E:0E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EA7917183CD0D441A5A56BD80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fb5ca363-35b4-3f9f-ba9e-07931bb79a32.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     212238
IP address blocks:        205.186.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:71:83:cd:0d:44:1a:5a:56:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9e5c473b-01b0-406f-b6c2-4ab4e0eb7e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d3:b0:e4:a7:a1:8d:1a:35:b5:42:2b:65:4e:
                    9e:92:9e:f0:42:23:61:62:94:bb:8a:fa:de:a1:e2:
                    5e:d9:cd:48:2e:7a:2c:9c:14:6c:cc:5b:5a:f8:df:
                    ab:5d:8e:7f:4f:8d:65:fd:51:a9:ca:9e:57:ee:46:
                    05:61:db:8d:b9:33:6c:fb:b5:89:2d:46:a0:ac:d2:
                    41:53:ff:64:53:a1:58:60:a0:bd:9c:b8:21:ee:0b:
                    65:2d:83:7a:ba:3a:ae:85:4f:27:f2:79:8a:0d:9f:
                    c6:59:14:47:b3:38:45:c5:2e:0d:f2:5a:8c:50:61:
                    23:fb:86:0e:c9:eb:38:7d:e9:8e:c8:a1:26:81:93:
                    b6:b2:57:c8:a5:46:19:32:7b:47:3b:9b:f3:05:b2:
                    34:18:7d:c3:2e:5a:c8:ce:a2:1a:64:05:c0:35:6c:
                    01:30:1c:d3:fd:00:63:c0:d8:ab:bf:66:3a:55:11:
                    1c:c4:19:f8:fb:28:cc:30:d3:38:70:56:ea:eb:80:
                    8c:7d:ad:14:a6:b4:15:10:00:da:49:eb:03:db:00:
                    78:bf:a8:83:c2:24:6b:93:01:73:d1:71:95:4b:6c:
                    1c:20:e4:9f:98:51:9c:89:24:ff:24:20:d1:74:60:
                    55:1f:20:aa:3d:10:61:c7:4f:64:1a:85:2e:d1:22:
                    98:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C9:E0:DF:BF:E4:D7:A7:2D:68:5E:B2:2E:AC:85:13:67:99:2E:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fb5ca363-35b4-3f9f-ba9e-07931bb79a32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.186.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:6c:9b:bf:70:fb:1d:74:a3:ed:45:23:9d:cd:38:a8:4a:2d:
         91:be:84:76:bb:0b:1b:f6:e0:95:f2:92:1a:9a:45:00:bb:d4:
         b7:fe:d8:de:6f:b4:61:74:62:6f:6d:db:35:1b:e9:4f:54:c3:
         f6:6f:6b:03:fc:24:b7:e7:8b:c9:f3:71:e3:c3:64:6b:ef:05:
         cc:a7:81:12:48:94:57:f9:3f:3f:95:e2:2f:fd:27:3b:1e:cb:
         4a:29:b5:e4:27:76:6d:19:a7:76:fb:0a:b5:2e:56:0b:45:9a:
         9d:da:16:de:32:48:82:f0:42:4b:31:bd:a5:73:6f:8a:79:8a:
         eb:e5:3a:f3:3c:fc:4e:3a:bd:8c:fe:d6:dd:55:ac:9d:b5:bf:
         c9:d2:cf:32:74:42:63:1f:fe:5a:4c:5e:30:65:59:58:df:83:
         0e:e8:fd:c1:5f:9c:8c:ec:77:91:80:f7:1d:f7:7d:f9:74:f0:
         8b:f6:a8:f7:d5:ef:ea:4f:b7:a0:dd:21:4d:a6:46:81:97:9d:
         79:b9:02:04:5e:79:2b:a5:93:13:21:1f:cc:26:b4:d5:0a:84:
         a9:0d:69:1d:ea:e3:39:06:1f:3c:01:57:c1:63:d4:11:00:3b:
         e7:92:3b:7d:4c:94:94:78:a4:27:12:af:19:9f:ac:b1:f3:32:
         e9:ec:f7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 13:16:42 2026 by rpki-client