Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bd708ac-95c9-3ff5-a5e8-367201124ff5.roa
File:                     1bd708ac-95c9-3ff5-a5e8-367201124ff5.roa (raw, json)
Hash identifier:          K36SMcQaAsh6LCWNmXQKsrj3W8N6AHYo3xLTAnbfoVc=
Subject key identifier:   C3:03:67:7D:13:30:A5:72:07:C1:A4:DF:64:5E:17:8E:E2:0A:CE:FF
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EA788C0E03FBFB1C3C91BF580
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bd708ac-95c9-3ff5-a5e8-367201124ff5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22773
IP address blocks:        24.248.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:c0:e0:3f:bf:b1:c3:c9:1b:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b000667f-f094-42bc-bfd1-f6cb5e892ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:1b:c1:24:50:33:5d:8a:9d:4f:e2:e8:24:
                    b7:7d:fa:37:aa:20:78:f0:8a:11:cd:b7:d0:32:66:
                    fc:34:0d:f0:60:cc:57:d0:ee:d6:bb:f4:e3:54:3e:
                    81:ab:cc:b1:5a:dd:dd:05:59:5c:08:4e:dd:9d:a2:
                    02:15:44:7f:67:87:b4:51:3f:47:49:02:f9:3b:a7:
                    ce:82:10:6b:dc:2d:8e:ef:60:c3:6b:4e:23:ae:fe:
                    0b:71:82:d1:55:fd:db:42:e2:73:59:45:d9:ea:a1:
                    c1:a8:e6:ba:89:86:dc:79:ff:69:b7:09:30:26:fd:
                    07:6b:9c:cf:dd:b2:da:99:f9:86:50:3d:e5:14:5f:
                    e0:5b:ab:2a:d5:43:40:a9:d2:ee:23:c4:11:dd:9a:
                    7b:03:71:bb:c8:cd:4a:2a:aa:9b:70:5f:d4:76:ea:
                    40:d2:41:2d:7e:88:91:a3:d3:31:1f:39:e3:72:d8:
                    f4:df:ac:0b:55:8d:cc:ec:1b:f4:5f:10:ff:12:82:
                    68:de:f8:31:03:ac:2c:ca:90:2d:89:f6:d6:2d:7a:
                    8e:40:f9:97:ba:6b:50:e2:d1:a6:88:a6:03:08:7c:
                    8c:02:0e:3f:58:6b:ba:cd:f8:49:3c:ea:32:a2:17:
                    ea:6d:ac:c1:58:b1:cc:20:fe:8e:75:b0:fe:a5:3f:
                    87:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:03:67:7D:13:30:A5:72:07:C1:A4:DF:64:5E:17:8E:E2:0A:CE:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bd708ac-95c9-3ff5-a5e8-367201124ff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.248.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:be:04:fc:3c:39:0e:3a:a5:f0:05:2d:40:4d:91:b2:e1:ca:
         3f:bf:bf:68:23:b2:d8:75:f3:fb:72:cd:04:6f:70:ca:c1:e8:
         57:c4:e8:b1:51:83:e7:7a:7d:9b:b7:71:d2:ba:44:0f:b0:7a:
         40:1f:1a:06:44:26:07:9e:96:c8:ab:bc:f5:bd:dd:d7:25:3f:
         e6:d4:6f:45:34:3a:7e:79:ec:dc:06:9e:4d:5f:e0:bb:ea:b2:
         dd:11:d6:ac:18:9e:cd:b8:9e:70:71:22:fa:2f:95:dd:ce:c6:
         4c:e7:76:0a:05:a1:88:1b:8a:bf:e6:5e:ba:e0:fa:38:e2:3d:
         1a:96:f2:07:40:49:75:15:d1:29:e1:f6:5b:1e:63:5c:a2:23:
         aa:a5:63:0c:b7:20:fc:35:0f:cc:b2:bc:c9:96:20:c6:08:12:
         73:ee:5d:38:a2:f9:c0:7c:c9:b2:3b:25:31:2a:c7:9a:11:fb:
         81:8f:c8:a1:e6:99:4a:79:7d:5a:8f:b4:14:64:22:2d:81:60:
         2c:16:ea:8a:51:d3:7d:c2:6b:6f:45:63:b6:f8:80:ad:31:54:
         86:d6:96:d5:98:8d:99:35:5e:41:7b:e8:77:be:9b:e7:69:6b:
         86:b1:89:43:79:28:fa:31:ac:c5:75:e1:fe:e4:31:b9:9a:e3:
         b2:c3:41:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 05:26:31 2026 by rpki-client