Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/392f4db1-a231-33f8-8290-91a2a9966523.roa
File:                     392f4db1-a231-33f8-8290-91a2a9966523.roa (raw, json)
Hash identifier:          9RpmZtAlQI11lXQf5mvBUXOcGqNFqgqA2Nvepk4hW3U=
Subject key identifier:   16:0F:C7:46:1A:1F:48:4A:93:5D:E3:1A:5B:B6:56:30:45:0D:3F:7A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F53A6F7460C6FBEC133720DC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/392f4db1-a231-33f8-8290-91a2a9966523.roa
Signing time:             Mon 28 Sep 2026 16:43:58 +0000
ROA not before:           Mon 28 Sep 2026 16:43:58 +0000
ROA not after:            Sun 27 Dec 2026 17:43:58 +0000
asID:                     22773
IP address blocks:        184.180.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:a6:f7:46:0c:6f:be:c1:33:72:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 28 16:43:58 2026 GMT
            Not After : Dec 27 17:43:58 2026 GMT
        Subject: CN=cb8755e5-dffb-4f2d-a34b-3942d7df74fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:45:ab:fa:26:47:bb:b5:31:5e:49:a7:f1:b4:
                    1e:7d:5f:ea:a5:32:a6:bf:d3:3a:91:34:94:0e:ac:
                    24:2d:f2:f9:fd:36:52:4e:d8:45:b3:02:88:0e:cc:
                    3b:f4:de:b9:e7:cd:f9:d4:cb:57:fe:fd:73:97:f8:
                    f0:7f:6f:2e:ce:e9:66:13:bf:f1:11:1c:c3:15:6f:
                    8a:1f:23:04:7b:a5:c8:f6:b4:ee:ec:7a:90:af:b5:
                    6f:7a:71:60:dd:db:1c:92:09:e4:6e:9f:af:91:41:
                    b7:d0:9d:5c:30:7a:a5:59:53:68:32:c8:21:43:9e:
                    af:8a:cd:fe:ea:fe:a2:6b:c2:2d:43:a1:2f:18:e9:
                    23:d1:d6:64:b1:18:2b:2d:21:d9:11:44:33:1a:57:
                    12:e3:a1:eb:ec:23:e3:34:20:b3:1b:3f:2a:8e:f5:
                    92:af:29:34:ac:74:8a:ed:4f:06:ae:ab:14:60:ae:
                    3c:39:a7:c7:ac:5e:60:64:96:bd:6a:d7:f4:2a:40:
                    e8:14:db:a1:ed:21:58:89:f7:20:c8:c5:2c:c7:d0:
                    ec:6d:98:3d:fb:90:05:28:01:c8:a0:00:15:41:5d:
                    9d:90:ce:db:a7:f1:4e:ad:ef:99:3d:7a:f0:5a:7a:
                    c0:78:96:41:74:f0:5f:55:87:3a:fa:e1:ea:9d:e5:
                    8d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0F:C7:46:1A:1F:48:4A:93:5D:E3:1A:5B:B6:56:30:45:0D:3F:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/392f4db1-a231-33f8-8290-91a2a9966523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.180.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d2:46:90:c9:4b:ec:e1:8b:0d:3f:18:14:39:90:dc:6c:89:
         8c:0d:a0:d3:bc:7a:e2:e3:85:f3:6d:6b:50:c3:2a:36:09:25:
         7d:16:39:2a:00:cd:df:1b:3c:29:7f:54:ac:0b:28:85:e3:54:
         14:c7:cb:2e:c1:ed:8d:57:25:14:ff:0b:96:3c:b6:e1:57:fa:
         3d:57:9e:72:b0:47:85:ac:e4:5d:90:c7:62:cf:8b:16:60:47:
         8d:58:0f:7b:d0:b0:2f:ae:9f:04:a8:28:fa:c7:58:c4:4f:b9:
         7d:d5:4b:c2:70:dd:e8:20:26:ba:38:82:a5:bf:81:72:3c:a6:
         8a:d7:89:fe:57:5e:e0:5e:49:dd:65:e0:19:7f:77:2a:70:11:
         1f:54:f5:9c:d4:ad:19:d1:ad:76:05:5c:76:a3:6b:5e:2a:0b:
         1a:fb:85:05:dd:58:d3:0d:5a:a7:41:0b:20:04:ad:17:6d:07:
         3a:83:10:35:f2:10:d0:a7:cf:c4:fd:50:26:5c:14:13:6e:99:
         bd:92:8a:95:76:39:fd:09:4b:af:7d:fa:cf:56:4e:88:c2:2b:
         33:29:83:66:f4:cc:d9:cd:ef:5d:ba:3c:90:c6:64:ae:bd:c4:
         73:a6:15:62:2b:55:a8:c5:e4:6a:3c:58:96:46:3b:04:7a:ee:
         4e:86:94:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:17:31 2026 by rpki-client