Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e1fa29c9-ec58-3ee2-98fb-ae365eaa70ad.roa
File:                     e1fa29c9-ec58-3ee2-98fb-ae365eaa70ad.roa (raw, json)
Hash identifier:          DUj6Er/yuDiMzHTlTzMuI4+PWwlpWiSRF8k9rcLlePY=
Subject key identifier:   0E:93:9D:09:9B:89:CA:FC:AF:1A:D9:D0:32:5C:BA:07:66:7A:1B:5E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B98CB0FED336E6BA45EC1A5C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e1fa29c9-ec58-3ee2-98fb-ae365eaa70ad.roa
Signing time:             Tue 21 Oct 2025 15:59:43 +0000
ROA not before:           Tue 21 Oct 2025 15:59:43 +0000
ROA not after:            Mon 19 Jan 2026 16:59:43 +0000
asID:                     22773
IP address blocks:        24.253.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:cb:0f:ed:33:6e:6b:a4:5e:c1:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct 21 15:59:43 2025 GMT
            Not After : Jan 19 16:59:43 2026 GMT
        Subject: CN=b837f019-775b-4c9c-8730-ee2aaca403ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0f:b7:93:3b:26:e7:41:66:a7:41:08:12:c8:
                    86:d6:39:6b:aa:59:9a:89:a0:6e:b7:cb:4b:90:ce:
                    1c:2e:69:70:44:ce:08:82:c2:dd:ca:2d:b0:4f:39:
                    d1:1b:20:04:33:5a:6d:7b:49:02:e0:e0:92:d9:ee:
                    90:65:37:cb:6b:88:77:7a:2a:4e:61:ef:98:20:1b:
                    af:1c:20:a2:62:6b:00:de:5b:c4:0c:6d:a5:00:4d:
                    09:aa:29:d1:81:b6:02:f5:51:5e:57:c6:04:ac:6f:
                    8b:c9:66:56:e5:76:97:26:33:09:0e:7f:f4:4d:06:
                    20:51:89:e3:c5:90:ac:26:2a:20:c2:5b:e5:e9:06:
                    d4:16:9e:6c:47:79:10:c2:a7:d4:4a:48:db:5e:ab:
                    ab:72:26:48:3a:03:79:aa:75:91:d5:e0:9b:87:b5:
                    ae:a7:61:5b:b9:a6:bc:3a:e8:92:ad:5b:bc:a9:92:
                    c7:14:db:4e:b0:ef:ee:b2:02:0d:06:9c:43:97:05:
                    ed:d2:cf:3e:80:08:8c:d0:55:52:92:c0:b6:14:8f:
                    a1:62:f7:e8:f1:e1:33:fb:7e:82:67:59:60:15:32:
                    19:10:de:b7:7a:81:31:0a:68:67:76:26:9f:a7:d3:
                    cc:7f:cf:63:2d:04:d0:6a:1d:32:67:fd:4a:98:c9:
                    14:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:93:9D:09:9B:89:CA:FC:AF:1A:D9:D0:32:5C:BA:07:66:7A:1B:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e1fa29c9-ec58-3ee2-98fb-ae365eaa70ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.253.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f1:7e:02:b8:d4:2a:38:bb:af:d8:fb:7c:5d:ec:fd:df:0a:
         46:f6:8f:09:ca:1c:a5:b8:e8:e7:eb:7b:15:ff:e3:5a:4c:05:
         4b:19:b9:88:b6:29:0b:2f:d2:d9:dd:e9:9c:f3:96:60:c3:27:
         1e:0d:71:54:de:c9:7d:ce:9a:e8:88:de:f9:7c:05:08:59:72:
         9f:af:5a:28:9c:45:86:b0:dc:c7:01:4f:b3:e5:23:76:29:a0:
         b3:8e:de:9a:88:18:02:c6:b0:46:6f:7d:d7:c4:1a:bc:f9:f6:
         a6:9c:e3:94:20:7e:d5:bf:20:93:5c:86:31:fa:a6:18:1e:14:
         1f:74:1e:6f:4b:2b:03:a9:f0:49:70:8e:44:ea:8e:64:9b:9e:
         e5:e1:99:ce:07:03:21:08:1d:1f:8b:26:8a:11:dd:f7:b4:9d:
         95:c8:fa:91:b9:5a:71:9b:31:09:70:ad:43:94:93:14:01:d5:
         d1:ac:27:1c:0f:73:b4:fc:df:cd:9f:e7:d5:17:6c:99:83:ca:
         ae:cb:af:1e:79:08:f0:3d:2b:23:16:cc:77:17:69:fc:85:c6:
         b8:2a:72:f5:d1:e2:b0:f7:85:37:bc:ab:e6:33:29:3e:39:2a:
         82:a9:c3:ae:86:f5:dd:91:d1:cf:6e:01:e8:09:c5:29:67:5a:
         4b:b5:90:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 17:19:15 2025 by rpki-client