Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/90d14445-359f-3bce-b25d-737a5ca2f9ae.roa
File:                     90d14445-359f-3bce-b25d-737a5ca2f9ae.roa (raw, json)
Hash identifier:          WqJEGkKVRhhk5IcU/XUjYdHnu+qyJdug+IzDziwoKWE=
Subject key identifier:   4E:46:FC:06:0D:EA:E4:0B:73:FF:7F:FC:BF:78:BF:D5:4A:4C:3C:D9
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584F11A1403A2EB81EA6AD130500
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/90d14445-359f-3bce-b25d-737a5ca2f9ae.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     62610
IP address blocks:        128.1.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a1:40:3a:2e:b8:1e:a6:ad:13:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=1918aa8a-2164-4966-a66b-2b31f06df12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:85:1d:98:c8:f4:6c:f5:c4:a6:5d:16:a6:f8:
                    1a:52:3b:e6:a2:18:3a:e0:12:b4:98:c4:c6:dd:ee:
                    ba:cf:66:69:bb:4c:4d:03:e5:8a:88:3b:99:16:4f:
                    f7:e5:0d:13:a6:ad:1b:d6:47:1a:c5:4c:5e:c2:fd:
                    01:e0:a1:44:94:5e:1c:d4:1b:f8:61:bc:ca:b7:24:
                    b1:ee:d9:31:c6:be:d2:33:ec:45:ac:2c:a2:fb:82:
                    f3:0c:6e:a1:8f:76:ff:2f:34:16:9b:8a:f1:61:4e:
                    a9:8e:60:2d:5f:75:66:8c:04:72:58:79:5c:f2:0d:
                    5e:b5:fb:16:52:93:13:03:2e:d6:62:63:8c:fd:91:
                    7c:39:54:2d:d4:d4:8e:f8:cb:30:22:4d:20:5f:eb:
                    5d:c2:68:7b:e5:be:7c:3a:71:e8:c9:dd:d1:a2:c2:
                    60:59:6d:89:c8:20:c5:46:fe:61:63:29:cf:0f:3f:
                    34:61:2d:99:81:a8:36:31:eb:95:9b:cb:b1:c0:53:
                    3f:8c:e3:15:95:f5:da:a5:ee:a8:df:01:4f:ee:06:
                    98:91:c7:b8:20:94:0d:ab:41:9a:64:f9:fc:63:97:
                    f9:03:88:18:13:29:e5:0f:bf:78:75:2c:eb:a4:fc:
                    00:9e:ff:f3:da:b6:46:37:e9:80:1c:28:63:1a:61:
                    58:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:46:FC:06:0D:EA:E4:0B:73:FF:7F:FC:BF:78:BF:D5:4A:4C:3C:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/90d14445-359f-3bce-b25d-737a5ca2f9ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b6:e2:fa:48:a3:2b:40:22:33:4d:78:d4:21:41:6a:50:02:
         bf:27:e4:c7:38:2f:41:ce:84:99:fb:c0:2a:1a:25:a5:a3:bd:
         b6:5f:a5:68:c9:e1:76:09:34:fa:1c:80:ad:19:02:2e:3c:ce:
         05:6a:6c:c1:05:ea:c9:2b:d0:cd:db:11:65:f5:ec:e3:a2:7a:
         9a:5e:65:ea:93:ce:5f:69:3f:e5:9b:7e:ba:4e:4c:40:60:57:
         4e:85:37:a4:90:9d:ac:53:96:a7:58:ef:23:f0:fd:79:6e:d8:
         18:e6:70:1e:98:ec:65:2c:c5:8a:1e:cf:c4:d2:df:16:ff:f8:
         c0:23:d5:86:b9:7b:62:89:1b:2f:66:c2:dd:80:74:22:48:b4:
         07:4b:d6:5b:c0:3b:a2:e2:10:ed:71:7e:49:b5:f6:c0:62:b6:
         21:13:95:27:c1:a6:a4:82:73:15:62:84:43:ef:75:cd:46:c3:
         d9:e8:64:1f:50:b9:d6:22:19:51:99:9f:11:ff:74:4c:a9:5c:
         c7:80:b7:70:8e:3f:95:71:93:cb:be:76:d6:b0:33:a9:ea:e0:
         0b:ee:c1:97:ce:4d:db:8e:4d:f6:2c:25:0d:c4:4b:4d:2c:33:
         bc:d3:3d:fe:fd:79:dc:a0:b1:0b:f9:da:c1:75:ce:c6:c8:76:
         c2:40:1f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:54:39 2026 by rpki-client