Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/007f24cc-fba9-31c7-874d-1e34664494bf.roa
File:                     007f24cc-fba9-31c7-874d-1e34664494bf.roa (raw, json)
Hash identifier:          TxnhB70XBClKtuFRQT0YE+6G0/ioQGw5me+IHmxSm1U=
Subject key identifier:   46:67:C4:B6:EC:D1:77:60:6A:D1:8F:8A:D9:22:28:1F:3B:88:5D:9A
Certificate issuer:       /CN=911afcc4-db22-4282-acca-e1e676a5ae20
Certificate serial:       010D0C9F4328584F0D6CE6F34CDA5E886F28BC80
Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/007f24cc-fba9-31c7-874d-1e34664494bf.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        199.68.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:e6:f3:4c:da:5e:88:6f:28:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=ea8debd5-21ba-4ce6-ba8a-72fe3e9fd8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ea:54:8c:57:ad:c0:96:bd:5f:8c:ff:de:db:
                    07:39:85:92:b9:9c:64:80:67:da:04:73:b2:b7:6f:
                    98:5f:e3:0d:10:f0:56:ef:7f:ae:cd:c5:a6:e1:09:
                    ef:2c:74:b7:44:17:3e:f5:40:a2:a9:b9:a1:28:ce:
                    ed:62:6f:27:17:1c:5f:17:94:bd:5d:02:4c:39:fe:
                    30:b1:db:b5:11:40:4a:69:dc:6c:96:5e:3b:36:b1:
                    98:99:fd:d0:55:6c:74:92:de:94:9e:2a:c8:2d:08:
                    e5:7b:c4:16:6b:47:96:8c:26:8f:b5:97:2e:7e:c0:
                    aa:f7:c5:a8:a2:f4:cc:92:86:65:40:a8:7e:45:65:
                    f3:db:09:34:18:0c:35:8d:48:c9:a0:50:5b:36:66:
                    c6:a9:9c:82:b3:c8:c1:78:9a:e9:0f:ed:e2:27:41:
                    a2:4b:7c:3c:7f:08:bd:0a:19:51:6f:7e:4c:b6:12:
                    9e:77:d8:46:f4:17:e9:5d:4c:c5:b0:b4:07:f6:5b:
                    58:dc:d3:ca:bb:75:6b:2e:f6:b0:da:40:bb:21:13:
                    44:59:0c:11:29:fb:9c:ad:82:8a:f5:b0:65:eb:ac:
                    a8:b8:58:86:62:93:46:70:cc:c0:e3:62:42:2b:ab:
                    28:b1:db:82:f0:5a:77:7d:90:ba:62:c7:da:7f:11:
                    a4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:67:C4:B6:EC:D1:77:60:6A:D1:8F:8A:D9:22:28:1F:3B:88:5D:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/007f24cc-fba9-31c7-874d-1e34664494bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl

            X509v3 Authority Key Identifier:
                keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:95:2e:4b:cc:8d:1b:c3:00:63:97:13:0f:7c:c9:5e:a5:ba:
         21:cb:89:d7:23:6b:c2:48:9a:6b:ee:21:55:3b:d7:33:28:0d:
         6c:58:47:f3:72:a4:39:59:5c:5a:bd:89:24:3a:9b:f8:54:7c:
         09:3b:12:dc:4a:f5:51:94:91:07:d7:0c:d0:12:45:dc:a6:46:
         d2:7b:68:65:d7:c9:58:a4:dc:16:00:96:75:6b:e8:cb:d9:76:
         c6:e7:45:a3:9d:11:06:8e:be:b1:2f:d4:4d:dd:da:4a:75:4e:
         ac:c9:c9:97:4d:2c:ec:2c:17:85:dd:9f:f6:4a:72:61:2e:b0:
         88:25:8a:bd:17:a0:de:bf:c6:57:7c:58:6c:b5:c7:84:57:8b:
         ee:d5:89:fd:fc:01:96:43:cc:02:58:f0:9d:49:40:01:37:3e:
         28:8a:f6:71:62:b0:48:df:b2:29:20:01:d1:e0:91:0a:e2:54:
         99:24:f5:2d:28:d4:39:ff:ea:fb:35:d8:fa:5e:22:07:49:e9:
         17:09:30:48:cc:b8:c5:1e:90:9f:1a:56:be:a5:83:b4:df:51:
         7f:c2:6f:31:79:ae:f0:ef:fd:59:5e:b1:db:8d:c5:10:bb:cf:
         51:c2:b0:63:d7:be:ed:b8:66:20:a5:11:ef:e3:cc:91:9a:b8:
         f4:9b:5d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:17:05 2026 by rpki-client