Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/dbe5733e-36c8-378c-88f2-39ec41abc78c.roa
File:                     dbe5733e-36c8-378c-88f2-39ec41abc78c.roa (raw, json)
Hash identifier:          m1PabxDCVw/PJM8+7/IY1yQACD0TiNwnx3uWECvydDw=
Subject key identifier:   61:25:D8:0E:FB:09:78:2D:41:0A:D2:E6:69:CE:49:12:3F:17:1E:74
Certificate issuer:       /CN=bc90ca9e-6412-4bd6-8621-eeaf44930b1f
Certificate serial:       010D0C9F4328584CAA271D803F27C790065AB980
Authority key identifier: 67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/dbe5733e-36c8-378c-88f2-39ec41abc78c.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     14618
IP address blocks:        204.90.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:1d:80:3f:27:c7:90:06:5a:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc90ca9e-6412-4bd6-8621-eeaf44930b1f
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=bd54d511-841e-4bd7-badc-d8c42d3697e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:01:8a:4e:51:84:66:a6:b9:67:fc:98:9e:1b:
                    fa:82:68:e7:9e:20:0e:5b:5d:38:dd:49:02:a9:f4:
                    a3:14:6d:9e:4b:f6:3e:de:09:c1:71:89:65:72:b7:
                    cc:3b:fe:ec:8c:67:30:98:89:c3:7f:d9:e4:ed:50:
                    c2:1e:4f:9c:66:1b:7c:ed:cc:cb:48:ea:6a:c9:24:
                    5f:e4:16:cc:a4:19:e0:b8:08:57:6a:97:d5:34:12:
                    f9:c4:30:b3:81:d5:82:8e:59:19:a3:84:80:55:84:
                    7b:f0:f7:da:a7:60:a9:43:1d:3c:c3:81:d5:27:fe:
                    b5:29:cc:e4:e0:7d:d9:9b:fe:e4:eb:38:f0:84:08:
                    1a:9b:ee:39:22:ac:5c:a5:a1:25:f3:47:c4:e2:9d:
                    60:da:de:a0:ca:2c:f4:ea:43:1d:62:fc:d5:96:a4:
                    ac:29:39:2a:a9:78:70:6c:b3:24:4c:c9:1e:88:46:
                    73:fb:fa:4b:63:16:1f:ca:98:8d:07:3d:b0:37:69:
                    cd:53:01:04:61:78:e5:2a:c5:25:f9:14:e7:60:3a:
                    a7:5c:eb:10:64:77:85:8e:e1:c7:a3:35:ab:83:14:
                    e4:83:ff:33:28:81:ad:13:6d:6f:dc:da:24:17:57:
                    0f:8d:0f:c1:f6:ee:7e:0d:84:dc:90:18:52:dc:3a:
                    11:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:25:D8:0E:FB:09:78:2D:41:0A:D2:E6:69:CE:49:12:3F:17:1E:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/dbe5733e-36c8-378c-88f2-39ec41abc78c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.crl

            X509v3 Authority Key Identifier:
                keyid:67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.90.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:83:b7:ea:1d:69:4d:cd:b4:e8:1e:69:9a:09:37:80:14:7d:
         a0:7d:b8:34:c4:bf:29:89:18:68:67:b1:c0:88:3e:19:49:84:
         ee:b5:43:db:d6:34:6d:69:bb:60:47:e4:5b:0d:c8:f0:d2:e5:
         41:8e:41:77:51:94:4f:7c:53:dd:4f:4e:af:e8:28:03:b9:e8:
         b3:4e:4d:e5:9d:0e:13:d2:c5:e3:8d:fb:24:82:10:07:f0:63:
         67:2c:f6:20:d9:57:9e:b0:4a:4a:75:50:db:58:ea:31:35:17:
         b2:48:a0:5f:26:2d:51:d5:6a:e4:ca:78:35:6c:d5:0d:a0:87:
         80:d6:36:b3:4e:a3:b0:80:ca:61:2b:2f:07:b1:16:8e:42:93:
         07:ae:11:d7:6b:9a:ab:be:f0:8f:30:15:94:d9:08:ed:78:a6:
         25:41:f4:63:45:63:03:c6:5f:2d:f3:a9:30:d9:b1:c0:0e:a6:
         5f:02:a6:2b:d8:06:cc:d8:46:51:70:e9:57:b5:94:7e:9d:d0:
         3c:37:da:69:cb:48:7d:7c:97:a3:2f:fb:1c:f9:e3:24:73:37:
         37:cb:89:6a:6e:ea:61:6d:91:f1:58:9d:c7:b6:17:9f:7e:c8:
         9e:3d:02:e6:84:2b:47:55:2d:22:33:0a:56:bb:b6:3b:83:c6:
         9c:5c:92:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJx2APyfHkAZauYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmM5MGNhOWUtNjQxMi00YmQ2LTg2MjEtZWVhZjQ0OTMw
YjFmMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk
YmQ1NGQ1MTEtODQxZS00YmQ3LWJhZGMtZDhjNDJkMzY5N2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAGKTlGEZqa5Z/yYnhv6gmjnniAOW1043UkC
qfSjFG2eS/Y+3gnBcYllcrfMO/7sjGcwmInDf9nk7VDCHk+cZht87czLSOpqySRf
5BbMpBnguAhXapfVNBL5xDCzgdWCjlkZo4SAVYR78Pfap2CpQx08w4HVJ/61Kczk
4H3Zm/7k6zjwhAgam+45IqxcpaEl80fE4p1g2t6gyiz06kMdYvzVlqSsKTkqqXhw
bLMkTMkeiEZz+/pLYxYfypiNBz2wN2nNUwEEYXjlKsUl+RTnYDqnXOsQZHeFjuHH
ozWrgxTkg/8zKIGtE21v3NokF1cPjQ/B9u5+DYTckBhS3DoRrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGEl2A77CXgtQQrS5mnOSRI/Fx50MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYzkw
Y2E5ZS02NDEyLTRiZDYtODYyMS1lZWFmNDQ5MzBiMWYvZGJlNTczM2UtMzZjOC0z
NzhjLTg4ZjItMzllYzQxYWJjNzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmM5MGNhOWUtNjQxMi00YmQ2LTg2
MjEtZWVhZjQ0OTMwYjFmL2JjOTBjYTllLTY0MTItNGJkNi04NjIxLWVlYWY0NDkz
MGIxZi5jcmwwHwYDVR0jBBgwFoAUZ1ggbyYWDhdeFkLwk/8nyE63iWcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iYzkwY2E5ZS02NDEyLTRiZDYtODYyMS1lZWFm
NDQ5MzBiMWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFpcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADyDt+odaU3NtOgeaZoJN4AUfaB9uDTEvymJGGhnscCIPhlJhO61Q9vW
NG1pu2BH5FsNyPDS5UGOQXdRlE98U91PTq/oKAO56LNOTeWdDhPSxeON+ySCEAfw
Y2cs9iDZV56wSkp1UNtY6jE1F7JIoF8mLVHVauTKeDVs1Q2gh4DWNrNOo7CAymEr
LwexFo5CkweuEddrmqu+8I8wFZTZCO14piVB9GNFYwPGXy3zqTDZscAOpl8CpivY
BszYRlFw6Ve1lH6d0Dw32mnLSH18l6Mv+xz54yRzNzfLiWpu6mFtkfFYnce2F59+
yJ49AuaEK0dVLSIzCla7tjuDxpxckgE=
-----END CERTIFICATE-----
Generated at Sat Feb 21 04:54:09 2026 by rpki-client