Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/90d50a84-654c-3a63-a654-6ce6b505f883.roa
File:                     90d50a84-654c-3a63-a654-6ce6b505f883.roa (raw, json)
Hash identifier:          n8HR1fegwriAesoqd2FsSSP9qeniaV/flfVl4ThRXXc=
Subject key identifier:   44:1D:2B:F5:08:B8:19:85:09:CE:5B:A9:6F:B2:F8:AA:AD:86:12:95
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F5F2DFA471B3EA108251943C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/90d50a84-654c-3a63-a654-6ce6b505f883.roa
Signing time:             Fri 02 Oct 2026 19:49:53 +0000
ROA not before:           Fri 02 Oct 2026 19:49:53 +0000
ROA not after:            Thu 31 Dec 2026 20:49:53 +0000
asID:                     215607
IP address blocks:        68.164.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:2d:fa:47:1b:3e:a1:08:25:19:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  2 19:49:53 2026 GMT
            Not After : Dec 31 20:49:53 2026 GMT
        Subject: CN=b321a937-3c3e-4124-b793-6452a41b9310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:76:47:90:9c:70:d4:69:2a:db:dc:27:dd:42:
                    89:bf:bb:f5:33:33:51:c5:d9:ed:2f:e7:d9:ec:20:
                    6c:8f:91:e4:51:5d:36:3d:f6:a2:e4:92:d9:49:7b:
                    b5:40:0a:f9:85:c6:67:d8:65:a2:28:47:ac:7c:eb:
                    33:22:91:4a:46:8a:7d:65:cf:2d:b2:44:4b:01:c7:
                    37:b0:32:65:15:d5:6f:e8:10:44:db:6b:6f:94:b5:
                    63:83:17:ba:2c:cb:f5:e8:31:e8:7d:96:7a:7c:42:
                    fe:58:e3:41:df:c1:4e:2e:08:90:3b:32:8d:83:00:
                    b5:6c:61:74:47:48:8d:80:41:e5:f4:a2:83:ae:50:
                    38:84:d4:b2:60:69:35:cc:81:30:f6:a9:09:9d:f1:
                    52:22:f5:7a:0a:03:d9:ee:89:9c:0e:3b:ff:ad:c2:
                    38:c0:11:5c:ea:77:f7:a8:d2:8f:72:13:49:46:d2:
                    95:bb:be:2c:bb:75:d3:72:68:b7:a9:38:f0:4e:8d:
                    95:49:dc:0e:ea:ae:55:c8:06:a2:61:c7:93:3a:08:
                    85:f8:d0:1d:5c:39:be:30:b1:75:6a:27:8d:70:96:
                    00:57:ea:68:4d:45:5a:7b:13:35:64:d2:1b:4b:a5:
                    b3:82:f6:e5:05:c5:4c:c5:f2:63:b2:7f:0f:15:6b:
                    f8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1D:2B:F5:08:B8:19:85:09:CE:5B:A9:6F:B2:F8:AA:AD:86:12:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/90d50a84-654c-3a63-a654-6ce6b505f883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.164.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:44:50:39:de:37:8d:5a:72:31:16:55:d7:e0:c0:51:e7:c1:
         9a:03:0e:72:30:2f:d3:d8:6f:4c:4b:75:e7:6f:a8:90:2d:61:
         5f:16:f3:fb:6f:f7:e6:6e:9d:55:9a:80:3a:c3:02:a7:6e:a5:
         34:00:9e:46:1b:9c:26:cf:72:d4:39:0f:45:5f:d7:d2:3d:8c:
         53:e5:06:e5:63:a3:fe:e1:20:97:8f:1c:94:91:6a:19:ba:ab:
         19:54:c2:bb:d3:37:0f:21:70:0e:9a:70:cc:73:db:b4:98:cb:
         33:ac:a4:56:58:c6:69:21:f5:99:ce:2e:7e:1a:ce:d4:82:24:
         7d:24:9e:00:28:c5:bc:2e:06:78:95:4b:f1:62:0c:19:38:e2:
         25:04:ac:17:f8:92:4a:b5:4a:8f:f7:72:da:5e:b2:ce:7f:1f:
         00:10:ae:23:f7:1b:3a:24:73:bf:97:38:0d:84:73:65:c7:1f:
         f4:e2:63:d8:d4:c6:e9:09:82:14:7c:3b:54:ab:bd:47:84:50:
         1f:9a:9d:8f:51:c5:6c:50:17:dc:95:f0:02:80:e2:80:76:6c:
         5f:df:55:fe:ab:1c:ca:58:a1:04:62:c3:cc:da:94:d3:59:56:
         17:04:f2:5f:08:63:f1:c7:8f:6c:7c:2a:ce:61:07:38:b9:97:
         cb:58:02:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:51:37 2026 by rpki-client