Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/f90b4590-c590-33d3-abdc-f8f8f8ef88ee.roa
File:                     f90b4590-c590-33d3-abdc-f8f8f8ef88ee.roa (raw, json)
Hash identifier:          ZlIGi4lqhDitoR9O4Ngz4mZxoLInNO0senYhWMVF4BI=
Subject key identifier:   ED:51:2B:AA:32:97:4A:FE:25:7D:04:12:EA:5F:CA:2F:A3:26:75:53
Certificate issuer:       /CN=86cd88aa-b3dd-4226-a7ab-c41221343e0b
Certificate serial:       010D0C9F4328584F6DBD69B2DCFC8EF1B3EB7B80
Authority key identifier: 35:92:21:4D:14:54:D2:1F:CB:15:7D:07:31:D6:58:71:85:56:D5:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/f90b4590-c590-33d3-abdc-f8f8f8ef88ee.roa
Signing time:             Thu 08 Oct 2026 01:00:11 +0000
ROA not before:           Thu 08 Oct 2026 01:00:11 +0000
ROA not after:            Wed 06 Jan 2027 02:00:11 +0000
asID:                     40111
IP address blocks:        208.93.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6d:bd:69:b2:dc:fc:8e:f1:b3:eb:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cd88aa-b3dd-4226-a7ab-c41221343e0b
        Validity
            Not Before: Oct  8 01:00:11 2026 GMT
            Not After : Jan  6 02:00:11 2027 GMT
        Subject: CN=8bcb12fc-0bad-4ca0-8cc2-bff1ab65a5b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:de:df:b3:9f:80:62:95:16:8f:6b:ef:7d:
                    5b:ef:83:88:72:c8:90:b3:b4:64:50:f5:18:7a:87:
                    3a:78:84:7b:ab:59:eb:16:d3:9f:ec:7a:7c:e9:5c:
                    92:b4:98:d9:d0:4e:b2:1b:12:5b:ef:82:54:3e:4d:
                    ac:f1:21:49:2f:03:cd:2c:9f:7b:e3:36:93:8d:0a:
                    0c:64:34:48:4d:0c:8d:c9:cf:50:fb:b5:d8:6b:18:
                    a4:d3:dc:f2:24:11:d8:c4:47:36:dc:59:6d:fc:36:
                    9f:53:b3:2d:93:09:12:dd:cb:0d:9b:93:39:05:7b:
                    30:09:fc:af:bd:0d:f0:9a:98:24:bd:18:49:41:2f:
                    19:55:91:b3:14:91:7d:43:41:ba:e5:57:bd:bb:9b:
                    2a:ae:fb:80:59:95:3e:9d:68:7f:56:8c:ca:63:d0:
                    3c:8d:21:23:79:bc:97:3b:2d:db:90:86:56:81:8b:
                    67:57:82:a6:90:58:7b:22:33:82:65:be:e4:4d:20:
                    69:32:4a:b4:80:1e:b2:aa:42:93:89:e2:d8:c9:1c:
                    74:59:e5:2b:98:23:6d:37:8b:4a:2b:92:dc:45:09:
                    0b:2f:2d:8c:8f:74:7c:cf:e2:d3:b1:da:53:42:da:
                    33:ec:43:9f:1c:4b:69:71:56:a5:76:b7:4a:e8:50:
                    c6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:51:2B:AA:32:97:4A:FE:25:7D:04:12:EA:5F:CA:2F:A3:26:75:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/f90b4590-c590-33d3-abdc-f8f8f8ef88ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.crl

            X509v3 Authority Key Identifier:
                keyid:35:92:21:4D:14:54:D2:1F:CB:15:7D:07:31:D6:58:71:85:56:D5:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.93.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:be:9e:e2:f8:bf:dc:0b:c3:12:29:d7:02:43:b0:50:29:d3:
         35:86:73:64:1c:d8:44:e8:b6:e8:a0:0a:4e:ca:4a:c4:e8:06:
         d5:f9:4a:60:49:de:11:a4:c0:9c:7f:10:a2:17:11:90:6a:b8:
         60:b1:d5:e3:e1:51:30:2d:a9:83:cc:3d:1c:2a:14:d3:58:a1:
         10:d6:fe:06:fb:da:20:a9:cd:cf:73:9e:36:8f:f2:a5:c2:2d:
         57:d9:60:c7:75:dd:e6:8b:c6:38:77:95:4c:02:43:02:e6:3f:
         bc:fe:d3:15:93:98:35:8b:9f:03:70:4c:9b:46:96:e5:67:0f:
         8a:0c:ae:89:bc:3b:00:ed:6e:f1:f9:79:d3:2b:ff:fd:07:c7:
         55:85:d5:94:d0:8a:45:30:b7:fc:47:98:cb:78:43:47:3d:2e:
         92:d2:04:b3:60:86:56:7b:f2:f6:83:d6:f5:91:3c:49:29:28:
         d7:be:44:a7:04:db:d9:49:4b:11:b5:3f:9c:48:1d:fe:0e:c1:
         85:7f:20:64:87:81:11:f7:bf:a3:7e:00:4d:ed:60:3b:e4:e9:
         77:54:b0:e5:b6:9d:d0:ba:bb:c8:9d:5b:2d:b4:e0:f7:b9:51:
         f2:30:96:4a:47:b9:b1:fc:21:59:6e:d3:12:5b:16:9b:0c:97:
         a6:c2:e3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:42:49 2026 by rpki-client