Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b764a30e-da17-44ba-9cf1-a5b7fce92eac/86b37675-c40d-3a82-8a2a-b920acfbf790.roa
File:                     86b37675-c40d-3a82-8a2a-b920acfbf790.roa (raw, json)
Hash identifier:          KhUKOcltE2Nko/no1P5PKoXyeY3OnIBUE77e6UmolaA=
Subject key identifier:   21:C9:AF:D9:88:9E:6D:AC:79:B5:74:C0:D1:2C:1A:45:FA:E1:46:1F
Certificate issuer:       /CN=b764a30e-da17-44ba-9cf1-a5b7fce92eac
Certificate serial:       010D0C9F4328584EED52133B384E98FBADBD7FE0
Authority key identifier: 22:C2:E3:4C:18:49:D4:3D:55:23:A8:74:55:7D:B7:C8:53:4E:E1:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b764a30e-da17-44ba-9cf1-a5b7fce92eac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b764a30e-da17-44ba-9cf1-a5b7fce92eac/86b37675-c40d-3a82-8a2a-b920acfbf790.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     18440
IP address blocks:        204.90.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b764a30e-da17-44ba-9cf1-a5b7fce92eac/b764a30e-da17-44ba-9cf1-a5b7fce92eac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b764a30e-da17-44ba-9cf1-a5b7fce92eac/b764a30e-da17-44ba-9cf1-a5b7fce92eac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b764a30e-da17-44ba-9cf1-a5b7fce92eac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:13:3b:38:4e:98:fb:ad:bd:7f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b764a30e-da17-44ba-9cf1-a5b7fce92eac
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=f9cc09e5-8e0e-442a-9b83-4b6b10f924c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:fa:fe:af:43:c9:19:10:32:b9:6b:51:a0:
                    78:55:33:b7:0a:3b:d5:73:21:a5:2e:84:2e:d3:b7:
                    c6:21:57:a7:84:42:09:c5:9b:17:20:56:1b:d4:b0:
                    e6:20:f8:55:58:db:38:ce:68:27:ed:80:f9:85:97:
                    7e:d3:39:8a:85:2b:46:7a:2f:dc:05:c9:06:30:2a:
                    70:84:86:4c:85:76:43:1f:89:a0:7a:5a:13:7f:73:
                    13:da:3d:13:48:38:43:57:d6:1c:4e:62:99:9f:cc:
                    32:a2:6c:1c:ab:8c:d6:1d:8a:5e:6a:be:a6:e4:c2:
                    15:5c:ab:f9:e3:21:71:ea:d1:36:dc:c9:1b:f0:73:
                    4e:37:65:ff:f4:83:32:a5:4c:c9:9b:73:c3:7a:8c:
                    58:03:59:01:10:6e:9f:33:77:ac:ce:de:5d:d4:88:
                    49:10:31:b4:ad:bd:18:9a:5e:c7:59:17:95:61:90:
                    de:36:de:38:16:74:3f:f1:ee:68:fb:d4:cd:69:53:
                    d7:51:5c:29:24:9c:64:5d:98:d0:ce:ed:e2:d1:c1:
                    f1:6d:00:22:ef:4a:2b:f7:5c:4c:80:75:be:36:6e:
                    b8:c0:f4:4a:b9:73:40:2f:14:13:20:2f:35:ac:82:
                    9f:ee:9d:9f:0c:73:6a:66:b3:20:db:28:c0:1b:a0:
                    86:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C9:AF:D9:88:9E:6D:AC:79:B5:74:C0:D1:2C:1A:45:FA:E1:46:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b764a30e-da17-44ba-9cf1-a5b7fce92eac/86b37675-c40d-3a82-8a2a-b920acfbf790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b764a30e-da17-44ba-9cf1-a5b7fce92eac/b764a30e-da17-44ba-9cf1-a5b7fce92eac.crl

            X509v3 Authority Key Identifier:
                keyid:22:C2:E3:4C:18:49:D4:3D:55:23:A8:74:55:7D:B7:C8:53:4E:E1:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b764a30e-da17-44ba-9cf1-a5b7fce92eac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.90.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:2f:78:66:c4:61:4a:7c:4b:02:3f:27:81:7e:e3:08:d1:f5:
         0c:85:c8:68:23:c7:46:cf:7e:89:b6:cd:1b:af:5e:33:12:08:
         2e:b3:6a:48:5d:86:77:fe:0d:ec:1f:dd:1a:1b:95:b3:6c:ba:
         80:62:c5:86:9b:f1:45:6a:8c:6f:92:5b:94:9d:82:ba:ae:c8:
         9c:74:18:73:73:a1:a9:9b:2c:2a:31:21:be:f5:c3:94:26:8a:
         a7:de:5d:6e:0b:de:1e:28:88:73:48:52:87:b7:46:97:66:4c:
         25:61:42:d4:f4:10:d1:2c:b4:20:20:09:c7:7e:99:e0:38:c9:
         3f:6d:83:5b:a9:76:e3:b4:a1:e2:4d:1f:b6:15:f5:7c:96:61:
         76:9b:c7:7c:55:b2:fc:5f:11:fc:f0:25:85:2b:2f:30:42:da:
         15:b8:bf:59:56:e1:2f:84:c3:a8:b4:57:15:6e:a6:40:16:62:
         29:e7:5d:2a:9c:11:be:a3:18:b5:3f:48:e9:63:a4:13:9d:bc:
         37:16:2b:6b:de:f1:b1:07:64:0b:c0:f0:3e:ca:77:67:28:fa:
         50:df:2e:f4:20:61:18:1c:6a:f6:7c:20:ff:60:9e:a8:a7:a3:
         db:74:8c:5c:a9:db:81:c8:09:27:c7:ab:96:d2:a3:e4:a0:3a:
         07:e0:3b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:10:40 2026 by rpki-client