Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/4e3a98b3-72e3-3835-8bbc-635973f0749d.roa
File:                     4e3a98b3-72e3-3835-8bbc-635973f0749d.roa (raw, json)
Hash identifier:          E4ebwyDRXY0aA2paQPhb5LyLG2C2fdnRlMTn7reIj/Q=
Subject key identifier:   A5:FB:1C:4D:01:29:46:30:CA:19:7B:2A:7D:50:23:AA:DD:6E:DE:E7
Certificate issuer:       /CN=a05d07d2-1994-4f02-bebc-4bdc0aec1c5b
Certificate serial:       010D0C9F4328584F6A5A24CE72AD81B5B0A41C80
Authority key identifier: 69:ED:05:15:B3:4E:6B:49:E1:4A:A4:CE:3F:BF:7B:8F:A3:99:A1:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/4e3a98b3-72e3-3835-8bbc-635973f0749d.roa
Signing time:             Tue 06 Oct 2026 19:52:46 +0000
ROA not before:           Tue 06 Oct 2026 19:52:46 +0000
ROA not after:            Mon 04 Jan 2027 20:52:46 +0000
asID:                     8103
IP address blocks:        204.90.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6a:5a:24:ce:72:ad:81:b5:b0:a4:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a05d07d2-1994-4f02-bebc-4bdc0aec1c5b
        Validity
            Not Before: Oct  6 19:52:46 2026 GMT
            Not After : Jan  4 20:52:46 2027 GMT
        Subject: CN=5a328763-f7ba-475f-8875-bc7424fd189f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:11:64:61:e5:b0:54:57:2a:bd:8c:31:c7:2f:
                    31:75:75:49:ea:c8:9d:5b:5e:95:36:ba:d4:fd:7f:
                    2c:0b:f7:b2:9e:f4:ab:62:62:12:81:0f:8c:73:3c:
                    93:0a:d8:f9:3c:3a:2d:04:b2:d7:8b:a1:17:3b:19:
                    7b:ae:31:af:43:1d:bd:59:3d:4f:62:0a:4b:a5:a0:
                    ba:88:ef:b1:64:de:f0:04:29:c6:8b:e0:7b:8b:8c:
                    e4:44:13:bb:dd:b3:29:0f:77:dd:67:07:e4:69:dd:
                    39:a8:e3:cb:48:a0:0d:c9:14:ae:96:97:db:57:b1:
                    cf:7f:b1:94:e5:b9:a7:c8:97:a7:2b:77:82:26:83:
                    3d:e9:73:58:3a:3c:eb:c7:da:00:50:9b:22:16:45:
                    67:e7:10:13:b3:87:64:c6:db:2a:d4:71:55:0f:84:
                    b9:6f:31:be:ca:03:c4:0b:51:c3:7a:c0:2b:7c:f6:
                    b0:51:7c:55:c8:ac:7a:5f:08:40:e8:88:b8:ca:34:
                    44:73:8d:68:50:c2:ab:b1:0f:9b:e0:71:bc:67:16:
                    27:e3:ac:bd:67:40:21:e6:52:04:74:24:2f:c5:70:
                    0a:a6:ca:51:c9:88:49:35:ab:7d:7b:21:6c:34:90:
                    e3:48:56:f6:b6:85:d3:b7:e7:36:c9:49:90:72:5c:
                    ed:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FB:1C:4D:01:29:46:30:CA:19:7B:2A:7D:50:23:AA:DD:6E:DE:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/4e3a98b3-72e3-3835-8bbc-635973f0749d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:69:ED:05:15:B3:4E:6B:49:E1:4A:A4:CE:3F:BF:7B:8F:A3:99:A1:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.90.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:c9:a5:7d:09:ff:16:eb:1e:33:7d:52:9f:28:67:b6:2b:7b:
         2d:cb:58:8d:ba:58:be:a7:f7:e8:d5:45:e9:48:69:fd:00:3d:
         8f:86:bd:d1:df:23:4f:19:87:d7:25:0c:a6:37:4f:6a:98:23:
         4b:af:f5:7e:4c:ae:29:24:4b:05:3d:af:85:51:ca:8d:e0:c4:
         ee:e8:50:26:be:5c:16:2b:63:e2:ed:72:83:dc:79:a6:24:59:
         9e:63:17:d3:8c:04:88:52:3a:f6:a3:1e:cb:f2:c6:28:6e:a6:
         92:6b:17:0d:e9:60:1f:cb:57:de:5b:d6:1e:e3:75:a4:c6:23:
         6b:1b:be:ce:18:5b:af:5c:b7:6b:05:de:f7:03:be:94:dd:56:
         52:3a:f7:06:6b:54:50:25:82:56:ed:9c:b3:70:ab:c1:32:e2:
         f4:db:eb:eb:d0:54:42:ff:6b:09:6a:7c:32:31:4f:0d:05:45:
         63:74:55:97:b0:00:c2:bb:67:a7:af:d5:36:ac:98:af:81:e4:
         b5:fd:88:86:4c:e5:8e:89:91:81:27:3d:97:0c:a7:8d:ab:0d:
         aa:33:8f:57:e2:70:4c:0b:dc:50:28:3d:d8:65:5e:9f:63:9a:
         58:0e:a1:3d:1f:61:2a:f2:e4:c8:33:63:44:b6:35:f0:ec:0b:
         83:23:6d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:01:23 2026 by rpki-client