Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/0fc8f4c5-ceae-33f4-bb61-e2384f2eaf5d.roa
File:                     0fc8f4c5-ceae-33f4-bb61-e2384f2eaf5d.roa (raw, json)
Hash identifier:          hsY6EPSmgRm7L6q7FcN15mQgb1nUpxitNe1qm6OsXNw=
Subject key identifier:   5B:31:F0:DE:B3:A3:DC:B7:81:01:B8:EF:F7:3D:BB:43:88:C0:E0:08
Certificate issuer:       /CN=cbe51a2e-768b-4b93-baac-8cae43186078
Certificate serial:       010D0C9F4328584ECBD1D2DFABAD3368D8C5AC00
Authority key identifier: C9:95:CD:3F:9F:7E:84:04:FF:F1:FC:17:A5:0C:DC:3F:E2:2F:56:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/0fc8f4c5-ceae-33f4-bb61-e2384f2eaf5d.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     394923
IP address blocks:        185.90.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/cbe51a2e-768b-4b93-baac-8cae43186078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/cbe51a2e-768b-4b93-baac-8cae43186078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:d2:df:ab:ad:33:68:d8:c5:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe51a2e-768b-4b93-baac-8cae43186078
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=0ac3c242-a364-4f16-a5c2-9f9a6238b230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e6:bf:8e:0a:b4:4d:fc:1b:fd:95:de:94:b4:
                    36:53:df:ea:97:3b:5a:4a:f5:c8:88:59:cf:cc:51:
                    13:c0:1c:5a:11:b7:e6:5c:af:d9:e2:47:79:39:09:
                    43:ab:08:9b:88:16:e4:b6:04:a1:e1:4a:15:fe:5c:
                    8b:ac:e3:da:80:88:4b:03:0f:65:fc:86:19:2d:71:
                    59:34:b1:0c:3b:5d:26:b3:9e:2d:c0:a4:73:18:c0:
                    44:98:ea:f5:cc:c2:53:0f:74:e8:26:39:30:af:2c:
                    26:70:c6:75:c3:86:d9:aa:38:91:a8:bb:9c:94:01:
                    cf:71:76:0b:47:a8:d5:6d:bf:0b:a1:cb:77:54:41:
                    a8:82:9b:4f:1b:bd:ed:ad:3c:08:37:34:63:8a:57:
                    e2:58:63:8b:e3:23:c0:1e:41:bd:e4:9a:71:39:9b:
                    02:b1:06:5f:92:1b:49:74:d8:9e:2a:05:2b:ba:0e:
                    65:07:af:75:48:ae:4d:3b:47:31:ea:1a:6c:1e:75:
                    79:2e:a5:03:4a:dc:88:64:ce:41:75:f4:0c:e5:48:
                    ad:c5:22:aa:7d:46:e5:18:90:4f:5d:f3:25:6d:de:
                    da:61:79:d6:2e:a4:dd:95:e0:77:03:b7:02:54:76:
                    26:c7:f4:02:ef:2f:19:db:c0:d6:80:89:31:39:9a:
                    a8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:31:F0:DE:B3:A3:DC:B7:81:01:B8:EF:F7:3D:BB:43:88:C0:E0:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/0fc8f4c5-ceae-33f4-bb61-e2384f2eaf5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/cbe51a2e-768b-4b93-baac-8cae43186078.crl

            X509v3 Authority Key Identifier:
                keyid:C9:95:CD:3F:9F:7E:84:04:FF:F1:FC:17:A5:0C:DC:3F:E2:2F:56:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.90.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:c6:c0:75:42:43:3d:d1:1b:3b:db:33:79:18:f4:c0:e9:5a:
         ee:b3:3d:07:51:f0:f2:44:4c:33:7b:23:60:44:a5:d0:99:0c:
         ac:e1:79:e7:24:83:dd:b1:06:be:6f:86:ab:31:fa:ce:8a:15:
         d4:9d:21:59:71:ba:06:12:c7:fd:53:77:f3:5a:95:06:39:4d:
         0a:1d:90:61:db:2c:02:e9:de:d2:ed:a1:27:45:74:c3:a9:1f:
         a2:3e:70:32:41:e7:8f:a1:44:f8:60:b6:55:e9:8c:ca:2d:e5:
         a9:bd:b0:91:d1:dd:64:2f:15:f1:f6:20:81:2a:b5:a5:dd:1d:
         5b:15:b2:d0:e9:20:b7:f7:ad:1a:9f:8a:4c:ee:c6:b3:b9:ff:
         af:a9:c9:19:ef:34:fc:b2:e6:b4:3f:64:ec:c7:0c:a2:67:b0:
         a2:bf:c5:4b:28:ce:43:fe:9c:2c:42:01:09:96:4b:0c:ea:8f:
         0b:95:26:c7:0f:ad:28:7d:33:7c:6c:df:40:15:1b:66:da:fc:
         1a:6b:1e:3d:7c:b1:d2:22:de:de:05:03:4e:04:50:64:f0:09:
         6d:ee:13:cf:ee:e9:9f:40:5e:4b:76:9f:bd:60:bd:a8:f3:3d:
         d1:b2:9d:e6:ae:11:5e:8a:c2:53:8d:7c:bb:16:8b:ea:94:11:
         23:17:bd:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0dLfq60zaNjFrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2JlNTFhMmUtNzY4Yi00YjkzLWJhYWMtOGNhZTQzMTg2
MDc4MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk
MGFjM2MyNDItYTM2NC00ZjE2LWE1YzItOWY5YTYyMzhiMjMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOa/jgq0Tfwb/ZXelLQ2U9/qlztaSvXIiFnP
zFETwBxaEbfmXK/Z4kd5OQlDqwibiBbktgSh4UoV/lyLrOPagIhLAw9l/IYZLXFZ
NLEMO10ms54twKRzGMBEmOr1zMJTD3ToJjkwrywmcMZ1w4bZqjiRqLuclAHPcXYL
R6jVbb8Loct3VEGogptPG73trTwINzRjilfiWGOL4yPAHkG95JpxOZsCsQZfkhtJ
dNieKgUrug5lB691SK5NO0cx6hpsHnV5LqUDStyIZM5BdfQM5UitxSKqfUblGJBP
XfMlbd7aYXnWLqTdleB3A7cCVHYmx/QC7y8Z28DWgIkxOZqolwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFsx8N6zo9y3gQG47/c9u0OIwOAIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYmU1
MWEyZS03NjhiLTRiOTMtYmFhYy04Y2FlNDMxODYwNzgvMGZjOGY0YzUtY2VhZS0z
M2Y0LWJiNjEtZTIzODRmMmVhZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2JlNTFhMmUtNzY4Yi00YjkzLWJh
YWMtOGNhZTQzMTg2MDc4L2NiZTUxYTJlLTc2OGItNGI5My1iYWFjLThjYWU0MzE4
NjA3OC5jcmwwHwYDVR0jBBgwFoAUyZXNP59+hAT/8fwXpQzcP+IvVuMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jYmU1MWEyZS03NjhiLTRiOTMtYmFhYy04Y2Fl
NDMxODYwNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVr0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAArGwHVCQz3RGzvbM3kY9MDpWu6zPQdR8PJETDN7I2BEpdCZDKzheeck
g92xBr5vhqsx+s6KFdSdIVlxugYSx/1Td/NalQY5TQodkGHbLALp3tLtoSdFdMOp
H6I+cDJB54+hRPhgtlXpjMot5am9sJHR3WQvFfH2IIEqtaXdHVsVstDpILf3rRqf
ikzuxrO5/6+pyRnvNPyy5rQ/ZOzHDKJnsKK/xUsozkP+nCxCAQmWSwzqjwuVJscP
rSh9M3xs30AVG2ba/BprHj18sdIi3t4FA04EUGTwCW3uE8/u6Z9AXkt2n71gvajz
PdGyneauEV6KwlONfLsWi+qUESMXve8=
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:50:01 2026 by rpki-client