Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/90a9dec8-a24a-3de0-9901-58e74af63e3e.roa
File:                     90a9dec8-a24a-3de0-9901-58e74af63e3e.roa (raw, json)
Hash identifier:          QoCiDLj0F1UeH6ACor+6g6zWZtTKhGsBAHx8xApKKRw=
Subject key identifier:   E7:6E:CF:E7:C0:0A:37:18:9D:22:94:4B:61:C4:16:64:65:DF:C5:8C
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584E2AD45AA72A923FAD13733380
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/90a9dec8-a24a-3de0-9901-58e74af63e3e.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     22147
IP address blocks:        208.118.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:5a:a7:2a:92:3f:ad:13:73:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=5a8eaeb9-8e7d-40b3-88c4-b1bda9bc3b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:00:25:ef:fa:89:e0:5e:56:0d:ae:9f:c4:81:
                    39:3f:ce:d9:95:d9:69:45:3e:60:bc:73:5a:4f:35:
                    17:3d:a8:75:31:f2:36:e9:a6:49:24:8f:fa:d6:2f:
                    21:e3:6a:d3:7f:57:26:b8:01:db:4f:f7:36:f7:26:
                    87:da:dc:a4:3b:14:af:59:d5:40:b6:37:ca:09:11:
                    ef:c5:41:88:ec:03:60:3f:16:c8:86:aa:94:eb:cc:
                    4b:06:ce:12:43:5d:7f:4e:89:20:c1:88:d8:f0:c9:
                    a7:35:3f:fb:5d:c5:0b:24:4d:25:d8:8d:fc:10:1a:
                    fd:23:c1:cf:4e:bd:f6:ab:cd:46:78:3d:66:86:77:
                    40:af:c9:c6:ce:48:e0:b6:bb:b3:a3:e5:3e:63:63:
                    a4:d2:bf:e4:15:0a:04:28:d4:cb:cc:50:c2:92:6d:
                    74:a9:3c:8f:80:79:2f:1f:bf:88:e0:4a:c5:fb:43:
                    90:88:be:02:2d:8f:81:a5:8e:32:11:f5:dc:04:85:
                    bd:59:f0:0b:46:36:5f:7a:7a:09:85:c3:84:88:c6:
                    12:26:54:33:4f:cd:76:db:12:11:95:d1:a9:99:c0:
                    fe:64:62:27:c7:a9:8a:0a:bc:89:b9:54:0a:b1:5b:
                    49:50:4a:90:76:98:4f:50:5f:6e:0a:46:bc:e4:ef:
                    6c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6E:CF:E7:C0:0A:37:18:9D:22:94:4B:61:C4:16:64:65:DF:C5:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/90a9dec8-a24a-3de0-9901-58e74af63e3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.118.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:0d:78:61:5e:a8:6f:45:4d:fb:b2:ed:06:63:b2:12:0d:fe:
         4c:f4:ec:13:8f:5f:19:89:1e:2f:62:da:f6:f8:62:99:50:10:
         7f:6e:07:43:e5:92:17:ff:d1:1f:e2:f0:7d:d5:12:78:10:91:
         e7:98:4b:a6:1a:82:0d:d3:2c:4c:5f:9f:39:07:ed:58:35:6f:
         79:cc:e5:74:38:91:67:86:4a:7c:5e:9b:bb:e2:f8:59:d9:4e:
         4c:cd:a9:ce:84:7b:ba:90:54:90:0d:fd:2d:d0:c4:37:b5:51:
         65:97:ac:d3:b4:79:f9:5a:3f:a2:b3:2a:47:92:52:f4:90:2e:
         1a:f0:34:fc:e6:14:a5:71:5a:95:3c:5d:d4:f4:f2:51:95:f4:
         f3:c4:35:c8:ad:99:cf:40:80:b4:e0:dd:cc:5e:38:92:e3:af:
         14:ac:8b:e6:d5:ef:c3:57:5b:c1:3d:6f:2f:58:db:ab:e2:83:
         b3:e2:27:e6:b0:f4:2f:3b:88:7a:0a:7b:e1:3b:96:61:49:b7:
         3f:23:8b:c3:3f:8a:09:bf:ab:fa:3d:fd:c6:c3:76:b9:73:02:
         d1:b5:7b:ba:f9:58:4c:c5:6c:74:ae:0d:ec:0d:4f:89:5a:36:
         43:c0:40:0f:07:bc:42:b6:bd:1d:78:5d:f5:92:87:ee:be:19:
         17:e3:74:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4q1FqnKpI/rRNzM4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5
MWRkMB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk
NWE4ZWFlYjktOGU3ZC00MGIzLTg4YzQtYjFiZGE5YmMzYjhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAAl7/qJ4F5WDa6fxIE5P87ZldlpRT5gvHNa
TzUXPah1MfI26aZJJI/61i8h42rTf1cmuAHbT/c29yaH2tykOxSvWdVAtjfKCRHv
xUGI7ANgPxbIhqqU68xLBs4SQ11/TokgwYjY8MmnNT/7XcULJE0l2I38EBr9I8HP
Tr32q81GeD1mhndAr8nGzkjgtruzo+U+Y2Ok0r/kFQoEKNTLzFDCkm10qTyPgHkv
H7+I4ErF+0OQiL4CLY+BpY4yEfXcBIW9WfALRjZfenoJhcOEiMYSJlQzT8122xIR
ldGpmcD+ZGInx6mKCryJuVQKsVtJUEqQdphPUF9uCka85O9sHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOduz+fACjcYnSKUS2HEFmRl38WMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2
MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvOTBhOWRlYzgtYTI0YS0z
ZGUwLTk5MDEtNThlNzRhZjYzZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1
NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx
OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl
ZGQ4MTkxZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HbuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEMNeGFeqG9FTfuy7QZjshIN/kz07BOPXxmJHi9i2vb4YplQEH9uB0Pl
khf/0R/i8H3VEngQkeeYS6Yagg3TLExfnzkH7Vg1b3nM5XQ4kWeGSnxem7vi+FnZ
TkzNqc6Ee7qQVJAN/S3QxDe1UWWXrNO0eflaP6KzKkeSUvSQLhrwNPzmFKVxWpU8
XdT08lGV9PPENcitmc9AgLTg3cxeOJLjrxSsi+bV78NXW8E9by9Y26vig7PiJ+aw
9C87iHoKe+E7lmFJtz8ji8M/igm/q/o9/cbDdrlzAtG1e7r5WEzFbHSuDewNT4la
NkPAQA8HvEK2vR14XfWSh+6+GRfjdJw=
-----END CERTIFICATE-----
Generated at Fri Jul 3 00:49:17 2026 by rpki-client