Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/0bf8cb75-8dd3-384c-bda3-b60b4e0a832f.roa
File:                     0bf8cb75-8dd3-384c-bda3-b60b4e0a832f.roa (raw, json)
Hash identifier:          GNMUxI7jZIY5Qht9hfpu+275xMz7ziI52jBd70V0IpM=
Subject key identifier:   DA:BB:B1:72:FD:76:FC:BB:05:B9:D5:99:1F:50:B2:45:A4:21:23:3C
Certificate issuer:       /CN=5ef47802-71c5-4583-b0cb-8a40855a7c8b
Certificate serial:       010D0C9F4328584F7A4D946009FE387E993447C0
Authority key identifier: 84:C5:9C:97:A0:F3:86:4C:E8:E3:92:B4:78:80:B0:D2:08:F3:67:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/0bf8cb75-8dd3-384c-bda3-b60b4e0a832f.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     26239
IP address blocks:        208.90.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/5ef47802-71c5-4583-b0cb-8a40855a7c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/5ef47802-71c5-4583-b0cb-8a40855a7c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:94:60:09:fe:38:7e:99:34:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef47802-71c5-4583-b0cb-8a40855a7c8b
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=737efe6e-1b77-4853-a2b9-ae4c87c9e483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:47:66:f7:58:cb:2b:0b:4f:a9:64:71:6f:42:
                    17:be:ed:30:f9:e0:89:c0:63:37:20:36:59:40:85:
                    1c:69:36:62:00:d0:ea:18:de:31:b1:20:6c:4f:32:
                    fb:f0:14:e7:03:fc:00:db:4f:a5:7a:4e:19:17:23:
                    1b:54:ab:a9:06:ac:00:53:59:f4:1d:7b:bb:aa:bc:
                    58:99:4a:53:65:19:06:b2:32:e3:42:b5:a7:f0:ee:
                    aa:4f:a3:a2:16:a5:86:c3:21:e7:03:2f:93:4d:e9:
                    e8:4f:88:23:e8:87:3a:a7:17:7a:db:f9:1c:0c:4d:
                    47:a1:ce:5e:20:33:15:2a:81:1f:22:98:74:51:d2:
                    ef:50:9e:c3:5b:55:f7:db:18:16:a6:52:c6:57:46:
                    01:66:a6:cc:65:00:ab:a0:a0:50:13:d5:0b:ec:bb:
                    98:cb:9c:04:ea:61:eb:bb:f0:95:57:6d:b9:df:6f:
                    5e:75:7b:6d:8f:82:6c:db:d8:d3:8d:cc:1e:4e:50:
                    b7:86:d3:15:e3:6e:ea:73:39:c9:e2:0a:5b:25:32:
                    3a:cc:7a:99:28:97:0d:e5:6f:c4:8b:93:ee:2f:77:
                    17:36:72:c3:5f:c8:db:da:b8:62:3c:9d:a6:96:82:
                    9b:3e:83:4b:ac:50:e7:a4:36:68:9d:d4:63:58:17:
                    42:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BB:B1:72:FD:76:FC:BB:05:B9:D5:99:1F:50:B2:45:A4:21:23:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/0bf8cb75-8dd3-384c-bda3-b60b4e0a832f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/5ef47802-71c5-4583-b0cb-8a40855a7c8b.crl

            X509v3 Authority Key Identifier:
                keyid:84:C5:9C:97:A0:F3:86:4C:E8:E3:92:B4:78:80:B0:D2:08:F3:67:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:8e:98:49:bf:6e:ee:52:c4:f0:4c:55:0a:b2:0e:0e:c2:de:
         e8:4b:84:04:94:84:95:28:7c:05:29:eb:9a:e5:e3:17:cc:80:
         d0:d4:d7:6f:38:c2:5e:34:3c:9c:06:ac:41:63:65:66:7f:8e:
         f7:92:70:6c:49:8d:f5:2c:5c:fb:16:76:1f:8b:33:ff:d0:ec:
         b7:95:ca:ac:7c:5a:7e:ed:f3:8a:de:4e:fe:4e:f5:9c:fb:f4:
         c4:96:8a:4d:db:c9:a1:ea:f1:e2:2b:5c:05:cf:a1:b5:38:f7:
         0b:fb:3e:c3:46:ef:9d:44:b2:d2:90:14:19:d6:e9:f1:28:80:
         66:f0:0e:1e:44:e8:dc:4e:3a:75:60:d6:88:91:8d:a7:0c:fe:
         7c:32:bc:72:49:e9:0a:5b:f6:22:94:7a:b4:88:cb:95:a0:46:
         21:1e:d2:c1:07:ad:0d:b1:11:0d:97:2a:b3:5f:03:4a:db:8e:
         a2:a8:88:99:bd:45:ef:cc:d7:6d:11:d6:da:09:0a:ef:9f:82:
         83:44:d7:cd:2e:bc:07:fd:11:7a:c9:e4:cb:76:2a:95:90:46:
         1c:8b:df:d0:38:1f:5e:0b:54:cd:17:25:4e:b9:68:43:45:b8:
         d5:12:fe:ba:98:13:e4:5e:3c:72:e1:1f:8b:00:fa:ca:8f:60:
         31:2e:dd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:07:44 2026 by rpki-client