Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/7166c6dc-1bd4-3a39-b1c1-e4d0091604c5.roa
File:                     7166c6dc-1bd4-3a39-b1c1-e4d0091604c5.roa (raw, json)
Hash identifier:          lDJylEDVHfE7jZncqVWrztEOAuSY4CtGSkBO3Qo+cVY=
Subject key identifier:   36:71:9F:5B:99:9B:EA:36:10:38:47:D7:14:13:FF:0C:1A:9D:99:E6
Certificate issuer:       /CN=f6e6ee11-cd51-4809-bddc-1460c28a9121
Certificate serial:       010D0C9F4328584F77835B91EDD584229DA68900
Authority key identifier: 2F:64:D2:D2:30:94:F0:74:84:57:4C:F6:ED:28:61:F2:B1:E8:27:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/7166c6dc-1bd4-3a39-b1c1-e4d0091604c5.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     30710
IP address blocks:        208.90.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:83:5b:91:ed:d5:84:22:9d:a6:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6e6ee11-cd51-4809-bddc-1460c28a9121
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=c0dac4ce-ba4c-4c29-822d-80ff26764e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5e:3e:2a:46:6b:cd:fc:c3:66:91:33:f5:90:
                    6c:c4:63:d8:3a:f7:5e:0e:95:69:ee:4b:b9:62:fc:
                    bc:45:25:42:ec:8c:fe:be:85:78:13:96:7f:7e:90:
                    5f:7d:9b:3f:bf:33:00:3b:8a:89:97:5d:01:32:f1:
                    d2:05:3b:df:48:07:fc:b7:8a:f7:84:e9:25:ee:09:
                    2c:50:77:39:36:f0:e4:3a:c4:6b:48:bf:d0:18:39:
                    52:17:4e:81:0d:83:dc:6c:c6:d6:58:b5:10:65:6f:
                    c3:1a:f8:dd:98:dd:e9:d1:c4:5f:28:3b:d6:ae:01:
                    ed:2f:f9:09:8a:59:5a:22:39:df:46:bb:92:dd:a1:
                    5f:e8:be:6c:c2:93:d4:73:9e:b5:a0:e7:a5:db:d9:
                    2f:b3:dc:55:79:ec:cc:8f:cf:2d:70:14:82:a2:24:
                    54:d4:e0:27:08:65:88:61:c8:2d:c9:5d:77:10:71:
                    34:fe:46:05:85:2d:e2:5e:09:48:b5:ed:1c:bd:f5:
                    b5:45:37:b2:39:f1:f5:d3:ad:11:77:ae:f8:81:a1:
                    1f:ec:f8:8a:12:6e:3e:3d:77:a9:12:8d:da:5a:02:
                    e5:46:76:15:c2:48:0c:37:db:6d:ad:b4:05:a3:8a:
                    9f:46:40:b5:b7:e5:63:90:f3:60:bb:d4:8b:3a:e2:
                    ff:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:71:9F:5B:99:9B:EA:36:10:38:47:D7:14:13:FF:0C:1A:9D:99:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/7166c6dc-1bd4-3a39-b1c1-e4d0091604c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.crl

            X509v3 Authority Key Identifier:
                keyid:2F:64:D2:D2:30:94:F0:74:84:57:4C:F6:ED:28:61:F2:B1:E8:27:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:18:8d:f1:83:72:2a:29:10:77:50:de:e7:d8:1e:c8:63:c5:
         8a:c4:74:8d:55:a1:06:ac:61:b2:83:08:63:24:5b:e2:db:3a:
         20:74:9c:21:b8:6d:7b:3c:a1:79:ff:18:d6:e0:1a:c1:64:fc:
         19:d8:cd:1a:6c:b3:37:dc:6a:3c:5c:a0:95:0f:63:4d:f3:c9:
         a7:a0:31:fa:29:61:64:e1:4a:c0:3d:d1:aa:2f:c4:8d:5f:b6:
         31:19:de:03:bb:6a:79:c4:57:f0:e2:0a:e0:3b:d9:d9:c2:1f:
         35:cc:82:29:35:f6:b6:34:a3:09:11:e4:9e:29:de:ef:22:3b:
         9c:55:16:04:02:b5:a1:a6:e2:c2:4a:fe:26:c1:bc:fc:a7:92:
         76:f9:4f:a5:27:a9:85:aa:36:7f:16:37:50:12:d0:a6:b5:fe:
         1d:a6:e3:6c:f5:e7:10:28:03:f2:40:8f:49:c0:a0:6b:f2:3a:
         37:f4:f9:82:b6:f3:34:5f:3a:13:a3:a5:2d:4b:db:1f:d5:c1:
         e8:db:fb:bd:0a:63:ff:2f:86:b6:4c:bb:ca:ab:10:21:84:2e:
         e9:0d:d5:b3:fe:84:3d:58:8c:d7:9c:31:66:22:99:15:54:5d:
         d4:cb:3d:e8:e7:93:a6:28:bc:b3:53:75:69:e6:b5:88:fe:52:
         7c:4c:1f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:39:51 2026 by rpki-client