Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/abb10cbd-7ad6-3df3-8c4f-bbd62f847e06.roa
File:                     abb10cbd-7ad6-3df3-8c4f-bbd62f847e06.roa (raw, json)
Hash identifier:          iHYmB9geQaegBKhiSVIwX8N59t2nzb8Mo7FvUBI/Kao=
Subject key identifier:   CF:D4:D0:3A:8B:3D:59:02:7F:59:E3:25:15:71:4B:6A:87:7F:7F:B9
Certificate issuer:       /CN=f6e6ee11-cd51-4809-bddc-1460c28a9121
Certificate serial:       010D0C9F4328584D5243C39CAC0E590DE3C9E600
Authority key identifier: 2F:64:D2:D2:30:94:F0:74:84:57:4C:F6:ED:28:61:F2:B1:E8:27:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/abb10cbd-7ad6-3df3-8c4f-bbd62f847e06.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     46620
IP address blocks:        208.90.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 31 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:c3:9c:ac:0e:59:0d:e3:c9:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6e6ee11-cd51-4809-bddc-1460c28a9121
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=5d19b89a-2a34-4c55-80b0-9cc0bf6d45aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e9:37:9d:a6:98:18:fb:1d:b0:50:f8:3f:ea:
                    07:27:d9:f4:cf:d2:2c:73:4e:48:47:e4:e8:b2:0f:
                    7f:28:98:20:86:0a:94:22:78:d3:ce:ff:4d:e5:9a:
                    92:3f:77:37:59:d9:a1:eb:64:ba:f0:d2:9d:18:97:
                    91:17:86:56:51:43:c5:5a:c4:9f:19:b0:2a:67:00:
                    dc:7b:78:9a:4c:2b:99:5f:86:d4:62:16:b0:f8:08:
                    4e:84:03:d7:88:e4:a7:83:91:8e:39:d8:3d:d6:ab:
                    6b:64:69:a8:d3:58:ad:15:60:1b:73:eb:dc:ce:18:
                    27:25:f6:48:42:a0:2e:e4:92:6f:9d:5c:62:5b:93:
                    47:8d:6b:2a:03:5e:13:3e:1b:d5:a0:f9:be:58:65:
                    af:70:4e:41:27:57:56:c3:da:7a:15:3a:f9:e5:7d:
                    ab:94:1a:a9:b1:89:20:65:d1:37:78:6c:66:e0:e0:
                    cc:5d:30:c7:f9:6f:c5:9a:25:98:a9:67:0c:0a:96:
                    d9:52:93:35:25:ed:09:f2:a7:fd:97:3b:1e:6f:81:
                    ab:05:f0:e2:94:8c:da:53:b5:d0:95:f7:1e:d6:46:
                    55:9f:24:9d:03:55:dc:da:93:ad:81:a5:e7:64:85:
                    5e:0a:d3:f3:44:d4:ed:e7:a8:f7:a9:45:c4:7b:02:
                    68:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D4:D0:3A:8B:3D:59:02:7F:59:E3:25:15:71:4B:6A:87:7F:7F:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/abb10cbd-7ad6-3df3-8c4f-bbd62f847e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.crl

            X509v3 Authority Key Identifier:
                keyid:2F:64:D2:D2:30:94:F0:74:84:57:4C:F6:ED:28:61:F2:B1:E8:27:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:23:4a:fd:87:44:21:42:9a:9c:eb:4d:e0:09:8c:50:18:90:
         2c:2e:60:c9:6b:a4:81:17:d1:5a:4c:eb:ae:83:f5:3c:b8:7a:
         83:8e:03:cf:2c:dc:1f:fc:32:28:85:3b:13:3b:61:8a:0a:5d:
         a3:ba:f9:78:0a:bc:c1:4c:89:67:a3:96:a7:44:0f:0d:93:48:
         af:f0:ed:ce:a0:2b:53:10:0a:89:a0:de:10:3c:97:2b:5d:dc:
         59:b1:81:06:ee:51:73:bf:9f:ee:d7:e2:3b:e6:c1:b4:6b:17:
         f6:a9:13:ab:56:f8:f8:f9:d5:3a:eb:ae:35:ab:24:ac:70:fd:
         25:23:55:ea:4b:e2:ce:8d:2a:51:70:40:00:6f:d1:86:ca:1a:
         c7:1a:64:90:9a:46:c0:43:94:2d:da:64:b0:33:21:e0:10:92:
         3e:42:8b:ec:c2:26:7a:ac:6e:70:1d:14:6f:8e:ba:40:9e:63:
         79:73:31:b3:60:e8:ba:a4:e9:f6:58:1d:16:08:0b:dc:d0:a0:
         a9:1c:84:48:ea:b2:4b:0a:c8:f9:bc:c7:36:b2:7e:32:29:d8:
         b8:78:54:ce:ef:76:4a:d9:b0:eb:18:d8:f7:30:92:a2:0e:af:
         40:02:1d:d3:f1:8b:c6:c3:72:b0:ff:97:ca:15:58:6f:94:cf:
         06:7c:ff:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 12:00:13 2026 by rpki-client