Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/90d6e3e8-8976-3a11-89ab-7dc98f3531bc.roa
File:                     90d6e3e8-8976-3a11-89ab-7dc98f3531bc.roa (raw, json)
Hash identifier:          UcxrKSY+nM+VDvk8W6PX6YT8sN+ZGJLsmpD7oxvIa6k=
Subject key identifier:   56:4B:6B:FE:22:CE:E6:F0:1F:38:15:04:D7:03:48:BA:D6:BB:84:BF
Certificate issuer:       /CN=2cdc7434-e1cd-4dee-b0fa-1d7097306b9c
Certificate serial:       010D0C9F4328584F4973B8734B7D1F296CA05080
Authority key identifier: 6F:CA:99:28:29:8E:36:15:9A:84:B9:A9:0D:76:8C:07:40:F1:F7:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/90d6e3e8-8976-3a11-89ab-7dc98f3531bc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        167.92.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:b8:73:4b:7d:1f:29:6c:a0:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cdc7434-e1cd-4dee-b0fa-1d7097306b9c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d9ac282f-01ea-40fb-af9e-d68d15a06754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ca:cc:a0:dc:c4:94:9d:ef:1e:4a:3a:97:6c:
                    90:62:dc:8a:09:a0:0d:3d:f6:81:f9:3a:cb:6d:9c:
                    b1:ab:a7:62:a2:58:8a:b4:17:2e:18:85:05:dc:ba:
                    c9:4d:ff:3c:1e:cc:03:d8:c9:79:df:12:b2:8d:83:
                    d8:d8:80:a7:2f:76:fc:38:1b:2e:d3:16:18:7a:22:
                    42:bb:1e:95:a5:14:37:53:4a:ab:cb:59:26:fa:54:
                    57:28:20:22:bb:ea:ff:12:8d:f1:bd:59:7e:f2:61:
                    e6:3d:94:e7:10:16:1c:1f:e7:8c:7b:f0:4f:79:54:
                    63:f1:98:a5:44:9b:57:fe:69:ff:cb:2e:16:ec:fc:
                    b2:62:e0:b8:f1:59:1a:f5:07:a2:4e:4f:d4:18:cd:
                    8b:e9:7b:2f:0d:44:e5:4e:d2:c0:dd:9d:a0:d1:d5:
                    84:5a:52:14:eb:19:41:7b:dd:b1:e9:e6:ac:f2:3f:
                    ca:e9:35:6a:ee:a6:32:e1:20:20:77:3e:99:f6:4e:
                    57:07:5e:2c:7e:f4:41:c8:47:11:19:22:c3:f4:eb:
                    4c:56:54:57:6c:dc:dd:9f:29:2e:de:61:12:e8:65:
                    e7:39:e2:c6:cc:12:83:fd:4b:d7:56:a5:73:37:8a:
                    21:f8:61:b6:28:4e:d1:e8:27:35:88:40:63:04:cb:
                    ee:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4B:6B:FE:22:CE:E6:F0:1F:38:15:04:D7:03:48:BA:D6:BB:84:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/90d6e3e8-8976-3a11-89ab-7dc98f3531bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.crl

            X509v3 Authority Key Identifier:
                keyid:6F:CA:99:28:29:8E:36:15:9A:84:B9:A9:0D:76:8C:07:40:F1:F7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.92.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:41:dc:71:fc:22:76:92:09:0d:84:c4:14:3e:f5:78:a8:23:
         dc:42:4c:d5:b9:78:be:a4:af:fe:a1:e9:13:01:2a:e5:a8:9d:
         c4:e0:7d:89:ba:67:b6:0e:c4:4d:d8:44:f8:81:a4:30:88:5a:
         36:ba:8a:bc:09:20:f5:99:15:dc:0d:f9:a8:62:69:7a:0c:ac:
         bd:5a:5c:68:de:5d:76:5d:9f:c9:22:cd:5d:ca:92:fd:14:fe:
         2d:08:aa:db:14:a2:e9:87:86:f4:23:8e:ca:b6:7f:bf:a3:4e:
         b5:df:7d:66:a7:aa:d9:87:9a:db:9b:7d:b5:1d:ab:cd:73:be:
         6c:75:f4:fb:18:82:0d:79:a5:91:38:0e:ef:4d:8b:e1:38:da:
         2f:08:3c:cb:88:02:70:52:58:03:67:cd:5c:2f:d5:5c:1c:cc:
         59:21:e1:f6:6e:47:bc:83:88:e7:f3:3b:16:45:a0:fd:e8:c1:
         64:7d:9c:c8:27:aa:fd:97:11:8c:83:92:c0:0a:c2:7b:17:68:
         82:ec:a6:42:59:a7:1b:19:91:a6:58:b0:00:56:ac:86:57:cf:
         90:38:be:dd:53:64:b6:8f:dd:39:d9:f2:67:99:c4:e9:25:73:
         02:b2:7f:29:68:fb:86:39:d7:cb:4c:fe:dd:84:d8:33:e6:07:
         29:80:79:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:52:59 2026 by rpki-client