Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/d90017c3-a77d-3cd2-9c68-3d52f6ed6055.roa
File:                     d90017c3-a77d-3cd2-9c68-3d52f6ed6055.roa (raw, json)
Hash identifier:          ak/raTxeoiQNOtqM1MVLETPzIvNdE8MD07yGUL0l+Cg=
Subject key identifier:   31:C3:46:D6:C9:D2:34:84:9B:13:66:81:3B:BF:C1:B0:83:4D:B8:FA
Certificate issuer:       /CN=8d560541-dfe9-43df-8277-86d83aa610a1
Certificate serial:       010D0C9F4328584E6F3A28D8D8B04E7880049C80
Authority key identifier: 8B:B2:3D:2F:85:7E:56:48:9E:99:6E:81:CF:A0:4B:69:48:A1:5C:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/d90017c3-a77d-3cd2-9c68-3d52f6ed6055.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        204.11.174.0/24 maxlen: 24
                          204.11.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:28:d8:d8:b0:4e:78:80:04:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d560541-dfe9-43df-8277-86d83aa610a1
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=1a88df92-a276-44bf-9255-aecdea39b9de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:63:e1:1c:cb:09:26:53:d6:f9:ad:40:98:65:
                    a0:25:a6:14:71:e6:44:05:13:1e:a4:2b:7f:1d:75:
                    a8:75:fe:e5:dd:5c:53:22:79:18:2b:1c:f8:f5:2c:
                    8e:b5:10:15:95:1f:f9:40:5b:8a:7a:d8:c1:1b:9f:
                    88:64:6c:38:ff:7e:0d:54:dc:84:11:e5:84:65:50:
                    f1:bb:59:56:4c:90:14:4f:3b:43:7f:66:ee:69:90:
                    22:f3:db:02:0d:8c:91:ef:3e:48:5d:63:1e:b7:7e:
                    b0:21:c7:35:36:22:46:41:3f:3b:f6:55:66:3a:50:
                    d5:f7:b3:11:ad:81:03:06:cd:e4:63:90:67:c1:23:
                    1a:55:95:62:01:57:02:52:e1:ec:43:01:25:88:b7:
                    d1:9d:ea:ac:fb:04:78:ae:ec:e1:22:a6:8c:51:0e:
                    b8:b2:f9:f9:c4:39:c0:8f:51:bc:66:61:40:f1:30:
                    b6:bf:b9:a3:b0:e3:11:52:4a:e2:46:de:cc:7f:3d:
                    be:9c:80:27:20:ea:6f:14:27:61:55:f1:09:13:bb:
                    9d:cb:15:c5:99:a8:7d:4c:33:9e:12:81:61:ee:a3:
                    ec:28:ab:ef:ee:b5:93:39:4c:a1:35:9a:5e:ca:59:
                    26:67:f5:7f:92:62:41:39:e6:4d:68:6b:b6:8b:d7:
                    a4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C3:46:D6:C9:D2:34:84:9B:13:66:81:3B:BF:C1:B0:83:4D:B8:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/d90017c3-a77d-3cd2-9c68-3d52f6ed6055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.crl

            X509v3 Authority Key Identifier:
                keyid:8B:B2:3D:2F:85:7E:56:48:9E:99:6E:81:CF:A0:4B:69:48:A1:5C:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.11.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:84:59:84:49:6e:b7:2e:cf:b3:4e:a6:43:88:34:da:8c:8d:
         ce:a4:7b:1a:9e:6d:45:7f:4e:0c:e6:a0:32:18:94:f4:80:33:
         c7:f2:6e:35:9b:4f:50:90:1e:50:90:4d:77:4f:7e:c1:84:90:
         e8:4a:35:04:62:da:e2:58:39:50:1f:65:37:4a:30:ae:07:ad:
         c5:31:ef:5c:0d:c7:0f:94:0a:18:e5:bf:4e:41:2f:87:e0:3f:
         bf:2b:3d:01:80:3e:1a:65:bd:46:69:28:b3:59:7c:88:34:00:
         4b:3a:66:3c:1d:d4:79:5f:fd:19:83:f8:23:81:fa:67:42:d6:
         e2:78:00:87:a0:fe:88:29:03:0c:da:cb:c8:58:3e:b8:70:c6:
         2f:13:42:d4:a2:6f:95:7e:66:33:74:49:2c:f5:28:a7:e0:bb:
         55:50:76:93:2e:fe:5c:a2:2b:ed:88:ec:3a:3b:38:82:6a:2f:
         b8:11:95:e2:04:2b:65:9c:76:2a:99:1f:bc:71:cd:1a:8b:3a:
         82:c3:06:f3:c0:24:dd:ae:a2:60:5b:f7:f8:2a:b5:2a:04:59:
         6b:49:ed:aa:09:0a:8c:9a:c2:d7:d4:4b:e0:e7:75:43:11:48:
         fd:82:a7:1b:1a:13:b4:26:2b:ea:df:38:42:54:ea:7c:54:7f:
         ed:00:7b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:03:24 2026 by rpki-client