Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/01cabe69-844a-31c7-8aae-c3475f40a904.roa
File:                     01cabe69-844a-31c7-8aae-c3475f40a904.roa (raw, json)
Hash identifier:          78WEdbUSsyZc+E8IIA0acsWmYzoCiOSn6Y/Gbjl99mk=
Subject key identifier:   55:8B:BC:44:25:80:DB:B2:E3:0D:CB:83:0A:E7:66:8E:03:2A:19:AA
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F43DD684BCCE9D516C2C2BC80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/01cabe69-844a-31c7-8aae-c3475f40a904.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        68.224.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:68:4b:cc:e9:d5:16:c2:c2:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=1dc4866d-6778-4350-a1a8-327f19318f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a2:94:a0:ba:e8:09:8b:d7:03:43:fa:72:2c:
                    16:df:64:25:28:24:4d:49:63:e1:99:9a:e9:57:b1:
                    1b:5a:e6:85:67:a9:6e:b3:0e:e5:af:94:a1:e2:05:
                    94:b4:37:e4:fe:3f:99:4b:a8:33:62:64:13:96:af:
                    a3:fb:54:83:3e:bf:12:a0:26:08:a1:a6:4b:f0:95:
                    3d:39:08:a9:86:81:b9:78:78:46:1e:b2:0c:74:be:
                    6f:cf:ba:87:c0:aa:1d:af:67:5d:0c:75:e6:77:86:
                    97:7f:69:ab:e7:ea:34:6d:2f:13:47:f7:a2:8d:dd:
                    10:dc:50:04:1a:8a:cc:4e:17:6a:18:88:5b:25:cd:
                    62:78:99:de:fa:32:ef:5c:39:f6:56:f6:8c:9f:cf:
                    4c:08:86:92:2a:80:a7:70:67:4a:bc:e9:31:6d:4f:
                    7f:58:24:26:3f:ab:7f:e7:5c:29:b5:4d:fa:a7:1f:
                    a3:94:10:fe:fd:a9:38:e0:0f:5f:ba:8a:e7:f5:9e:
                    d6:2a:03:1b:3c:4f:75:be:ed:ff:ce:ad:4f:50:06:
                    7e:63:c3:35:d4:99:fc:93:80:ae:bd:8a:75:21:04:
                    67:30:bc:ed:a1:cd:d7:0a:5e:eb:cd:44:31:b9:f1:
                    70:73:ef:65:4b:3c:ff:50:7a:bb:80:53:fe:bc:7f:
                    de:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8B:BC:44:25:80:DB:B2:E3:0D:CB:83:0A:E7:66:8E:03:2A:19:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/01cabe69-844a-31c7-8aae-c3475f40a904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.224.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:6e:02:e3:f0:2c:6d:62:83:76:ef:32:77:b6:0c:d4:56:a2:
         19:a1:f1:da:5a:6a:5c:48:a4:62:aa:2d:98:20:1f:2e:b5:e4:
         d4:ef:b5:15:f3:a6:32:ae:b4:50:74:54:12:1b:35:00:ce:0c:
         77:ad:04:a5:63:02:54:ec:2b:87:5e:eb:94:c5:94:4b:1e:3d:
         cc:7d:9c:c0:5a:96:d1:53:27:ad:1d:8e:a4:ec:77:38:47:b0:
         e5:ff:09:3e:d4:84:5c:be:8d:32:ed:95:07:83:cc:1b:16:f3:
         86:8c:cc:13:94:e8:4c:d6:4f:22:76:2b:96:af:5c:e7:83:7e:
         bb:c7:fb:0f:55:ca:4b:0a:a7:e8:fd:18:3a:27:09:bc:9b:0c:
         29:c9:e5:61:fe:c6:0e:2e:07:0c:dd:3a:b2:89:7c:df:8a:a2:
         d1:2e:f6:87:af:f6:4b:e8:be:41:c2:c6:24:e2:5a:e7:95:85:
         3d:bc:46:32:7b:ec:d5:1c:2c:90:09:eb:73:fb:0b:f7:da:64:
         e5:00:50:28:7b:8e:ff:48:f2:48:42:f9:e6:b0:6b:bc:b7:5b:
         6d:47:f5:aa:69:0b:e0:aa:1c:f3:69:30:fc:cb:79:33:4d:c4:
         9b:6d:bb:e1:b9:20:a7:8b:21:3d:fd:cd:cb:83:a2:c4:86:20:
         cd:99:d4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:30:43 2026 by rpki-client