Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08deed91-a7fb-3b5b-9c6e-4ef0d33b5e88.roa
File:                     08deed91-a7fb-3b5b-9c6e-4ef0d33b5e88.roa (raw, json)
Hash identifier:          LhJpGiv+16ONqHBbZG3VWIvPpNuz3R15Vmgvfxx+VxU=
Subject key identifier:   84:C5:C5:09:99:36:A0:C9:DC:33:DA:56:E8:6C:F0:ED:82:34:2F:F2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F3FAD8D49B07E0109C11F7880
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08deed91-a7fb-3b5b-9c6e-4ef0d33b5e88.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        24.251.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:8d:49:b0:7e:01:09:c1:1f:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=f4a923c1-ac9f-44a8-9ea1-294d9de28fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c8:e3:74:98:cf:dd:d3:75:b0:9c:26:f9:16:
                    1f:cc:20:0a:c7:c9:d0:76:a6:76:c9:1c:50:75:fb:
                    4c:fe:5a:45:b9:af:85:fd:37:6c:b3:b5:83:82:1d:
                    ac:f2:31:2f:fa:6e:42:59:e3:5a:09:d8:99:89:a2:
                    29:85:38:18:19:a6:c4:4d:37:e0:1a:a0:29:e1:de:
                    4b:29:04:21:b6:3e:bc:76:be:ce:2b:0a:50:69:15:
                    0c:bb:58:66:1c:3e:28:ed:87:eb:d5:3c:62:5d:df:
                    36:63:1d:8a:e3:0e:39:b1:2e:9e:c7:86:30:72:d7:
                    65:b8:2d:a2:37:79:85:18:71:d2:92:e9:92:db:2f:
                    c1:1e:23:bb:44:b3:89:bc:57:d2:0e:66:fc:88:01:
                    11:16:ad:6e:fe:43:aa:06:ea:76:16:9d:3b:8a:5d:
                    66:08:b1:43:90:40:24:2f:25:5b:cc:bd:35:31:86:
                    dd:6a:91:e1:31:18:f2:ca:f1:6d:af:4f:0b:b4:01:
                    15:ae:26:4d:d7:fd:e3:a8:27:0e:e1:d9:a7:a5:69:
                    3e:93:d6:60:1f:08:0d:69:15:28:42:3a:23:a5:a6:
                    0f:c6:df:97:e3:c9:e6:d9:5e:02:ac:6b:e4:5f:3f:
                    68:f0:d4:a6:1a:1d:87:59:23:90:1c:54:05:22:2a:
                    fa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C5:C5:09:99:36:A0:C9:DC:33:DA:56:E8:6C:F0:ED:82:34:2F:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08deed91-a7fb-3b5b-9c6e-4ef0d33b5e88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.251.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:5d:9b:9c:a4:50:a4:b1:31:84:c5:2a:b4:b6:25:22:bb:0a:
         9b:c1:56:41:c1:fc:a4:a0:77:84:fa:a2:55:f5:cf:3b:39:34:
         f0:ba:f4:80:62:f2:ae:4b:e7:d6:95:fd:f8:61:24:f9:a4:e2:
         3b:7a:75:d0:72:ed:47:f1:c2:d1:d6:65:be:f6:c5:46:a9:97:
         48:a9:60:6c:6b:72:92:90:ed:f4:a5:b1:17:9f:6a:d2:f7:6d:
         77:f7:87:cb:e0:1f:a6:51:75:a4:af:81:94:1d:eb:a0:a8:c4:
         df:36:a8:ff:99:94:64:58:62:b8:9e:9d:2b:a9:0b:eb:97:8d:
         ee:6a:22:ad:d4:78:74:d9:6a:c2:ad:f0:30:8d:37:d1:53:38:
         31:5b:aa:79:23:2c:91:f6:bf:d6:98:38:82:98:4e:99:b3:f1:
         5a:22:9d:d6:84:bf:38:20:17:ad:c6:d7:80:f7:a6:2c:4b:f9:
         96:0d:8a:fe:79:01:c6:fe:40:d9:8a:7a:4e:d9:12:d2:15:8e:
         a2:33:9c:ab:68:90:4e:a1:b3:70:21:d0:d1:2a:9a:19:0b:af:
         e9:96:1a:8d:c8:72:0e:92:c1:28:45:2c:be:71:55:88:fd:f2:
         6d:5b:10:87:65:dd:2f:7c:b3:75:a7:9b:07:a9:c0:9a:ab:4f:
         15:51:13:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:38:54 2026 by rpki-client