Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2de95115-dc9f-366a-bb94-a086d9f1adbb.roa
File:                     2de95115-dc9f-366a-bb94-a086d9f1adbb.roa (raw, json)
Hash identifier:          wUmkdE4eG2gqmmYIvmuzrTg6zUjAGZT7/jWsv5zNhck=
Subject key identifier:   27:77:D0:E2:8F:3D:CF:1A:1C:7C:2C:03:44:28:25:4C:E4:78:3E:47
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F427834DFD2DBE05E9D0A1200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2de95115-dc9f-366a-bb94-a086d9f1adbb.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        72.222.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:34:df:d2:db:e0:5e:9d:0a:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=93b79a06-c1bc-4415-90f6-d21e5ce3d15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c1:9f:82:bc:69:b6:17:8c:14:c2:8d:f4:29:
                    cb:6d:c6:e9:63:8e:3a:54:09:99:98:7a:83:9b:07:
                    43:af:1c:d7:c3:20:9d:c2:9f:29:e3:74:1a:80:45:
                    30:0e:70:6c:65:59:9c:18:7e:b4:2a:b1:0a:05:7c:
                    5b:58:b9:f9:4b:6d:fa:f2:35:d9:79:39:fa:02:7d:
                    e6:73:5f:e1:27:14:a5:40:b4:24:cd:52:a2:e0:c6:
                    2a:be:03:af:d6:97:46:b3:32:d5:f3:a0:05:90:ac:
                    5d:12:4e:31:a5:8c:f6:b2:64:33:ac:86:ab:97:99:
                    33:d2:02:1b:9a:4f:b0:5c:3d:66:77:de:51:f3:a0:
                    21:3c:4f:e0:34:e6:ad:56:79:6d:f2:9b:25:fe:f5:
                    eb:b2:6d:26:c6:66:6f:14:12:f6:a8:08:08:5d:18:
                    d2:f3:03:8c:c1:17:de:09:bb:85:9b:eb:9f:f6:35:
                    18:0d:cd:e2:ef:2f:c2:d7:64:69:b3:4e:c2:7b:5c:
                    87:ec:ed:51:44:f4:35:1e:90:9c:99:bc:21:1c:8c:
                    73:09:80:c6:66:6a:82:b6:a4:2e:b4:9a:a1:d3:59:
                    a2:da:a0:cd:64:f0:f9:bd:ed:3e:45:88:49:d6:59:
                    75:b9:41:03:99:be:ec:b1:33:4d:17:31:ca:e8:30:
                    44:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:77:D0:E2:8F:3D:CF:1A:1C:7C:2C:03:44:28:25:4C:E4:78:3E:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2de95115-dc9f-366a-bb94-a086d9f1adbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.222.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:64:3e:01:5f:89:06:b4:86:f8:3c:79:24:89:a1:65:54:1e:
         70:6a:32:3f:86:1e:09:0b:19:bb:33:c3:1b:65:22:40:16:77:
         2e:5f:42:ba:e6:9a:ad:c3:2b:46:7b:01:3b:6c:c2:c8:74:b2:
         4e:2e:d9:cc:95:6a:cf:91:3d:c9:25:34:03:16:de:70:d5:82:
         9a:12:fc:be:56:98:27:ab:9c:6e:87:79:b4:5c:8c:3a:1e:95:
         b9:a9:e4:98:23:5e:69:a0:c6:66:98:58:6c:4d:7b:bd:82:87:
         df:e2:e7:0c:07:c9:88:29:09:4b:18:f1:9e:f3:0b:c9:97:55:
         6d:f1:2a:8a:8c:b1:01:22:20:03:9e:a9:50:49:01:e9:3d:01:
         cd:3c:9e:2d:31:37:7a:5a:31:5b:c2:43:7c:09:63:41:d3:a8:
         ad:ba:7d:6b:34:ee:04:bc:c1:39:7e:03:a7:74:25:3a:c3:43:
         66:2f:44:57:a3:a3:b7:84:c4:6f:56:53:6a:19:85:d7:8f:e6:
         ab:c3:5b:da:eb:e7:80:4e:12:3d:55:48:c3:96:8a:25:8c:62:
         d8:76:58:98:c3:df:fa:a8:45:76:7e:d6:b5:32:33:ae:98:15:
         02:6a:9e:00:95:ce:d2:f6:16:d9:d1:d4:40:01:37:fc:c7:54:
         19:32:39:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:44:03 2026 by rpki-client