Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/448b15d0-209a-3f49-9f42-0b09bee72bf5.roa
File:                     448b15d0-209a-3f49-9f42-0b09bee72bf5.roa (raw, json)
Hash identifier:          coOrkKMfyMlleALYz1QosfZ3auEuXNze4IF+RS6IG5o=
Subject key identifier:   D2:34:6B:4C:22:FA:09:C2:D7:0D:39:6C:08:09:DB:61:6C:B9:12:E9
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F49775CAC6E2AAD267F362320
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/448b15d0-209a-3f49-9f42-0b09bee72bf5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     393991
IP address blocks:        72.203.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:5c:ac:6e:2a:ad:26:7f:36:23:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=208cbd2e-fd67-40b7-a19a-a4bb50546d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:76:8b:b5:ce:e6:ba:0c:d2:7e:d2:e0:b1:55:
                    76:49:59:81:84:5b:e1:9f:f1:e8:97:94:3f:a9:c3:
                    39:56:03:10:9d:66:9e:e9:5b:39:af:71:82:02:30:
                    c4:5f:d3:b7:07:62:c9:f8:4c:b6:cf:14:a1:41:cd:
                    9f:ba:88:2a:27:c9:80:1c:ad:81:c9:e8:26:51:22:
                    6d:b2:24:9b:2b:08:20:81:e2:ee:b2:e6:3c:6f:21:
                    e2:64:3c:65:c9:f4:b5:1f:81:7c:b2:ee:2b:44:14:
                    9e:22:3c:49:04:40:64:f3:78:63:3a:a6:70:e2:07:
                    0d:c4:b8:dd:87:f3:09:3f:79:87:95:9e:9e:a2:e4:
                    5f:02:35:41:e4:37:06:2e:97:2c:de:98:e0:55:da:
                    73:f9:94:48:3f:af:81:85:03:45:d3:5c:fb:82:14:
                    12:cf:71:8f:ff:b0:2e:4b:db:38:fd:53:df:a5:1e:
                    33:52:89:1d:ac:92:76:48:f8:66:a0:1a:a3:0a:60:
                    37:05:f6:10:9b:55:a1:b7:d1:61:02:33:04:be:62:
                    32:c8:78:72:62:91:b5:d6:f8:b9:ae:93:70:b2:77:
                    01:95:47:60:8c:ec:6a:bd:d4:42:34:ad:dd:7a:e2:
                    1b:b2:2b:bc:c3:57:78:0f:fc:15:fa:da:cf:5a:d5:
                    9e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:34:6B:4C:22:FA:09:C2:D7:0D:39:6C:08:09:DB:61:6C:B9:12:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/448b15d0-209a-3f49-9f42-0b09bee72bf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.203.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:f7:58:c8:74:93:86:d9:ab:f9:60:67:e9:39:21:a6:d4:ad:
         0e:cf:50:4f:8a:1a:65:a6:25:78:19:a2:cc:70:ae:20:a8:e1:
         9f:ac:29:0a:d2:91:9b:e8:92:e6:e8:11:73:e7:ef:fe:e6:43:
         aa:c8:f0:35:83:88:64:85:78:de:c0:38:f9:78:ac:bf:24:2a:
         bd:7f:86:87:5a:1c:cf:98:28:63:91:43:2e:2e:1a:5c:20:f5:
         d9:f1:d7:59:21:9a:7d:38:02:3b:8e:84:af:3f:49:fe:82:0e:
         d7:7e:ca:af:8d:8d:3c:a6:6c:08:bd:62:89:fc:00:57:c3:48:
         c4:18:2b:6a:b0:8c:59:32:fd:03:e2:61:7c:16:e5:89:b6:6b:
         02:84:d9:28:8a:4b:be:36:84:c4:c7:6e:20:11:bc:8d:d8:95:
         c4:f7:c3:44:6f:29:95:e4:7c:4f:34:1b:b4:88:9d:c7:9e:69:
         63:e5:3a:51:b7:86:bd:b9:58:a2:bd:a8:4f:9e:c3:67:3c:83:
         86:ca:a6:c0:b0:a5:96:48:e1:1c:87:8d:37:0a:a8:26:8f:64:
         32:01:03:c3:1a:de:71:5e:ef:2a:01:7d:44:ee:fb:4c:8a:00:
         3a:e8:e9:6c:fb:38:8e:00:5d:5c:dc:bf:bf:fe:e4:86:7e:b9:
         1c:8f:0b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:40:32 2026 by rpki-client