Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cf32d36-9654-3bbc-b00e-2306beafa3dc.roa
File:                     4cf32d36-9654-3bbc-b00e-2306beafa3dc.roa (raw, json)
Hash identifier:          HuDN/0PcXO2o2iSVQwWlvg2m9X2GkxzX9Yoqbf+YIXs=
Subject key identifier:   C5:2B:84:00:69:C4:F1:B3:68:73:D7:52:22:A1:71:FA:FE:94:7A:17
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F4112AB540C161CDF50388A80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cf32d36-9654-3bbc-b00e-2306beafa3dc.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        68.231.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:ab:54:0c:16:1c:df:50:38:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=a792d723-77dd-4fc3-802c-5fe701c850f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5a:a2:7f:31:45:5d:0c:e4:2f:40:57:08:92:
                    0f:65:d9:fa:0f:90:06:6b:f7:20:f5:f7:69:6b:b4:
                    f2:75:3e:3e:85:8a:8b:7d:68:58:3c:24:2d:40:7d:
                    4d:f7:83:b9:1f:03:58:ee:e4:19:0e:92:66:42:4b:
                    b3:85:d8:9f:3a:bf:a7:bf:3d:36:fc:a8:41:e5:7b:
                    1b:bc:cf:6b:03:c2:8a:39:29:29:b7:2c:e8:b7:bf:
                    a7:ed:52:64:e3:f8:b5:74:4e:e3:55:62:41:ae:29:
                    5e:d5:ab:c3:cb:60:0d:b3:89:8d:ea:1b:a2:54:d9:
                    71:ef:e4:4f:a3:e3:ac:e3:bb:d5:e7:be:9b:69:88:
                    58:ac:31:39:59:3e:33:70:92:83:89:27:b8:b0:56:
                    f1:7a:f3:09:3f:8a:63:18:a7:2e:af:29:0f:d9:08:
                    b3:df:af:17:31:ed:ec:5b:44:63:8d:00:df:8b:cb:
                    37:1b:aa:f7:a5:02:a3:ac:b9:f6:20:cb:7c:3b:15:
                    2e:26:e4:8f:4e:bf:42:51:2b:17:0e:06:76:bd:98:
                    89:51:a3:60:18:6c:7c:d0:f4:2f:f6:49:5b:6f:57:
                    ca:7c:83:65:3f:46:23:cc:25:d9:c3:6a:d9:d0:95:
                    f9:32:06:f8:3b:51:c9:16:4d:44:81:70:de:b9:9a:
                    85:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2B:84:00:69:C4:F1:B3:68:73:D7:52:22:A1:71:FA:FE:94:7A:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cf32d36-9654-3bbc-b00e-2306beafa3dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.231.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:6b:49:23:7f:36:0a:85:43:59:09:6d:2a:9c:fd:1f:f7:43:
         b7:de:10:5d:72:11:44:d8:ae:90:d1:8f:f9:2c:9f:fc:1e:1d:
         9f:56:55:b1:e4:fb:45:b3:04:31:8c:48:62:58:f4:bf:93:17:
         59:0e:63:be:48:22:42:8f:6e:59:87:15:f0:7e:99:3b:d1:12:
         13:aa:5b:db:19:75:17:d6:1e:72:3a:3a:7e:2f:b8:4e:da:03:
         f1:30:ea:85:d3:8c:87:74:a5:90:89:0f:8a:71:29:52:2a:84:
         46:42:3c:ff:ec:bf:7e:d0:92:64:36:70:e0:7f:5d:c8:a5:83:
         b1:d6:12:ba:2f:c8:d6:04:56:41:a0:90:3d:83:da:33:52:20:
         f7:10:d9:3e:3d:2e:fc:01:10:e5:cb:a2:85:be:a8:39:66:b9:
         a9:0e:d5:20:8f:55:51:08:a8:24:7d:44:5c:a9:cf:7a:58:34:
         f0:02:de:76:fd:41:d4:69:66:f3:fc:35:5f:ca:5e:cc:e6:9f:
         53:c3:c0:40:87:c8:07:b6:28:8f:70:57:90:12:37:ba:16:bc:
         9f:30:95:5c:bf:a3:c2:fe:d1:df:db:65:cc:bd:e6:30:14:3e:
         b6:e4:6f:ad:0a:f5:a3:38:36:b8:4c:ba:27:22:80:a6:c5:29:
         79:35:a1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:29:02 2026 by rpki-client