Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/56034392-d442-31e3-9da0-923e8dc0d6bb.roa
File:                     56034392-d442-31e3-9da0-923e8dc0d6bb.roa (raw, json)
Hash identifier:          EP2hV9sMvcyCI+nWYKdMZgPi8aqsJI/MNJYbS6LB0/M=
Subject key identifier:   90:91:26:BF:35:D8:AE:64:B6:A7:F9:B7:DC:19:4F:96:83:E7:2A:AF
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F3CE2B5A51C94050060DF1C80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/56034392-d442-31e3-9da0-923e8dc0d6bb.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        68.2.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:b5:a5:1c:94:05:00:60:df:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=e860b3f3-561e-4388-a979-2a0f5c82c20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:64:d2:8e:c2:d1:e4:d7:c4:ab:f4:ea:0e:f5:
                    78:be:5c:ff:11:36:d3:94:16:c1:c6:21:d7:f0:99:
                    94:13:fc:da:21:81:29:c5:9f:d0:38:aa:02:ed:b3:
                    df:17:2a:4f:de:c1:f1:6b:a7:b8:e8:00:b0:2e:a1:
                    71:1e:6e:e9:0a:64:bf:c1:f5:19:7d:b4:3b:61:ec:
                    05:55:63:40:29:ac:cb:6e:1d:98:6a:48:87:d5:3b:
                    58:d4:17:32:88:92:4a:ed:7b:b5:5b:16:a3:8a:fb:
                    04:bd:81:d1:77:43:8e:f7:63:6a:1a:79:09:64:15:
                    51:57:b6:57:9c:80:31:7a:32:06:b5:ca:18:9a:5a:
                    fc:8a:35:da:af:9a:ca:7e:35:f0:ab:7b:dc:e2:d0:
                    fa:f0:e0:ac:52:4c:3b:9e:69:8e:4f:e5:9c:ae:46:
                    8c:84:3c:e6:e6:1e:73:ed:a3:3f:52:31:3e:98:40:
                    c0:51:06:6a:ed:eb:06:be:a8:8c:aa:8c:6e:e4:43:
                    92:b0:62:80:88:cd:af:92:f9:58:f3:42:9c:fb:13:
                    b3:fe:45:c5:76:c4:f4:ef:88:b6:f3:b0:1d:ab:53:
                    ea:a5:d8:a4:bf:72:69:cb:48:12:e9:27:30:c4:0f:
                    b5:e0:c1:6a:f6:a9:65:13:5c:67:95:a2:d9:18:5d:
                    50:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:91:26:BF:35:D8:AE:64:B6:A7:F9:B7:DC:19:4F:96:83:E7:2A:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/56034392-d442-31e3-9da0-923e8dc0d6bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.2.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:9b:16:f6:84:bb:5f:24:dd:80:c6:f6:8b:ef:78:ac:b1:76:
         e3:e5:6f:07:6d:ed:2a:8a:52:48:a3:4d:48:0d:99:33:89:14:
         5f:2a:86:03:9e:f1:6a:b3:8a:87:5c:8a:e1:f3:a0:75:7f:79:
         48:f5:7a:f8:77:24:3e:5a:c0:a8:01:d4:7e:e1:0d:00:a0:73:
         b6:5f:f2:7f:9c:f1:04:62:f6:5a:31:76:51:eb:81:65:c2:36:
         d8:80:04:8e:51:ab:25:b0:89:d5:aa:e2:3b:a4:75:de:72:4b:
         89:6b:16:32:3e:69:10:34:a2:e3:79:61:46:2c:c6:64:9d:47:
         51:8d:77:be:53:5b:ef:22:cc:d9:29:c9:53:76:30:1e:4f:49:
         41:d6:d8:44:14:56:26:96:71:4d:69:94:b2:61:a0:56:8c:40:
         ff:f8:2e:ee:73:83:28:b3:f4:fc:9c:33:2c:a2:a1:2f:69:70:
         02:3e:0a:41:ca:d0:d2:d5:6c:cc:e4:6a:a6:e6:aa:9d:62:e1:
         b9:4c:de:ba:e6:5f:15:59:71:f4:c3:65:94:76:98:1e:70:55:
         d8:46:ff:42:3a:4e:ab:56:e2:03:ae:ff:4f:7c:a5:02:67:ab:
         7a:e2:8f:1f:64:2d:05:97:8d:e7:4d:19:1b:0b:ce:17:80:19:
         80:f7:86:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:44:05 2026 by rpki-client