Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b08b44ce-5f21-336a-ac00-0a3f47805892.roa
File:                     b08b44ce-5f21-336a-ac00-0a3f47805892.roa (raw, json)
Hash identifier:          oweiR8dj0npdDz9tcRd9j9uljbJTAyr2L7xah3IrhLI=
Subject key identifier:   E3:62:F2:44:90:69:BB:C1:37:A4:EF:F8:1B:24:E2:45:54:C4:07:EB
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584DBA3AE2D3D2285482BAD5A4C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b08b44ce-5f21-336a-ac00-0a3f47805892.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     22516
IP address blocks:        172.96.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:e2:d3:d2:28:54:82:ba:d5:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=d6045044-b7c1-4d65-85e7-b5f46f1479b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:61:f9:99:d8:18:39:79:41:fc:7c:49:c7:7a:
                    ad:33:5f:e4:4e:ab:4d:e4:73:bf:d2:1f:ee:93:a7:
                    64:48:62:c5:a1:a8:6e:d2:03:6d:2e:d9:48:5e:95:
                    9d:22:12:f8:5b:ef:2b:4e:65:5c:9b:c8:a7:59:8c:
                    49:a7:8c:e0:98:af:9c:a2:46:15:c7:5e:1d:ed:c9:
                    34:d2:94:73:a1:ea:07:e7:c8:6e:9e:b4:76:e0:70:
                    91:f9:7c:d3:18:8b:a1:27:00:ac:0a:61:4f:67:f3:
                    37:83:1b:1a:34:b1:75:fc:3d:4f:cc:e7:9d:3d:d7:
                    07:c3:36:30:22:54:63:da:dc:0e:e9:8b:53:41:86:
                    fb:75:70:69:64:ce:6c:c3:0d:e3:b1:66:c1:33:ce:
                    46:71:d2:cd:54:56:05:68:34:24:20:bc:8a:b6:6e:
                    83:b2:1b:8b:a1:3d:6a:6b:9d:19:33:de:4b:f5:c8:
                    15:2e:6c:bd:ba:27:3b:5b:cd:0f:8c:bd:51:02:1c:
                    3b:d7:d8:02:40:b2:04:c1:02:55:00:6e:53:93:ec:
                    73:5c:cb:88:c0:91:97:a0:82:8a:ae:1f:64:9d:36:
                    75:bc:00:75:78:a1:37:0d:ae:bd:2e:6a:65:2f:43:
                    b9:3b:ba:9c:10:a4:65:81:ec:47:3b:f5:54:3b:37:
                    fd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:62:F2:44:90:69:BB:C1:37:A4:EF:F8:1B:24:E2:45:54:C4:07:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b08b44ce-5f21-336a-ac00-0a3f47805892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:2c:5f:3c:9d:c7:fa:51:76:03:4b:fc:05:50:a5:5d:a5:22:
         66:bb:c8:a8:bb:32:25:35:3d:1f:06:65:a8:26:03:22:19:e2:
         1b:0e:4e:45:76:16:99:4a:23:e5:c4:6c:77:74:42:7f:9d:df:
         47:68:70:d7:05:9f:1d:8b:d8:25:d6:2f:50:52:0d:23:9b:ff:
         50:99:1f:db:b1:42:95:2d:8f:77:3d:f6:66:dd:41:b1:4a:06:
         f6:59:f4:62:bc:9d:13:8c:79:26:7b:79:f0:6a:9d:b8:31:39:
         7b:75:1e:76:e8:74:da:67:a6:7f:cd:b5:1d:62:62:1e:f5:ed:
         d9:86:f6:10:94:d4:5e:7b:f3:50:3e:97:cd:4d:0d:75:82:2b:
         17:c3:c5:ab:f4:99:ae:a5:44:76:54:81:8b:e0:13:33:bf:a3:
         8b:48:c9:41:44:d4:c8:b8:d2:bd:84:bf:0f:8a:ab:9e:3c:00:
         58:db:68:55:25:c4:3c:85:40:1a:ec:10:ed:a4:da:0c:1c:e8:
         05:25:c3:e7:2a:e6:8a:e3:83:40:44:49:db:86:99:7d:59:14:
         5e:ac:9a:2a:e8:23:fa:7b:9f:2e:09:2c:18:6c:0d:a1:67:4f:
         59:b4:3e:5b:71:e3:cd:5d:89:47:8a:91:49:f3:7c:26:11:01:
         5b:90:8d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:49:26 2026 by rpki-client