Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/90b5f9ef-49b0-3ac5-aab0-9e4aebe7eb3c.roa
File:                     90b5f9ef-49b0-3ac5-aab0-9e4aebe7eb3c.roa (raw, json)
Hash identifier:          djfA9kD7fikohvLdURbVcncKpZ+YAMNP6fvdQx1097A=
Subject key identifier:   76:21:0F:8B:92:70:41:4C:A9:4C:38:A2:84:DD:CD:04:4C:1D:76:72
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584D3C6A437A9F6D2164B3DFBC40
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/90b5f9ef-49b0-3ac5-aab0-9e4aebe7eb3c.roa
Signing time:             Fri 20 Mar 2026 23:24:11 +0000
ROA not before:           Fri 20 Mar 2026 23:24:11 +0000
ROA not after:            Thu 18 Jun 2026 23:24:11 +0000
asID:                     6079
IP address blocks:        65.110.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3c:6a:43:7a:9f:6d:21:64:b3:df:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Mar 20 23:24:11 2026 GMT
            Not After : Jun 18 23:24:11 2026 GMT
        Subject: CN=6c759f4c-6721-4de1-9f6e-35618f955490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cd:e1:9c:a0:df:c9:7b:c1:7b:d5:26:2f:33:
                    fb:d0:31:eb:59:5b:4b:3b:c0:9b:df:b4:4a:83:3d:
                    c9:41:66:02:4e:3a:ec:4d:fd:fe:35:94:43:28:d1:
                    51:e2:64:db:ff:48:0e:df:14:15:95:c2:12:b6:d6:
                    9b:42:12:16:b6:ba:2d:f0:ad:f2:2b:eb:ad:f5:01:
                    50:5a:07:f9:6e:9a:52:70:e9:3b:e5:a2:06:18:0d:
                    0e:5a:4d:1b:53:e0:c0:14:99:90:51:5e:09:e3:1b:
                    e0:09:85:af:fd:14:b0:92:3b:29:df:35:b6:fa:5e:
                    0a:8f:a6:d1:7c:c8:32:82:b0:32:32:1e:5d:4b:4c:
                    32:d4:6d:b3:c9:d4:76:6d:a5:25:d0:55:cf:cc:4d:
                    31:c2:43:60:a7:5d:0f:42:a3:a9:91:e3:98:ae:b0:
                    d9:b2:f1:cc:e5:5b:6f:87:54:cd:af:9a:23:30:06:
                    55:0a:89:40:e5:4e:c1:cc:a8:0b:72:78:f4:55:bd:
                    9d:9d:09:b7:a0:06:cd:7f:1a:21:69:8f:e3:e7:40:
                    b8:c5:01:1c:91:2f:0d:a8:cd:f0:17:e2:ca:20:32:
                    55:7f:7b:52:5d:b0:ea:d2:49:a2:0c:3b:0b:e1:dc:
                    b6:4d:18:ae:48:75:0e:b4:1a:f1:61:95:9b:7d:91:
                    77:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:21:0F:8B:92:70:41:4C:A9:4C:38:A2:84:DD:CD:04:4C:1D:76:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/90b5f9ef-49b0-3ac5-aab0-9e4aebe7eb3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:9e:9b:43:62:5b:e2:f9:66:c1:22:6a:df:e1:63:ef:5d:24:
         0b:63:4f:a0:2e:fa:03:46:1a:8a:88:99:00:d9:be:cb:60:53:
         56:1f:7e:7d:00:a4:38:8a:b1:45:c2:d5:cd:51:a4:9f:06:38:
         a7:c0:da:8a:dd:3a:b3:38:6b:1a:84:e2:93:7d:79:2f:69:5c:
         a3:e5:27:cf:51:b5:81:76:cf:e1:b3:4e:34:89:ba:b7:ff:a5:
         08:b1:c0:74:39:49:56:31:62:61:36:d3:e6:4c:9d:82:bf:df:
         bd:69:ad:ed:d0:c4:88:4c:e7:79:7d:11:ef:90:b0:40:fd:36:
         3b:4a:5f:a1:b5:d7:81:95:0b:80:ab:e6:ee:7b:f4:4f:49:dd:
         db:74:6f:ad:b1:a9:1b:d9:f1:9a:0d:39:b4:89:1e:53:aa:c3:
         f5:27:68:c6:51:45:cc:fa:a5:55:16:a3:62:99:7c:bb:ae:9f:
         c2:16:9d:64:45:2c:26:3e:4f:7f:d1:29:38:d5:44:2f:cc:60:
         34:b9:f6:b6:23:07:92:60:a7:58:b7:a0:3c:4d:17:0e:d2:51:
         bc:a3:fa:4e:9a:1a:a8:f3:11:7d:5e:08:a9:cb:67:d8:9c:01:
         84:e8:b4:34:ed:61:dd:2a:15:6c:10:c9:c2:6f:00:c6:b2:da:
         52:83:cd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:08 2026 by rpki-client