Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bd9830fe-5c43-3f52-a116-03fa5c14bb51.roa
File:                     bd9830fe-5c43-3f52-a116-03fa5c14bb51.roa (raw, json)
Hash identifier:          DgS98mZvidkVJvcMHzqNKrRfNeiCZlgMTL45sXqQ8bY=
Subject key identifier:   54:20:94:3E:84:D5:A7:C5:E7:95:3C:0E:EF:71:3D:57:09:E7:F6:5A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B4A47211C913CC43F9BAAEA40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bd9830fe-5c43-3f52-a116-03fa5c14bb51.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     3360
IP address blocks:        192.85.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:21:1c:91:3c:c4:3f:9b:aa:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=0eecd6ad-f898-4901-a194-765bbe123466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f3:3e:ef:a5:c2:94:0b:2a:eb:df:96:df:57:
                    dc:cd:3c:f9:05:0e:f4:92:24:77:62:31:d3:7c:c0:
                    a1:b1:a0:bd:1b:75:09:bf:f9:d5:2e:c5:c0:d3:98:
                    70:9d:cd:6d:b7:17:30:3d:b9:b4:fa:49:4c:b1:b0:
                    e3:ea:65:55:15:42:ea:75:e2:2b:a4:9a:34:1d:87:
                    aa:e3:81:ee:f7:0c:e3:62:e4:95:51:db:f2:9f:a0:
                    58:95:c8:52:da:0a:ac:49:f1:8d:75:a1:f8:e5:c6:
                    8e:af:21:f0:10:54:7e:76:59:e3:98:c8:c7:39:92:
                    14:50:e4:da:ea:82:26:e2:62:07:37:63:71:22:a7:
                    b5:2c:7d:59:ee:e5:a7:95:e5:48:70:fa:f0:e6:79:
                    09:86:6c:33:c3:4c:e4:80:aa:c5:3c:dd:97:8e:51:
                    da:b1:0f:9e:16:6c:03:14:72:6b:5f:c2:8c:4c:13:
                    3b:e8:f1:bd:3b:18:12:d2:11:14:d3:fc:a5:97:ce:
                    a4:82:a7:53:86:12:cd:bb:1e:c0:93:5e:c0:48:ae:
                    f4:69:63:8b:be:ad:2e:07:27:d8:6c:93:37:d7:76:
                    14:7c:34:83:65:c5:eb:0c:3c:d5:5f:06:9c:b4:ab:
                    99:b4:76:f4:90:76:d4:5e:8f:00:2e:b5:6c:b6:34:
                    9a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:20:94:3E:84:D5:A7:C5:E7:95:3C:0E:EF:71:3D:57:09:E7:F6:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bd9830fe-5c43-3f52-a116-03fa5c14bb51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:fe:b3:4d:f3:1a:f3:ce:aa:c6:e9:42:aa:e1:7a:c2:4e:81:
         ee:5f:eb:35:45:2f:12:0f:80:18:ed:96:8b:b6:4b:d7:24:64:
         de:d1:8e:9c:3a:12:8c:65:9d:bb:75:90:c6:46:56:3f:80:0f:
         98:c1:c6:aa:f5:b9:cb:6e:ef:da:ea:08:b4:c1:aa:de:af:49:
         cc:f0:90:93:fd:04:31:a2:df:0c:d7:17:4d:b9:b9:61:9f:10:
         cf:9a:27:a1:bc:12:57:e7:11:a2:62:c0:47:4b:9c:2a:5b:4a:
         d7:37:bc:dd:b0:e5:41:53:ea:a4:f1:25:3e:2d:66:5f:61:f4:
         b6:e7:14:6d:fb:1d:97:e6:05:91:b4:a1:b8:44:bd:cd:f4:64:
         9f:f4:ee:70:ba:4f:a5:98:80:af:18:29:54:a0:60:10:6c:67:
         16:60:69:79:73:25:5c:5b:16:b0:05:c7:0a:0d:f1:f0:a8:af:
         a7:19:7e:a8:27:b8:3e:51:26:d8:00:42:34:d2:50:1b:c7:f4:
         ac:d1:e1:e7:10:38:a1:4d:37:f8:d0:8e:74:b1:ec:85:e4:74:
         47:6a:ad:3d:5f:c1:fa:68:14:79:1f:81:d0:34:85:6c:f2:7d:
         64:c2:c3:81:2c:64:17:c3:85:a1:55:37:14:93:5c:a9:93:21:
         4a:f2:03:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:07 2025 by rpki-client