Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/dbe5733e-36c8-378c-88f2-39ec41abc78c.roa
File:                     dbe5733e-36c8-378c-88f2-39ec41abc78c.roa (raw, json)
Hash identifier:          AzDw8O80pkKT9Igk1ZiB6YctcBQlkK0l8jJ4OzG2w4M=
Subject key identifier:   07:A2:A4:6B:70:C3:64:38:B5:F5:BF:E6:A9:EC:A7:DA:FC:FC:4E:8F
Certificate issuer:       /CN=bc90ca9e-6412-4bd6-8621-eeaf44930b1f
Certificate serial:       010D0C9F4328584D8AC547E1E0BD113036195520
Authority key identifier: 67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/dbe5733e-36c8-378c-88f2-39ec41abc78c.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        204.90.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:47:e1:e0:bd:11:30:36:19:55:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc90ca9e-6412-4bd6-8621-eeaf44930b1f
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=59f9ed25-f2f9-4a36-ace1-e187cd1f6386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:90:4f:40:35:85:d5:b2:99:58:57:a7:77:90:
                    80:d5:64:46:e6:a7:5e:04:15:cf:79:c6:fe:0b:31:
                    20:6f:36:7c:ea:e3:67:cd:2f:e8:cc:02:e9:b0:e0:
                    5f:ca:a7:9c:09:53:40:0c:9b:ca:b5:7e:cd:10:43:
                    61:67:e7:eb:e1:dd:db:18:03:de:ff:b5:97:2a:29:
                    61:5a:0b:1e:29:3c:11:fc:7f:fd:07:e8:63:b7:5e:
                    00:8d:af:48:93:af:47:96:60:db:74:75:50:e7:b1:
                    3c:0f:a2:e7:c2:63:db:e5:0c:73:45:c5:9e:75:9e:
                    8b:a2:70:86:56:08:45:74:14:b7:87:81:59:36:47:
                    72:70:5f:e0:b8:89:15:99:a9:65:58:d5:ab:78:a0:
                    b2:d5:5c:ca:3b:e6:89:96:05:53:96:58:1a:cf:59:
                    7c:f3:d4:53:c1:23:f4:b4:74:65:83:2a:3b:b5:a4:
                    32:62:f1:34:e5:5f:13:54:2c:14:5b:fe:0d:dd:90:
                    c3:56:ab:e2:a0:50:ff:14:34:c5:50:9f:e5:cd:e9:
                    9c:b3:ef:6a:6f:e8:39:81:52:fa:f2:3c:73:2b:1d:
                    3e:66:26:54:74:f9:5a:d5:95:a8:a1:e7:f2:bc:04:
                    29:b3:49:fd:63:07:72:d1:8e:36:73:64:ca:a0:4a:
                    35:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A2:A4:6B:70:C3:64:38:B5:F5:BF:E6:A9:EC:A7:DA:FC:FC:4E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/dbe5733e-36c8-378c-88f2-39ec41abc78c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.crl

            X509v3 Authority Key Identifier:
                keyid:67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.90.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:88:ce:ce:97:17:d4:87:82:ae:34:cf:13:0f:20:fe:94:7e:
         ae:7d:70:10:95:ce:9b:fb:f7:62:01:3a:12:2e:7e:d9:1e:33:
         70:24:a5:a1:b8:0c:8e:23:9d:9f:c2:c6:72:01:34:73:7d:28:
         5c:04:4b:53:12:af:9c:df:e3:20:db:ff:b8:38:f7:09:7c:b7:
         99:df:0e:7d:87:d9:35:c9:d2:8b:bd:e3:7b:b2:d8:73:3c:07:
         ef:e7:53:a9:16:79:40:c6:d0:69:6c:f0:1c:87:a8:7c:a0:5b:
         a2:ba:45:ea:31:57:c2:78:51:e4:30:9d:53:28:8f:4a:ed:d1:
         b2:a1:cd:5c:ae:04:f1:09:25:82:1c:b9:cc:ac:c3:f7:57:c0:
         14:e3:0f:d4:52:02:53:a6:23:bf:49:ff:81:52:bb:bc:d1:cb:
         43:5d:91:37:bc:17:ee:34:30:6b:26:99:44:e3:fe:b3:8d:2f:
         92:b6:98:77:e1:76:ec:6f:fe:c4:e9:72:c4:73:25:20:18:6c:
         c8:7b:b5:e8:7d:16:4f:08:cd:a6:a6:82:78:f8:85:d9:aa:03:
         ca:3a:59:f6:45:02:ca:ce:ba:27:a0:27:56:5b:b7:7a:0b:d6:
         06:df:3c:15:e8:3e:60:25:d4:56:4e:5c:8c:ab:92:f5:2f:a2:
         46:20:c5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:19:34 2026 by rpki-client