Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/90d1c0e9-393c-314e-9557-f61fa1481d91.roa
File:                     90d1c0e9-393c-314e-9557-f61fa1481d91.roa (raw, json)
Hash identifier:          5ZuL3il9JONL8AdVuegXzCIF8jfG3zMJtRWnUVTDovI=
Subject key identifier:   06:CA:55:B2:91:29:EB:8A:9B:E5:EC:36:22:DE:CC:5E:9F:53:C9:24
Certificate issuer:       /CN=1226980a-2c43-43da-83fd-198696a9b02e
Certificate serial:       010D0C9F4328584E6F3A3789F32709B63B8FAE80
Authority key identifier: E8:73:DD:6F:FA:D7:67:3A:F2:9A:83:1C:E0:12:63:99:41:57:9E:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/90d1c0e9-393c-314e-9557-f61fa1481d91.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        207.110.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:37:89:f3:27:09:b6:3b:8f:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1226980a-2c43-43da-83fd-198696a9b02e
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=143041ad-a66a-41a4-9a4e-686016014a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:05:3e:56:72:46:d8:56:7c:fb:2f:ec:36:39:
                    35:f5:26:2e:4e:2b:19:92:bc:ff:4a:54:e4:a4:ef:
                    90:95:fd:e2:3c:06:f8:7a:bc:9d:06:35:84:e0:d4:
                    fe:1a:65:7e:56:1b:24:e5:2a:57:1b:28:12:c6:fe:
                    f6:e7:b6:2d:55:0f:d6:7d:5b:d3:f0:f0:fb:cc:bc:
                    df:3a:5b:6b:f3:b1:b6:9f:15:2b:5d:79:eb:6f:0c:
                    72:c5:11:af:bc:b5:72:7a:3f:5a:10:c9:ef:4f:47:
                    77:d1:02:d5:72:7b:bd:91:f9:fd:e0:83:ad:11:94:
                    a3:12:0d:2f:c9:13:02:ee:b0:37:00:57:dc:90:be:
                    7d:35:be:ef:04:37:45:7d:67:11:32:fe:b9:7b:f6:
                    c6:89:39:07:34:37:31:55:76:21:1d:c8:19:89:c1:
                    2f:fe:81:f5:ea:2b:7d:ae:e8:44:52:bc:7d:37:ae:
                    20:4a:66:00:07:76:d3:f3:e1:a5:9e:26:3f:eb:55:
                    66:eb:0a:c8:9d:1e:ba:a3:7d:c0:ca:b8:d0:97:43:
                    e3:3f:ed:70:50:4c:22:a9:78:f0:09:05:66:cd:0b:
                    be:72:2d:b2:f5:ff:54:d5:11:26:17:99:1a:67:74:
                    23:71:b4:65:05:64:ad:5d:43:bb:3b:2a:74:2c:a0:
                    b6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CA:55:B2:91:29:EB:8A:9B:E5:EC:36:22:DE:CC:5E:9F:53:C9:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/90d1c0e9-393c-314e-9557-f61fa1481d91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.crl

            X509v3 Authority Key Identifier:
                keyid:E8:73:DD:6F:FA:D7:67:3A:F2:9A:83:1C:E0:12:63:99:41:57:9E:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.110.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:21:07:16:2c:b7:33:67:f9:4d:17:04:c1:fd:de:4e:fc:6c:
         b7:75:c5:c8:be:7f:c5:9c:e6:ee:ea:b4:06:9c:cd:87:e2:6c:
         ee:f5:45:64:11:72:0c:23:1d:10:06:24:20:f8:e4:7a:f8:84:
         7d:3c:26:56:88:75:e7:e4:d0:bc:0f:44:97:4d:c2:4d:bd:ed:
         ce:c4:8c:de:3b:37:9c:53:12:c8:44:a1:01:43:cb:b0:4b:03:
         21:c4:57:fc:cc:4d:f3:4d:1a:b9:c3:da:9f:de:25:25:16:b9:
         4f:a1:dc:93:b6:6c:e2:11:1f:a2:47:7b:7c:2d:3c:42:2c:38:
         c6:52:9a:c9:7c:1e:9d:69:be:02:1b:bd:bc:3e:ff:7b:9c:c2:
         fd:2e:13:34:60:41:1a:58:ba:e3:fb:e2:ae:3f:93:cf:69:47:
         80:62:d2:36:2d:77:fe:c5:8e:37:c3:30:67:b5:9c:b1:51:2d:
         d5:0f:c9:42:be:53:a4:8e:32:f4:b3:a2:f2:7f:06:c7:29:93:
         cd:d4:c2:85:e6:bb:37:ac:ed:c3:9c:5d:d5:b2:79:92:04:8e:
         e0:72:da:8c:c5:3d:05:8c:4c:67:d6:5f:89:bb:04:d6:55:90:
         a6:f3:fc:01:be:65:aa:d8:88:9b:89:25:2a:f0:ac:70:5d:75:
         02:9d:1f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:42:51 2026 by rpki-client