Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8f2ddf7f-0e14-3442-8382-453a34974ca6.roa
File:                     8f2ddf7f-0e14-3442-8382-453a34974ca6.roa (raw, json)
Hash identifier:          p2//JdW+4PvsrlNJi8ocZ0pfOAqwlPTsYw9KsH/ef0s=
Subject key identifier:   48:E6:F4:ED:F4:E4:FC:FD:AA:4F:31:5C:87:25:97:19:8F:6F:2D:70
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F538B23FEDCF6200456A30D80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8f2ddf7f-0e14-3442-8382-453a34974ca6.roa
Signing time:             Mon 28 Sep 2026 15:47:54 +0000
ROA not before:           Mon 28 Sep 2026 15:47:54 +0000
ROA not after:            Sun 27 Dec 2026 16:47:54 +0000
asID:                     62904
IP address blocks:        23.90.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:8b:23:fe:dc:f6:20:04:56:a3:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 28 15:47:54 2026 GMT
            Not After : Dec 27 16:47:54 2026 GMT
        Subject: CN=7ee3cabd-fff3-4de9-8671-f4d91d631660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2c:c4:60:72:74:0d:1b:6b:42:63:08:0f:2a:
                    55:04:dc:cf:f7:1c:cc:83:b5:4a:f6:65:fb:78:a0:
                    55:63:b3:3d:dd:45:58:77:50:99:5c:a4:a8:a1:be:
                    97:0e:1a:2b:19:d7:fe:b4:d2:27:bd:e9:49:56:46:
                    9a:26:33:43:79:be:67:ec:8a:a9:7a:74:47:b8:94:
                    be:fc:80:57:98:e1:f9:38:e0:b6:84:fb:5f:e1:5c:
                    f3:43:79:fa:f8:ae:cf:83:23:c4:f0:33:56:6b:67:
                    a1:a0:fb:f3:28:ba:d4:50:75:e7:65:6e:8a:3a:0e:
                    2c:fb:d1:22:cf:7f:41:95:44:73:11:0c:be:23:e0:
                    4b:5a:8b:03:3b:85:c6:5a:77:83:20:1e:e3:cd:1a:
                    4a:8e:04:04:52:9c:67:b7:2f:62:5f:ab:0b:4a:79:
                    fa:ac:e8:eb:ed:7d:54:91:a4:d2:d9:31:91:5d:e5:
                    67:9e:38:da:66:9b:1e:fe:22:0e:a9:d3:e7:a6:08:
                    47:5d:f7:f3:96:e2:0c:6d:5e:94:96:68:9a:c0:db:
                    c2:47:0d:23:e6:0d:ed:82:eb:34:9e:e2:3f:bf:ea:
                    25:eb:82:07:e2:29:92:49:d6:7c:fa:dc:e8:e1:63:
                    60:eb:a2:90:59:bc:b9:00:d9:86:ba:45:29:08:8b:
                    5d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E6:F4:ED:F4:E4:FC:FD:AA:4F:31:5C:87:25:97:19:8F:6F:2D:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8f2ddf7f-0e14-3442-8382-453a34974ca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:61:7e:9f:9c:04:84:ee:db:5c:2b:77:39:7d:a8:ae:9b:1c:
         97:e3:07:52:68:4d:06:d2:3b:d4:81:78:09:10:6f:8e:91:21:
         b8:ac:ce:5f:c3:25:7e:21:9d:fc:e8:f3:19:a6:0c:b9:4f:76:
         a6:f0:71:bb:7f:a1:5d:75:b2:ef:e6:44:3f:44:b9:83:e1:2a:
         9c:f3:9f:dd:ce:d7:52:9d:11:7f:cf:6f:89:1e:e8:a6:aa:92:
         e7:49:25:a7:12:b0:c7:6d:cf:d4:96:97:ea:04:e5:4b:3f:b2:
         d9:a2:62:6d:82:e4:86:0c:8b:ce:41:be:74:68:d9:be:11:4c:
         45:af:9d:a1:04:84:79:07:3c:7d:43:cc:b0:cf:27:30:f9:55:
         66:4b:42:29:8a:b2:cd:81:df:70:80:8d:7a:99:3f:a8:66:ae:
         cb:b7:e6:a3:7b:8d:40:f7:09:8a:a9:4d:44:48:d4:c3:16:d7:
         dd:2d:9b:e1:b2:03:73:97:4b:45:f7:ff:bc:7b:42:3d:dd:74:
         28:63:dc:bf:0f:74:ad:bc:8d:cb:99:92:53:97:cf:5e:a1:98:
         5f:ae:20:7b:84:e1:c0:4a:10:e9:45:33:1b:79:2c:41:ce:f3:
         d7:fe:52:39:17:51:ea:ea:03:75:30:0f:fb:f7:38:5a:24:13:
         89:e9:66:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:26:45 2026 by rpki-client