Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/99ad1afc-0acf-3137-b6fa-ff1cb89cd8c6.roa
File:                     99ad1afc-0acf-3137-b6fa-ff1cb89cd8c6.roa (raw, json)
Hash identifier:          Em2kWE+qlhc22Ub6W4yUpU0KuMVtNoEYZonS2f+Sa8U=
Subject key identifier:   9B:90:6A:AE:45:47:41:15:73:96:67:94:F1:F6:04:7B:B4:A0:A8:0A
Certificate issuer:       /CN=e9769409-4db3-443e-9837-3afd4dca595d
Certificate serial:       010D0C9F4328584F4C3D4E224A3B4AD7578E6180
Authority key identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/99ad1afc-0acf-3137-b6fa-ff1cb89cd8c6.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     23316
IP address blocks:        107.190.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:4e:22:4a:3b:4a:d7:57:8e:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9769409-4db3-443e-9837-3afd4dca595d
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=5af12696-479d-4edc-8717-26c3ae2adb61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:1a:bc:a5:02:68:fc:a3:d8:3c:4b:b8:bf:
                    5e:b2:9c:97:ef:09:73:0e:39:a7:8b:4b:d5:f4:54:
                    92:6e:a9:68:d7:dc:6c:33:f7:60:93:07:a7:b2:be:
                    73:85:ad:c0:b0:c6:3d:65:14:d1:46:37:20:60:8c:
                    e8:c8:fb:9e:07:cb:28:dd:3e:ca:fa:8b:9e:ef:fb:
                    b6:44:cd:ee:7b:8e:60:9e:a8:2f:a9:5a:b5:57:27:
                    d8:00:01:aa:3c:01:cd:49:01:25:50:1e:a1:32:bb:
                    f5:ef:fc:6d:cc:b4:5a:f7:e9:8a:0d:d5:67:2e:83:
                    aa:ee:06:03:89:f3:16:0f:5d:18:8d:0b:41:c5:18:
                    02:3d:d0:9c:7d:d0:ed:ab:43:e5:85:ce:e0:68:ff:
                    38:f2:de:4c:76:76:38:f2:c6:00:ef:31:6d:63:25:
                    2b:cc:53:f4:1b:17:ca:33:c8:35:ca:88:92:f7:50:
                    b2:15:d9:f1:de:ed:8d:c5:98:2f:c0:77:92:f1:1a:
                    89:53:19:d5:b3:64:94:80:84:12:05:92:83:b9:50:
                    ba:d6:b8:f6:68:8a:c4:a7:57:21:b1:24:5d:34:38:
                    94:0d:59:d0:b5:39:97:41:76:73:96:90:e9:2c:52:
                    f1:69:78:66:38:60:37:b0:66:4f:38:0d:b5:b2:72:
                    65:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:90:6A:AE:45:47:41:15:73:96:67:94:F1:F6:04:7B:B4:A0:A8:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/99ad1afc-0acf-3137-b6fa-ff1cb89cd8c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.190.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:7a:ef:86:ce:0d:c2:ed:8e:47:6b:93:d0:d8:80:2b:e0:b2:
         4e:82:8a:06:ca:c2:8c:89:fa:b5:79:38:bb:49:42:87:d1:62:
         7c:9c:96:d9:94:ad:da:4e:bf:18:e3:a2:54:39:8b:20:d1:3b:
         25:85:0f:08:d7:34:7a:3b:fd:8a:24:5d:9a:10:6f:75:e8:aa:
         70:7b:5c:55:b2:b0:12:b2:fc:b7:c4:b5:cd:e7:74:79:18:d9:
         67:a9:c1:17:42:5e:78:c8:07:9d:24:88:0f:2a:43:3f:ea:52:
         80:29:7f:0a:0d:53:dd:b5:39:be:d4:04:b1:81:ae:a3:ff:5c:
         8a:1c:05:33:32:0d:d9:1c:52:53:c0:9a:cb:d5:2f:f7:91:8b:
         48:39:76:30:60:f9:c4:16:5e:f1:a8:b7:8b:75:6a:f2:75:95:
         e6:8b:aa:bb:2c:ce:fd:b4:5e:40:db:69:82:dc:e5:af:53:78:
         04:fc:97:50:ee:ed:79:11:1f:40:72:27:24:47:0d:4e:db:2e:
         40:a7:3e:1d:d6:20:e6:74:83:78:9b:b9:f4:a7:96:a4:02:a4:
         7d:67:08:80:f4:ad:37:e9:b3:86:b0:ce:92:c1:ba:4a:8c:01:
         db:66:9d:57:32:f9:ee:fb:9c:e5:ea:01:85:4f:04:82:6b:08:
         22:9c:6d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:53:10 2026 by rpki-client