Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/0fc8f4c5-ceae-33f4-bb61-e2384f2eaf5d.roa
File:                     0fc8f4c5-ceae-33f4-bb61-e2384f2eaf5d.roa (raw, json)
Hash identifier:          T68pawLBmJF1IOOeg6NlnRQJQ0x7u9Wuc86PyjYYgW8=
Subject key identifier:   A6:39:2F:4B:9D:AD:8D:F5:B9:34:AC:0A:52:5A:15:FB:E1:66:1C:22
Certificate issuer:       /CN=cbe51a2e-768b-4b93-baac-8cae43186078
Certificate serial:       010D0C9F4328584D492A6020725E7F95115F9A80
Authority key identifier: C9:95:CD:3F:9F:7E:84:04:FF:F1:FC:17:A5:0C:DC:3F:E2:2F:56:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/0fc8f4c5-ceae-33f4-bb61-e2384f2eaf5d.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     394923
IP address blocks:        185.90.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/cbe51a2e-768b-4b93-baac-8cae43186078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/cbe51a2e-768b-4b93-baac-8cae43186078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:60:20:72:5e:7f:95:11:5f:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe51a2e-768b-4b93-baac-8cae43186078
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=8a1b54df-ab53-40d4-aee5-05e72339b526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:00:35:80:02:69:25:64:28:d8:31:46:0e:
                    f0:46:23:bf:e5:3e:3b:28:39:62:12:77:18:96:4f:
                    62:e4:a6:cf:21:87:de:a0:75:40:02:8c:d9:54:f5:
                    c9:2c:a7:f2:19:ec:66:3e:50:f0:18:6f:ad:96:aa:
                    8c:cb:38:d7:61:5e:dc:78:3f:c8:67:b9:5e:20:d1:
                    38:19:f6:2f:0f:a0:1e:3c:99:d2:3e:c9:15:45:c5:
                    cf:40:b9:d7:36:3c:c0:08:3b:83:b5:cd:e9:0a:e0:
                    85:67:23:01:a1:f5:26:8d:ad:25:6c:d5:43:ca:55:
                    a1:16:95:22:e6:93:f7:23:16:bb:02:83:b5:32:be:
                    a3:f5:c2:5f:d1:38:0c:68:9e:50:42:62:2c:2f:b6:
                    6d:41:c7:3a:53:a3:85:70:e3:9d:b5:86:47:4a:af:
                    62:e7:fb:87:e5:07:a3:03:33:17:05:1c:9e:22:01:
                    0f:fe:f8:ee:34:ef:34:6b:70:bb:8c:22:55:dd:df:
                    a1:47:32:c1:d7:57:58:c3:78:21:5a:32:f5:ad:24:
                    ed:9d:df:84:05:0a:0a:6c:23:37:d7:87:d8:d2:9b:
                    55:4c:e5:a4:a2:e4:f0:cd:2a:e5:de:a9:98:45:da:
                    a8:6a:80:e9:c2:24:c7:bb:a5:58:0c:ee:1e:7a:1c:
                    7e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:39:2F:4B:9D:AD:8D:F5:B9:34:AC:0A:52:5A:15:FB:E1:66:1C:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/0fc8f4c5-ceae-33f4-bb61-e2384f2eaf5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/cbe51a2e-768b-4b93-baac-8cae43186078.crl

            X509v3 Authority Key Identifier:
                keyid:C9:95:CD:3F:9F:7E:84:04:FF:F1:FC:17:A5:0C:DC:3F:E2:2F:56:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.90.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:3f:2e:64:55:f7:d3:39:33:e1:20:c2:41:c4:8f:25:1b:c0:
         38:2c:4a:6b:ff:87:bb:1f:93:f5:3f:d7:b4:a5:ae:0a:74:3d:
         4d:38:84:18:f1:29:94:ac:e7:98:8b:96:0a:76:47:e0:d7:12:
         7d:3e:af:a8:6c:0f:12:2d:3a:dd:37:9f:a8:9c:3d:2a:e6:59:
         d4:c0:ba:69:7c:47:99:ac:86:cb:db:e4:2a:76:e0:28:d5:64:
         b8:88:96:6b:72:85:7a:a4:c0:e3:06:d2:e0:ee:19:1d:19:75:
         ee:15:05:8f:15:08:2b:13:53:e8:ff:33:4d:f7:01:d5:2b:7e:
         9d:c8:54:8c:70:cf:e2:08:30:bc:33:d2:dc:96:dd:26:f7:fc:
         f7:ee:25:b5:06:0c:30:45:e0:e8:2d:b7:4e:76:8c:ce:60:e4:
         70:d2:65:ab:2a:e6:39:50:c3:5a:f5:ab:69:8b:ca:e3:b9:59:
         f2:43:c1:fc:4d:94:6f:7a:23:99:9c:16:f6:63:e7:e0:d4:1e:
         db:02:e8:28:cc:10:51:8a:78:34:fa:2a:27:da:8c:19:5d:3a:
         3a:34:5b:3c:65:87:1c:8b:0a:f0:8d:59:87:e7:ef:5a:9d:75:
         5d:ac:61:94:94:bf:c0:b9:e0:0c:a7:c6:82:c8:68:5b:3d:8d:
         f4:db:51:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:19 2026 by rpki-client