Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/237965a8-6421-3801-962f-f8d0e3a18681.roa
File:                     237965a8-6421-3801-962f-f8d0e3a18681.roa (raw, json)
Hash identifier:          v0XNCKieNTpo1zSv6NLHGzj/wmE1J0KJRcl5Q1eKCuA=
Subject key identifier:   29:31:F5:0C:57:1B:F3:78:CE:DC:AE:56:F0:C3:A4:A9:4E:43:34:A4
Certificate issuer:       /CN=5ef47802-71c5-4583-b0cb-8a40855a7c8b
Certificate serial:       010D0C9F4328584B94422F230B2F4CC2E6CF8F80
Authority key identifier: 84:C5:9C:97:A0:F3:86:4C:E8:E3:92:B4:78:80:B0:D2:08:F3:67:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/237965a8-6421-3801-962f-f8d0e3a18681.roa
Signing time:             Mon 20 Oct 2025 01:00:31 +0000
ROA not before:           Mon 20 Oct 2025 01:00:31 +0000
ROA not after:            Sun 18 Jan 2026 02:00:31 +0000
asID:                     26239
IP address blocks:        208.90.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/5ef47802-71c5-4583-b0cb-8a40855a7c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/5ef47802-71c5-4583-b0cb-8a40855a7c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:94:42:2f:23:0b:2f:4c:c2:e6:cf:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef47802-71c5-4583-b0cb-8a40855a7c8b
        Validity
            Not Before: Oct 20 01:00:31 2025 GMT
            Not After : Jan 18 02:00:31 2026 GMT
        Subject: CN=9d669c20-c1d4-439b-b86f-05c75c84d46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:aa:40:b1:06:3e:b7:d5:45:2f:30:cd:3f:6e:
                    fa:59:33:36:47:98:06:da:20:49:97:53:52:51:63:
                    c7:ec:8e:af:ba:83:e7:95:e2:30:38:e0:e9:35:a8:
                    3d:ef:32:19:3d:2c:a1:49:d8:22:2d:ff:12:5b:81:
                    a7:77:d9:1a:d9:f7:04:83:e2:27:70:c8:7c:1b:e2:
                    c0:19:f5:7f:31:a1:11:40:54:a3:e9:e3:96:81:08:
                    77:f9:7f:a4:cb:56:e7:c8:3e:d7:1e:c1:5a:e6:fa:
                    13:92:ac:3d:0f:53:d3:6c:63:9e:92:d7:39:87:ee:
                    1f:4d:94:0d:9d:43:ad:ef:0a:b6:e8:c8:61:31:5c:
                    01:0b:18:23:ed:bd:5a:b4:63:2f:e9:74:be:7c:53:
                    a5:b3:2e:17:5b:12:32:3e:6a:7c:87:a9:d5:27:e0:
                    30:6f:cb:27:02:e7:f9:66:fe:b1:46:f6:d7:4a:88:
                    b2:0e:7d:06:94:f0:b4:9d:5a:c1:b4:56:6c:ec:d0:
                    2c:31:c6:49:f7:14:7d:6f:45:b8:9a:23:b9:cc:03:
                    e4:54:75:4d:b6:56:e7:c2:83:f9:27:3a:72:9a:6b:
                    fd:16:b0:53:ea:2e:bf:d0:fd:d8:19:ac:42:5f:30:
                    ba:d6:0a:48:8c:85:a4:1f:75:78:aa:c3:61:f2:5b:
                    8e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:31:F5:0C:57:1B:F3:78:CE:DC:AE:56:F0:C3:A4:A9:4E:43:34:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/237965a8-6421-3801-962f-f8d0e3a18681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/5ef47802-71c5-4583-b0cb-8a40855a7c8b.crl

            X509v3 Authority Key Identifier:
                keyid:84:C5:9C:97:A0:F3:86:4C:E8:E3:92:B4:78:80:B0:D2:08:F3:67:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:71:95:b7:24:94:3f:23:ba:e6:3e:53:40:38:72:a4:15:78:
         71:67:ee:d1:4e:79:d2:7f:c3:34:eb:2d:95:c4:6e:e0:2b:77:
         0b:f0:a2:2d:b2:ac:64:3d:77:80:0c:d4:e0:07:f4:ca:1a:3d:
         7f:32:cb:e6:7b:0f:07:b9:fc:2c:65:46:80:f5:25:a2:52:d9:
         01:61:9b:b1:c6:91:64:02:90:f2:1e:4d:cc:99:5c:99:45:a3:
         cf:22:3e:ec:ff:4a:ba:46:31:be:bd:99:c7:f2:c4:56:c7:92:
         d9:75:8e:47:bd:97:c5:41:48:94:c4:b6:bc:56:86:c7:0c:8b:
         be:a5:79:f9:04:50:43:ea:6e:a6:2b:46:11:f9:21:1e:c2:e8:
         b5:d2:b1:7a:48:a1:7c:46:62:79:fd:60:40:52:6b:e5:18:56:
         01:e6:56:4a:4d:3e:f9:40:24:58:17:a2:29:d0:d3:19:e4:7d:
         f6:8f:11:95:19:96:8a:eb:05:a7:a3:c3:bf:cf:d4:8b:12:ae:
         61:d2:a3:26:c8:4e:f6:48:bd:f9:0f:2f:90:cb:33:53:b9:71:
         0e:9e:12:22:74:4f:0c:13:58:77:43:ec:9e:3e:31:86:a0:c8:
         69:4d:ad:9e:05:49:4e:c5:71:7f:2e:d9:bf:ff:51:34:6d:62:
         92:cd:75:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:49:43 2025 by rpki-client