Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/703f81f8-e3a5-32c5-b258-af187e9c2235.roa
File:                     703f81f8-e3a5-32c5-b258-af187e9c2235.roa (raw, json)
Hash identifier:          jcxBhokdarJ2Luefun2XLSsyWswtnHBnnFBr02B6Ftc=
Subject key identifier:   B8:41:91:57:84:DE:F2:70:D9:E1:01:72:9D:3D:20:34:A1:B4:98:74
Certificate issuer:       /CN=5ef47802-71c5-4583-b0cb-8a40855a7c8b
Certificate serial:       010D0C9F4328584D5024F8F0F73AAA80C8F60580
Authority key identifier: 84:C5:9C:97:A0:F3:86:4C:E8:E3:92:B4:78:80:B0:D2:08:F3:67:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/703f81f8-e3a5-32c5-b258-af187e9c2235.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     26239
IP address blocks:        208.90.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/5ef47802-71c5-4583-b0cb-8a40855a7c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/5ef47802-71c5-4583-b0cb-8a40855a7c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:f8:f0:f7:3a:aa:80:c8:f6:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef47802-71c5-4583-b0cb-8a40855a7c8b
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=c599a7f6-cb92-44f8-aa61-afc651634945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bc:64:f6:22:13:02:24:de:d3:61:9e:60:26:
                    68:ca:94:b6:ca:31:18:17:d9:b4:21:ea:96:65:cb:
                    33:9d:3c:dd:c8:c8:c4:b7:a2:df:69:7f:93:78:67:
                    81:0f:f9:0c:f7:ad:4f:c6:03:1f:92:3c:a7:9e:24:
                    bf:15:20:23:5a:5b:6c:c2:ad:38:7e:21:fe:c2:a6:
                    b3:90:f0:dc:64:77:21:33:c5:c7:7d:2e:d9:ae:cf:
                    1e:a3:8a:54:e9:6a:fc:cc:d4:b1:f2:a7:4e:7b:94:
                    9b:96:4c:07:31:91:af:da:17:ee:27:94:e6:33:2a:
                    8a:ae:9f:8e:c1:6c:5d:1a:b3:df:39:ba:26:b5:3f:
                    0d:a8:8e:69:24:72:87:73:85:e3:e4:6f:29:ac:ad:
                    95:23:44:8e:b8:df:af:32:dc:27:17:04:aa:b8:35:
                    61:55:70:5a:5a:43:e1:6a:6b:3c:6f:ae:3b:52:70:
                    8c:49:66:39:48:f8:b1:4d:29:f4:ef:b1:29:c1:2f:
                    1b:1f:bd:41:ba:ef:63:82:4f:77:6e:72:63:d2:2a:
                    04:1e:49:31:b6:30:e0:2e:4e:bd:54:e7:fd:c8:4e:
                    2c:48:a6:3a:34:41:cf:a1:16:fd:b8:89:da:10:32:
                    42:61:68:96:44:d7:03:45:cf:c5:a7:0f:cb:02:44:
                    0f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:41:91:57:84:DE:F2:70:D9:E1:01:72:9D:3D:20:34:A1:B4:98:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/703f81f8-e3a5-32c5-b258-af187e9c2235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b/5ef47802-71c5-4583-b0cb-8a40855a7c8b.crl

            X509v3 Authority Key Identifier:
                keyid:84:C5:9C:97:A0:F3:86:4C:E8:E3:92:B4:78:80:B0:D2:08:F3:67:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ef47802-71c5-4583-b0cb-8a40855a7c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:d6:db:f1:ec:7d:39:fd:9b:b6:4d:0c:25:02:40:08:71:0e:
         6f:5a:2e:b1:0d:41:89:f4:2a:6d:72:46:7c:2c:16:04:d4:dd:
         1d:62:59:73:67:f6:3b:ec:89:bf:a5:9d:f4:60:ad:3c:fd:f2:
         0d:2e:0f:d2:14:5b:99:1d:2c:20:7a:90:e1:47:d1:67:90:af:
         03:49:2b:3f:9d:43:10:35:4a:b9:2e:18:e3:d9:56:f9:7f:79:
         f3:9e:af:d9:3b:20:2c:c5:55:f1:69:a6:17:b7:a4:83:59:e9:
         00:5d:ba:d3:42:a3:4b:4a:6a:a0:40:b5:d9:ff:fa:0a:33:e5:
         21:7a:6e:bb:60:dd:38:76:29:be:d9:34:6c:7d:12:70:a3:93:
         d0:51:3d:24:41:22:3d:3f:5e:d2:47:f2:55:3a:54:8e:66:55:
         60:6e:7c:93:66:53:b4:ae:32:db:26:11:60:3d:c3:3d:57:ed:
         58:2b:3e:c6:d1:09:a3:75:20:da:4e:15:4e:93:af:46:60:dd:
         2d:b2:d5:b5:7d:ae:38:8b:bd:06:80:5f:4f:f9:68:29:02:cf:
         ea:48:15:91:e6:4b:71:d0:81:4a:8b:d3:08:8e:69:cc:c0:a9:
         ca:d6:74:eb:6c:c7:78:a4:14:69:aa:07:66:5b:3f:91:0b:7c:
         0b:70:8e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:32 2026 by rpki-client