Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/ef4a4583-f2cf-3fdc-a35f-7b4886cd2058.roa
File:                     ef4a4583-f2cf-3fdc-a35f-7b4886cd2058.roa (raw, json)
Hash identifier:          AHTT8t6TQbk+qkYt+Fiw/ebjBFP5PuBb15S0rTz9vTY=
Subject key identifier:   7A:30:1D:43:55:EF:82:94:CD:79:0E:54:9F:7E:AF:24:2C:A3:99:61
Certificate issuer:       /CN=f6e6ee11-cd51-4809-bddc-1460c28a9121
Certificate serial:       010D0C9F4328584E31CF7F1A5C7FF1EEA18ED600
Authority key identifier: 2F:64:D2:D2:30:94:F0:74:84:57:4C:F6:ED:28:61:F2:B1:E8:27:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/ef4a4583-f2cf-3fdc-a35f-7b4886cd2058.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     12099
IP address blocks:        208.90.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:7f:1a:5c:7f:f1:ee:a1:8e:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6e6ee11-cd51-4809-bddc-1460c28a9121
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=8e02dfa3-6102-46cb-9757-e536fda67ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:7b:9d:d4:be:06:68:b0:a8:02:48:a0:63:
                    04:6d:d9:f1:5b:7c:63:07:be:f5:93:d6:65:56:e2:
                    1b:a3:2e:ee:7f:33:7b:3d:c3:38:3c:05:b8:fd:fd:
                    d4:10:ea:cc:5f:73:51:e8:1c:e6:04:6c:9a:f0:92:
                    36:fa:31:63:4f:12:ca:ac:52:08:ed:fc:39:c2:f4:
                    fd:62:2f:29:e6:f5:a2:e8:e8:0a:16:de:aa:31:21:
                    3d:0c:1b:ff:10:68:96:15:75:8a:3f:8d:9b:0e:60:
                    0c:3c:cd:6e:d3:a5:a1:c2:49:10:95:5b:0e:0d:ca:
                    44:5e:5a:eb:03:8c:b7:a6:e7:e7:96:82:ca:98:be:
                    d0:f2:d4:4e:e3:da:a6:76:d0:9a:a2:f6:ff:dc:f2:
                    5d:8f:f0:31:9c:a9:aa:6a:d8:94:2b:df:1f:18:90:
                    1a:dc:1e:53:2e:df:ca:e9:3f:3e:99:36:17:c6:1c:
                    69:50:a0:f7:06:7b:7a:39:7c:81:61:40:1e:db:93:
                    23:a0:03:25:e9:45:84:d5:fa:65:00:12:de:d5:21:
                    5c:b3:20:88:ed:b0:f7:f9:d8:0d:86:a4:48:d6:65:
                    e2:fd:d5:7a:7f:17:cf:1a:65:9f:74:64:3e:ad:15:
                    b7:e9:9c:27:db:4a:6a:24:0d:a3:9f:f2:7f:db:d4:
                    fd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:30:1D:43:55:EF:82:94:CD:79:0E:54:9F:7E:AF:24:2C:A3:99:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/ef4a4583-f2cf-3fdc-a35f-7b4886cd2058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.crl

            X509v3 Authority Key Identifier:
                keyid:2F:64:D2:D2:30:94:F0:74:84:57:4C:F6:ED:28:61:F2:B1:E8:27:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:c3:03:5c:58:03:51:d4:14:ee:24:5d:f0:8a:60:e5:a7:6c:
         98:60:45:e0:e9:00:03:c6:61:fc:c2:1a:30:64:8e:95:aa:57:
         21:12:61:90:d2:28:b3:cd:5a:9c:3f:a2:91:c4:00:a8:a4:61:
         89:ac:63:d4:99:9e:15:75:be:70:ca:f6:dd:ed:ca:2e:53:da:
         94:52:3c:53:35:a7:16:a9:b3:7e:d1:c0:3d:02:42:87:52:6c:
         9c:18:73:e8:ad:63:7d:41:1c:ad:87:2b:63:be:8b:4d:18:9b:
         ed:fc:05:9d:2f:51:8a:35:ad:fd:f8:18:c6:11:b0:85:ae:fc:
         7d:a7:05:12:7f:cf:2a:1f:5a:f6:97:62:e9:b3:9a:49:2a:35:
         9b:76:17:51:f6:3d:fb:64:8f:1c:04:6b:20:95:9d:74:ef:59:
         68:0f:74:c6:5d:4e:b3:3f:a7:f9:8c:f4:3e:b1:b3:dd:77:7c:
         55:94:e2:04:5a:54:61:f9:26:b8:e1:67:52:db:d1:05:27:4e:
         68:48:40:85:f6:22:44:6c:01:91:da:46:97:ab:8f:8c:f1:e7:
         04:7c:5c:f2:77:2d:a2:e0:e0:37:7b:12:7d:7b:53:6e:15:94:
         41:40:36:fb:c4:8c:e1:93:15:8d:22:17:04:e9:62:ed:27:13:
         5e:36:b6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:41:23 2026 by rpki-client