Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/bf34b10c-399e-3953-8e59-8b8cfd54eb83.roa
File:                     bf34b10c-399e-3953-8e59-8b8cfd54eb83.roa (raw, json)
Hash identifier:          B3TfPI1M3CeuBsRBOxmXdO3njIgaB2XFrHWczQfb0H4=
Subject key identifier:   17:56:D7:B1:EC:27:A2:52:C9:AB:DF:30:D6:F1:2D:25:72:8B:26:42
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584B970D0125A277C835C3046440
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/bf34b10c-399e-3953-8e59-8b8cfd54eb83.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     13768
IP address blocks:        69.90.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0d:01:25:a2:77:c8:35:c3:04:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=92e77326-c16e-4f81-84a2-1285b68de505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ed:88:02:e5:f0:0b:6a:98:81:e0:7f:c7:dc:
                    79:c9:3a:3e:59:65:e6:cf:00:27:81:2f:df:1c:ec:
                    9c:99:d1:d5:10:94:72:5b:e2:7b:33:3b:c4:a6:3d:
                    a9:41:04:89:f6:20:00:7b:31:07:0f:17:7c:c3:30:
                    a0:37:53:a4:61:b0:4f:ba:f3:b8:cb:e8:cc:04:42:
                    23:7a:c7:23:c3:e0:79:0f:b6:53:dd:76:31:d9:9f:
                    fe:39:7e:b3:6d:ca:0b:8c:14:fa:1b:5d:c6:78:36:
                    29:bd:81:08:93:c1:64:4c:3d:7a:ac:d6:04:b9:6e:
                    97:0a:ae:40:aa:27:49:2e:a4:4e:28:a0:e4:31:18:
                    a2:74:91:6b:3a:2a:88:5d:ed:d0:46:04:dc:3c:a2:
                    93:c3:76:7b:70:0c:8f:f5:23:26:c6:13:64:1a:a7:
                    14:e6:6d:40:91:6f:29:c9:4c:c0:d1:0a:63:34:01:
                    c2:7a:ba:09:f2:d0:7c:87:7e:7c:81:12:57:51:4c:
                    26:6f:f8:69:58:a2:b9:55:09:81:41:34:23:e9:dc:
                    02:49:c9:9f:86:36:e6:57:be:3e:24:f9:90:b4:2e:
                    ed:3a:e6:aa:c7:0b:05:ca:b0:e0:7d:f7:2b:d1:8c:
                    03:fe:a4:85:c2:47:c8:5c:c7:85:bd:38:d5:6f:2b:
                    4e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:56:D7:B1:EC:27:A2:52:C9:AB:DF:30:D6:F1:2D:25:72:8B:26:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/bf34b10c-399e-3953-8e59-8b8cfd54eb83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.90.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:db:0f:c1:48:59:48:41:98:4e:1c:51:0f:77:cd:53:52:da:
         72:6b:90:86:46:14:18:d9:19:86:fa:1d:f8:bd:0c:e1:c0:9a:
         a7:63:27:50:99:94:08:01:0c:29:94:7e:48:eb:af:7d:e2:52:
         e3:1d:8c:9c:07:8e:a2:c4:3a:a0:8c:3f:11:09:c3:24:dc:20:
         5e:db:e6:68:e8:3f:89:dc:bd:d0:96:bf:6a:68:c4:a5:f3:70:
         f4:9c:9c:b8:6e:03:fb:9b:ea:44:4b:53:a1:d5:4e:5f:02:36:
         70:1b:fd:24:89:86:73:08:34:3a:03:77:bc:ae:14:54:09:b0:
         63:71:e1:28:85:5c:23:8c:d7:2d:15:46:73:dd:22:39:23:36:
         b9:58:0b:11:ff:53:29:a4:2a:3c:9c:6a:d0:42:42:b5:c6:b1:
         a8:86:32:19:03:54:0b:43:92:a7:e3:ab:d5:c2:7b:1f:95:73:
         38:29:bc:d6:83:a7:33:2a:f1:d4:0f:ad:f6:f3:da:bb:d8:86:
         55:41:3a:0f:ea:a5:5b:0f:bf:9e:bc:47:94:a4:a4:d8:9a:a4:
         9c:33:e6:1d:87:e2:c8:71:8c:92:7e:1c:77:2e:41:39:b4:a7:
         03:60:2e:1e:95:de:7f:83:cf:59:02:54:37:d7:20:fd:df:51:
         1a:ff:7f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:48 2025 by rpki-client