Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/4a11bf93-20d7-3bdd-a88e-9545f92766cd.roa
File:                     4a11bf93-20d7-3bdd-a88e-9545f92766cd.roa (raw, json)
Hash identifier:          lSMg0B+s6xhLDpjtcMFECaQCEJw7DAByZLp6wM+uY6I=
Subject key identifier:   36:E3:70:46:D3:18:C1:1F:D8:EC:0E:0A:4F:5D:E6:B3:57:91:95:F8
Certificate issuer:       /CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5
Certificate serial:       010D0C9F4328584F1467957A79FA02BC19293814
Authority key identifier: 0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/4a11bf93-20d7-3bdd-a88e-9545f92766cd.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     7311
IP address blocks:        216.126.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:95:7a:79:fa:02:bc:19:29:38:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=d551d4e0-f7c5-475a-a482-ebc4493dd1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4a:75:2e:7e:16:b9:f3:80:97:df:91:c4:9f:
                    1a:a4:17:d4:98:89:1a:b4:e0:5a:b4:eb:4c:86:dc:
                    49:4e:58:3c:de:28:a6:c4:79:f8:9d:94:4b:cf:17:
                    57:a8:8b:f7:05:75:9e:db:df:fb:d5:f0:2e:40:72:
                    16:e5:a5:ff:9f:b8:c7:d0:2c:ae:24:00:5c:01:04:
                    e8:b8:02:36:73:64:3f:0b:7d:70:46:81:f3:85:2a:
                    55:1e:09:45:e8:b2:57:be:fa:f3:27:b6:2d:41:e1:
                    e0:16:58:ae:5a:14:cb:db:56:d6:e8:27:f2:48:c4:
                    6c:75:f1:0f:21:1a:5a:9a:b5:e2:62:f2:75:7e:8e:
                    82:56:e9:98:68:b2:25:25:16:84:3f:4d:7c:e4:75:
                    67:f1:16:3d:f2:2f:69:0b:d3:ae:59:0f:e2:72:96:
                    bc:99:a7:42:9f:71:44:91:62:84:32:18:ef:2f:dc:
                    49:d6:de:47:0d:07:df:90:b2:06:33:9d:f6:4d:67:
                    c3:e0:ae:47:67:e8:f9:1e:e2:e0:10:80:d6:32:92:
                    20:ff:ab:2c:ba:a4:c8:39:06:3a:83:e8:b8:88:4b:
                    87:0c:49:b9:d4:67:e2:e6:0b:ae:f2:bb:95:ba:a2:
                    78:0f:bd:95:e2:d5:87:35:38:ae:4e:4a:5c:74:06:
                    24:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E3:70:46:D3:18:C1:1F:D8:EC:0E:0A:4F:5D:E6:B3:57:91:95:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/4a11bf93-20d7-3bdd-a88e-9545f92766cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.crl

            X509v3 Authority Key Identifier:
                keyid:0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:c6:89:4e:8a:67:72:a1:b9:02:79:6a:ad:63:ef:70:19:91:
         b0:ec:2b:5a:a8:65:0b:46:a9:e5:d1:57:6b:25:8d:ae:a4:2c:
         26:8f:5c:89:0a:86:aa:64:3b:d1:02:78:a5:97:41:15:7f:de:
         08:2d:13:88:e5:d1:41:c2:d9:90:2d:89:89:ff:7c:f9:05:29:
         77:7a:ef:73:63:b2:6d:92:9d:2f:fd:a6:07:16:1f:ca:d5:61:
         b4:2d:65:90:6e:8b:0e:0a:5c:6c:56:b5:1d:9f:f7:6a:66:0e:
         cc:21:b5:76:23:ca:90:92:dd:17:fe:c3:41:74:a0:a7:a6:be:
         b8:2b:a4:58:6b:74:54:3d:e9:6e:b7:35:41:e9:b3:61:db:45:
         39:4f:ab:0b:3b:40:9d:0b:0f:4c:f5:ab:a7:f6:19:57:a7:5e:
         8f:e0:e0:b1:3a:be:6e:d2:02:31:16:65:40:a2:9a:e7:4a:7c:
         fd:d2:51:e4:9c:4b:9d:fe:59:a7:bb:38:a9:ba:82:c5:21:f1:
         32:b5:e1:bb:3d:67:65:b6:23:88:63:fd:cf:b4:5c:b0:62:8b:
         30:e2:5b:c2:66:57:b9:90:7a:50:09:21:29:ef:b1:dc:58:4f:
         0b:1f:c3:74:ef:8e:1f:03:b2:2f:b6:b0:86:96:9d:38:b4:4b:
         c2:eb:42:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:54:33 2026 by rpki-client