Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/06f30a8e-4c8f-318d-858e-fa0db907b818.roa
File:                     06f30a8e-4c8f-318d-858e-fa0db907b818.roa (raw, json)
Hash identifier:          IDbSJK33/g4rz+5JF3AKUgQvQFeFu7mduciQCd7iCyw=
Subject key identifier:   DF:F1:46:C3:55:BD:1F:20:34:86:DA:9F:E7:FC:52:9C:2A:EC:31:09
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EA6C422130CD5C3A94D5EA080
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/06f30a8e-4c8f-318d-858e-fa0db907b818.roa
Signing time:             Tue 28 Jul 2026 18:27:53 +0000
ROA not before:           Tue 28 Jul 2026 18:27:53 +0000
ROA not after:            Mon 26 Oct 2026 18:27:53 +0000
asID:                     22773
IP address blocks:        72.203.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a6:c4:22:13:0c:d5:c3:a9:4d:5e:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 28 18:27:53 2026 GMT
            Not After : Oct 26 18:27:53 2026 GMT
        Subject: CN=96e7800f-819f-4981-b269-e09d2a850180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:87:e9:e4:30:62:fb:64:58:6c:fe:9b:ed:f3:
                    b1:bf:ff:1a:fa:a6:20:b0:b1:d6:d0:86:54:55:53:
                    cd:df:26:23:13:4c:ad:29:3e:3c:61:8c:63:7c:6d:
                    60:e2:71:7d:f0:d6:78:5c:24:57:2e:18:86:06:e6:
                    36:97:1b:55:f5:28:74:d6:20:b4:5c:0b:9f:ea:2a:
                    0f:de:e3:68:16:d6:47:0d:ad:0d:2e:21:a0:95:f1:
                    2b:68:30:2c:08:95:ff:b4:c4:5f:ba:b8:4d:53:59:
                    a2:b3:28:4d:ff:af:48:e9:3b:7b:3e:e2:b9:f6:bd:
                    73:48:32:d7:b4:2e:10:c8:dc:ab:63:43:33:73:53:
                    87:73:0c:54:25:06:b6:ba:47:f6:96:30:c9:71:31:
                    a5:74:55:56:fb:15:e8:7d:72:1f:8d:0e:4a:74:38:
                    fd:00:c6:c0:7f:fd:a5:48:52:b9:d1:94:11:66:fe:
                    0f:c0:b3:71:ef:26:62:06:16:ec:e7:71:79:09:20:
                    48:b0:76:ca:f3:c4:7b:53:22:a4:ad:99:23:e5:78:
                    04:c1:ef:98:89:89:5d:74:84:11:b1:d0:d9:13:bf:
                    2d:7a:4d:0f:eb:77:3b:e2:59:ce:0d:de:60:9a:b3:
                    27:c7:1e:37:20:e9:8e:c7:ec:a7:35:d2:e8:37:bb:
                    29:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F1:46:C3:55:BD:1F:20:34:86:DA:9F:E7:FC:52:9C:2A:EC:31:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/06f30a8e-4c8f-318d-858e-fa0db907b818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.203.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:07:d9:af:93:0e:92:b3:06:77:db:81:ba:ca:e9:c8:4d:d4:
         4b:14:7e:17:58:48:9c:15:c8:37:9c:2f:58:07:c7:19:ec:cb:
         17:85:ac:c1:2c:c1:82:7f:28:2a:fe:a7:e1:ef:ea:d8:ea:38:
         7f:7a:6a:cf:d8:1c:60:b3:a7:7d:5d:2c:8c:e6:4c:c6:67:2c:
         25:8b:c3:0e:f3:6e:1e:6b:33:6a:02:ef:8f:a7:66:eb:a9:fd:
         67:df:66:f4:12:bb:70:59:31:92:7e:ac:cc:cf:67:59:c4:66:
         54:33:f8:12:49:d3:c1:b0:ac:38:17:f3:89:8b:30:97:c8:cd:
         6e:97:6c:0b:a3:c3:bd:2e:fa:33:cc:6c:7d:c4:b7:bf:9b:3d:
         4f:c3:da:5e:da:03:c4:76:c6:90:08:9a:d0:82:ec:61:34:0c:
         95:75:be:6b:49:de:39:62:d1:7c:4e:29:95:9c:33:81:24:a4:
         9b:f9:41:70:74:bf:b6:6c:15:0c:23:81:6b:c0:18:31:99:7d:
         a6:93:fc:83:88:6e:c7:60:6a:74:22:9c:23:6b:00:3e:19:03:
         81:33:2f:04:cd:80:5a:50:00:56:94:e9:f0:0b:a7:2f:93:ef:
         73:39:bf:d3:65:73:2c:ac:68:d6:62:1e:63:6e:5f:33:cb:ee:
         5d:7f:a3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:27:23 2026 by rpki-client