Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1754c8a4-3056-3c15-bee9-df954c01c919.roa
File:                     1754c8a4-3056-3c15-bee9-df954c01c919.roa (raw, json)
Hash identifier:          uFRPx8GdDU5jkyPTCce71JYHC21/yO8iT7OCAx9Re2c=
Subject key identifier:   82:DA:02:97:E2:D4:DD:2F:0A:44:73:40:7A:41:2B:DB:FA:0A:D9:5B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F3CE27D653E8A7737044CFBA0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1754c8a4-3056-3c15-bee9-df954c01c919.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        68.2.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:7d:65:3e:8a:77:37:04:4c:fb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=08ca98a6-8a1f-4535-bbf5-8afc21f35c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:e5:14:f0:10:fa:0f:69:7e:f5:74:d1:cd:
                    30:ac:d4:63:28:77:4c:1b:fe:97:3a:d2:11:09:f6:
                    48:b5:57:3e:49:f0:12:aa:d3:ee:a3:d5:7c:75:17:
                    75:6d:9d:36:61:08:22:c9:11:6f:0a:1c:67:eb:f6:
                    5e:ac:d1:74:57:4e:ad:8e:66:b4:4a:8a:e4:7a:ef:
                    86:3e:00:fa:50:d0:8e:f8:8a:62:85:91:8c:fa:4a:
                    41:fe:a4:1d:ad:95:ac:f3:3f:29:83:2e:c3:36:c6:
                    52:bd:d3:5b:5e:09:0f:a4:f6:f5:ec:71:bd:82:8e:
                    d8:31:a5:0f:01:bc:10:52:22:67:de:11:f7:d0:c9:
                    99:87:2c:a2:d3:b5:9a:07:bd:c3:8b:a9:6b:24:5a:
                    60:bc:bc:33:50:53:0b:63:62:1c:8c:75:af:7d:19:
                    fc:19:8f:2f:b8:0e:9c:bd:5d:5c:53:bb:e4:81:bd:
                    7b:52:5d:03:e8:52:25:c5:19:e0:ce:21:f2:9b:b8:
                    7d:72:8d:bd:de:f9:22:7e:cb:a8:a6:c5:91:9f:fa:
                    64:a6:9d:20:7b:9d:7e:cc:70:bf:a3:8a:8a:b8:d2:
                    a8:77:e9:26:62:9c:24:93:d4:47:08:30:3c:25:41:
                    2d:3d:30:87:74:70:46:1d:e3:1a:a0:92:20:f0:44:
                    76:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DA:02:97:E2:D4:DD:2F:0A:44:73:40:7A:41:2B:DB:FA:0A:D9:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1754c8a4-3056-3c15-bee9-df954c01c919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.2.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:87:51:18:bb:61:8d:9d:fb:7e:0e:fa:8e:28:72:d7:cb:ed:
         0f:27:61:f3:0f:ff:ef:3a:2c:c4:be:2a:22:26:fa:65:82:84:
         ee:ba:0b:35:73:13:49:69:17:b6:14:54:4f:16:cb:b7:d6:a8:
         b6:98:d1:3b:31:41:30:41:4b:34:f8:7a:b9:a8:15:43:d5:31:
         78:06:79:7a:3e:70:0c:36:cf:a4:69:a6:ef:5f:44:f0:35:23:
         37:3f:b6:b6:b2:72:28:d2:4c:89:7b:18:cd:88:d2:26:ee:15:
         bf:01:9d:2a:8b:32:47:f7:aa:aa:7c:d5:3f:6f:a8:32:25:3a:
         a0:92:8c:01:10:84:bd:37:56:f6:cf:3f:41:2c:cb:fe:dc:de:
         00:73:78:16:7e:ee:3f:c5:41:db:76:10:d9:5e:00:fb:ce:4e:
         17:b2:80:2f:0d:be:fa:18:e8:dc:30:22:46:d3:ab:b4:95:7a:
         ae:cb:59:fa:3b:33:03:23:f4:be:3a:58:ae:cc:e6:9d:e6:33:
         b6:70:b8:1e:bb:ee:4e:71:56:63:28:7a:3e:a7:88:d1:f4:11:
         22:30:dc:bc:8f:e2:76:61:94:0a:aa:12:f1:49:72:41:18:e3:
         16:ae:41:39:ee:5d:9f:0e:c8:6b:3a:be:b0:9f:5d:fb:13:d7:
         01:2a:13:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:43:56 2026 by rpki-client