Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/483abe37-c0c0-3d3b-a42c-80c411f4f574.roa
File:                     483abe37-c0c0-3d3b-a42c-80c411f4f574.roa (raw, json)
Hash identifier:          yjd5GC7nxp4k+0Q6JG959uPVHMftK/SrKhLMd2shxZ4=
Subject key identifier:   6B:ED:36:DC:EE:44:09:D1:9E:05:5E:77:48:75:02:D1:8C:26:F7:95
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F42782BDA799EC9FBC5317580
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/483abe37-c0c0-3d3b-a42c-80c411f4f574.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        72.208.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:2b:da:79:9e:c9:fb:c5:31:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=6c49a3bb-cfc8-4b30-80f0-e4d68f29ec22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:29:ee:fa:90:c2:e3:40:4a:3a:ae:4e:ff:b8:
                    45:0e:10:f3:d8:a4:eb:aa:e3:fe:37:17:8a:1a:19:
                    3e:93:9d:75:58:07:57:55:93:2b:0a:37:7b:aa:8d:
                    07:91:aa:76:ed:73:b9:b8:42:5e:13:e4:cd:1e:e1:
                    22:9a:6f:18:65:3f:04:5a:3b:83:30:95:2b:15:03:
                    ec:2c:78:1c:01:07:16:9b:d6:91:c8:6e:27:f7:d3:
                    64:2e:85:4f:1e:d7:cd:c6:d5:bc:2c:d7:04:94:e7:
                    af:af:76:81:40:f8:99:b9:3b:e0:b1:3d:f9:db:87:
                    55:14:04:7f:0d:49:a9:70:1a:f8:7e:a0:09:66:7e:
                    19:5e:af:29:6f:fd:f8:a5:4c:fe:a7:c8:1b:b3:53:
                    b7:40:50:06:9d:50:55:f7:51:db:69:68:48:2a:b5:
                    0b:59:b9:50:8a:04:4a:fc:ec:4e:66:a5:e0:4b:16:
                    9a:33:66:bf:1d:68:7d:1d:24:ba:f4:b2:0d:df:e9:
                    e2:8e:fb:f2:81:ca:7b:29:3d:07:25:a0:6e:81:44:
                    2c:2b:25:8d:25:46:47:66:21:9c:88:c9:30:b0:dd:
                    6c:b8:93:41:9f:ba:da:d1:38:b2:76:fa:93:42:b7:
                    3d:c2:49:dd:0e:0a:e4:48:d0:27:a1:20:f3:f1:54:
                    35:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:ED:36:DC:EE:44:09:D1:9E:05:5E:77:48:75:02:D1:8C:26:F7:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/483abe37-c0c0-3d3b-a42c-80c411f4f574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.208.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:4c:fb:b5:37:d0:01:f8:de:dd:89:9d:a8:d0:95:94:6e:97:
         d9:2a:5a:c6:c9:1e:90:88:02:4d:26:24:de:4e:96:27:f9:c6:
         cf:c3:12:0e:b2:3e:8b:74:d6:29:8a:8b:a1:3f:60:d2:a7:3f:
         88:b8:ae:c1:d9:ad:dd:db:79:b7:33:7a:3f:fb:d2:fe:0b:2e:
         4a:99:93:71:34:4c:c2:fa:f7:a3:ff:3a:a9:df:91:cb:42:b3:
         e5:88:83:b4:49:18:29:dd:ec:32:f9:94:f3:67:d7:22:f5:38:
         a3:1f:3c:62:84:47:67:ff:b2:bf:66:62:20:8b:44:15:57:f9:
         2a:59:d1:5e:28:4b:b8:8f:b9:2a:14:d2:c8:5a:9c:eb:33:de:
         83:1f:32:ef:45:74:64:09:a7:2e:f2:66:1b:c4:bd:51:d9:07:
         f9:2e:f6:5b:ea:53:cb:d6:24:ff:e5:6a:ed:d1:c3:d8:4c:91:
         bf:4b:ef:81:a6:c4:da:4c:2d:66:a6:79:29:35:c6:47:e7:7c:
         66:13:9f:21:9a:29:58:e8:32:2b:54:92:de:43:36:9d:8c:c4:
         6b:e9:0b:f7:95:30:3e:8a:f6:3b:e9:2a:7f:07:61:ea:dd:1d:
         38:6e:43:9e:96:75:e9:38:46:63:7b:1a:85:26:8d:c5:94:54:
         25:9f:7a:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeCvaeZ7J+8UxdYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk
NmM0OWEzYmItY2ZjOC00YjMwLTgwZjAtZTRkNjhmMjllYzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Cnu+pDC40BKOq5O/7hFDhDz2KTrquP+NxeK
Ghk+k511WAdXVZMrCjd7qo0Hkap27XO5uEJeE+TNHuEimm8YZT8EWjuDMJUrFQPs
LHgcAQcWm9aRyG4n99NkLoVPHtfNxtW8LNcElOevr3aBQPiZuTvgsT3524dVFAR/
DUmpcBr4fqAJZn4ZXq8pb/34pUz+p8gbs1O3QFAGnVBV91HbaWhIKrULWblQigRK
/OxOZqXgSxaaM2a/HWh9HSS69LIN3+nijvvygcp7KT0HJaBugUQsKyWNJUZHZiGc
iMkwsN1suJNBn7ra0TiydvqTQrc9wkndDgrkSNAnoSDz8VQ1aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGvtNtzuRAnRngVed0h1AtGMJveVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDgzYWJlMzctYzBjMC0z
ZDNiLWE0MmMtODBjNDExZjRmNTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF5M+7U30AH43t2JnajQlZRul9kqWsbJHpCIAk0mJN5Olif5xs/DEg6y
Pot01imKi6E/YNKnP4i4rsHZrd3bebczej/70v4LLkqZk3E0TML696P/OqnfkctC
s+WIg7RJGCnd7DL5lPNn1yL1OKMfPGKER2f/sr9mYiCLRBVX+SpZ0V4oS7iPuSoU
0shanOsz3oMfMu9FdGQJpy7yZhvEvVHZB/ku9lvqU8vWJP/lau3Rw9hMkb9L74Gm
xNpMLWameSk1xkfnfGYTnyGaKVjoMitUkt5DNp2MxGvpC/eVMD6K9jvpKn8HYerd
HThuQ56Wdek4RmN7GoUmjcWUVCWfevc=
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:06:04 2026 by rpki-client