Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/162d1d32-3005-3927-94e2-80794d35d9e5.roa
File:                     162d1d32-3005-3927-94e2-80794d35d9e5.roa (raw, json)
Hash identifier:          j6gl/llOAtkXSsZsCx8pq4BxTly1vIey/h/cBJvoiJc=
Subject key identifier:   FF:5E:25:FF:80:35:28:92:1C:3D:62:5C:EA:A6:FB:A5:8E:A5:41:C0
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F4328584CDF327447525B0F8940BEA100
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/162d1d32-3005-3927-94e2-80794d35d9e5.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     394640
IP address blocks:        169.204.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:74:47:52:5b:0f:89:40:be:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=b6ce1f59-531d-4db3-80af-c7f4c929ace7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:47:36:9a:eb:3a:58:b2:78:53:92:5e:08:39:
                    a4:f6:e3:66:d9:4f:70:c9:90:2c:a3:8d:86:28:f9:
                    4e:24:99:87:8d:54:10:05:63:92:26:04:1f:75:03:
                    a8:b2:2b:58:da:61:79:bf:cb:12:1e:9f:14:98:cd:
                    f1:0e:f3:32:ec:24:fd:d8:5b:cb:f2:6b:a4:20:8a:
                    09:40:2e:44:68:af:5f:8c:eb:fe:2a:66:fc:1e:b8:
                    a8:0c:f3:2b:e8:fe:4a:c3:55:fe:53:f1:d3:86:e5:
                    c1:44:18:56:e5:95:84:3f:63:58:5b:4f:4e:3f:13:
                    60:07:02:cf:0f:90:f1:e6:9f:15:24:15:0e:c7:68:
                    41:ef:c5:37:c0:17:fe:9e:37:6b:30:f5:87:5c:f7:
                    d4:c5:db:d7:5b:ec:cc:3f:f0:03:64:df:39:4b:39:
                    93:fc:3f:ba:73:c0:c2:e6:b7:12:ed:17:ae:24:28:
                    1e:cb:c2:2c:c9:ed:d4:f1:36:81:8c:38:dd:b4:00:
                    a1:d8:71:0c:5e:93:b5:25:80:4e:44:85:77:42:f1:
                    0f:47:43:f5:6a:a2:e7:70:d3:80:6d:11:e8:b1:07:
                    3e:aa:77:13:4b:99:38:ad:6d:65:01:85:87:9b:19:
                    97:83:de:ad:46:d7:12:72:e9:81:c6:f2:94:30:dd:
                    bb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5E:25:FF:80:35:28:92:1C:3D:62:5C:EA:A6:FB:A5:8E:A5:41:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/162d1d32-3005-3927-94e2-80794d35d9e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.204.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:48:b4:79:7f:e0:20:eb:21:e1:0d:56:3d:2f:b9:fd:32:19:
         64:7f:15:91:b8:c7:24:6a:45:f1:20:ca:10:1c:3e:48:44:5a:
         cb:34:3e:5e:cb:c7:97:80:c2:36:92:00:5f:7f:77:c4:e5:e7:
         52:27:d7:82:63:41:fc:ee:e7:f3:dc:80:e8:cd:4b:32:8e:2f:
         1f:f0:9f:27:0e:9a:80:43:b6:0e:61:91:f3:26:cd:cd:b5:4f:
         e2:0f:b3:a6:28:2d:e0:f9:de:75:20:c6:fe:57:84:fa:91:76:
         fe:a1:77:7f:1a:10:38:d2:6b:c9:bf:3a:af:2a:6e:c0:b0:dd:
         38:02:48:a5:f7:9d:d6:fd:b1:80:45:90:34:23:0b:3d:cf:d0:
         14:ab:f0:7f:e7:7b:66:dd:eb:82:96:7f:97:10:19:60:af:26:
         d3:25:10:b9:65:c0:bf:2e:45:27:a7:d8:55:95:a9:3e:5b:47:
         3d:8f:eb:b9:3b:72:31:7e:4d:0f:6d:14:2e:54:d1:6a:3a:ab:
         13:6f:e3:cc:c3:81:cb:59:98:a8:f7:32:b4:7c:08:64:ea:c0:
         25:99:da:57:cd:b5:76:54:48:e2:bb:51:3c:9a:c0:a4:59:5f:
         8a:49:eb:e3:1e:62:99:b7:2b:fa:f2:ee:96:3c:ef:cb:c0:b6:
         f5:fd:11:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:48:14 2026 by rpki-client