Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/af7ea332-111a-3537-8c3c-7ca28606f180.roa
File:                     af7ea332-111a-3537-8c3c-7ca28606f180.roa (raw, json)
Hash identifier:          q7uK0RfBJV0DsESve17ta0Qe6lFNlqAzs2dYwjV4glk=
Subject key identifier:   B7:05:16:80:F1:A6:8C:7F:D4:5E:0C:F4:F9:07:DD:4B:62:1F:55:0E
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E15E46DD97681AD58F0365400
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/af7ea332-111a-3537-8c3c-7ca28606f180.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     64267
IP address blocks:        192.171.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:6d:d9:76:81:ad:58:f0:36:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=2fe7567b-d4d3-4219-81e7-17d509cb95b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:20:d7:b5:60:62:55:ea:ea:d9:08:17:f1:
                    29:ce:dc:d2:53:60:de:fe:8d:a8:88:b0:83:f6:4d:
                    f7:61:8d:e1:a9:26:f4:a6:b7:75:0e:7b:fd:23:fe:
                    89:42:ef:7a:45:2b:7d:53:b7:8a:f6:d5:3b:78:c9:
                    ba:63:30:5e:e9:8b:5d:83:89:7c:34:30:16:4b:82:
                    27:ff:7c:f6:b5:69:2a:5e:c6:7a:43:66:65:cc:39:
                    e7:5c:f6:d1:72:b4:67:57:da:12:e7:87:47:02:ad:
                    a1:4f:f6:5f:0b:c9:a5:94:18:c6:57:a8:9d:18:68:
                    ac:4a:74:55:e0:e4:ba:93:6a:3d:6d:ba:0e:4d:c0:
                    96:c9:47:09:43:af:6d:2f:b6:cb:84:a2:33:48:10:
                    a0:72:0c:4d:21:9c:7e:61:e8:22:f9:89:5e:16:03:
                    e4:08:ce:66:f5:87:09:4f:b9:be:56:3c:55:7e:ca:
                    e4:67:2e:87:07:c3:0f:9f:aa:84:3a:74:70:fc:ed:
                    af:e8:c1:73:f9:c7:57:5f:f7:4b:d9:43:b0:f6:87:
                    97:b5:02:da:de:5a:db:aa:08:b9:33:82:27:4b:78:
                    5c:01:90:a5:c5:aa:83:89:ad:c3:d2:00:54:1f:d7:
                    40:8c:a7:4e:aa:2a:74:03:87:a3:ca:d5:21:b2:6d:
                    c6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:05:16:80:F1:A6:8C:7F:D4:5E:0C:F4:F9:07:DD:4B:62:1F:55:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/af7ea332-111a-3537-8c3c-7ca28606f180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:99:8b:e2:bc:c7:00:6d:76:9f:86:5c:8c:95:0a:29:1d:18:
         4c:55:26:e4:ad:2d:75:f9:8b:bc:ce:02:e0:1c:be:f3:a4:2e:
         37:10:1a:bc:82:d3:59:2a:00:96:61:48:41:1b:15:6f:42:35:
         a9:f1:57:ae:1a:dc:22:92:fc:46:e2:7a:78:97:dc:54:be:1b:
         66:3b:b8:6e:82:62:9e:a6:03:b3:a7:3c:4d:39:82:53:19:e4:
         ae:f4:3e:a2:b2:50:a6:42:f3:8b:99:98:58:ed:00:2d:eb:a7:
         28:a1:5e:a0:c6:c3:d8:9e:2f:70:47:4c:97:70:b0:c0:67:11:
         13:10:d4:88:44:0d:d8:ba:d6:de:21:c7:08:04:41:ac:ab:0f:
         57:87:18:4e:3a:9c:d5:3d:a3:97:78:6d:91:02:43:56:71:ce:
         49:ac:83:e8:23:94:e2:a9:fd:46:b8:fd:5f:ea:dd:93:6c:e5:
         b4:c5:9d:65:22:33:06:6c:41:1b:15:0d:4c:68:9c:c2:b4:31:
         3f:87:d9:45:a7:41:cd:66:87:e8:7b:7e:42:7d:c4:d2:cc:8a:
         b7:b7:03:f7:0a:49:6c:3d:0f:04:61:8e:7e:e1:13:a9:16:ae:
         ab:6a:b1:f3:a3:3d:7e:24:24:c1:13:e0:4b:e9:01:7c:7e:cb:
         6b:c2:96:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:12:31 2026 by rpki-client