Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4e90b8e4-af01-3c3c-b06d-ceff3c1ae620.roa
File:                     4e90b8e4-af01-3c3c-b06d-ceff3c1ae620.roa (raw, json)
Hash identifier:          aZoWRtu7ixjMgyskrLnSbnkSXA898m7MTLQ2fwrufVo=
Subject key identifier:   90:78:8B:4A:DD:18:59:72:F6:7C:9F:F8:97:45:94:F2:13:8D:61:DD
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584F305266CDE391DC1985993A00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4e90b8e4-af01-3c3c-b06d-ceff3c1ae620.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     54858
IP address blocks:        208.76.184.0/22 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:66:cd:e3:91:dc:19:85:99:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=9d9c7f72-8b3c-4763-853d-204370339965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6a:10:02:61:55:f9:1f:d4:68:3c:db:27:98:
                    2f:00:8b:ca:a3:ac:29:af:8b:49:7a:a9:a2:1d:16:
                    8f:b1:67:f2:49:89:04:75:bf:ec:ae:a0:e9:3f:84:
                    1f:f6:f5:58:76:5d:62:ae:96:9d:76:98:35:37:16:
                    ef:d4:00:24:76:cd:fe:39:13:0a:c5:23:62:2b:58:
                    8e:c1:3a:75:2d:90:d0:d2:90:5d:31:39:34:b7:92:
                    69:c1:6d:10:6d:c0:f3:5c:cb:cf:20:03:64:81:76:
                    8f:ab:01:a3:b2:ce:12:c2:1a:56:09:2d:eb:bf:8e:
                    34:c8:df:0c:cb:98:b1:20:5e:1d:8e:74:b0:65:29:
                    d6:30:be:e7:66:31:b8:60:b6:b4:cc:41:95:1b:e6:
                    fc:1d:77:99:57:12:35:5e:83:13:49:1d:e6:bc:45:
                    99:7d:f9:d4:5c:a1:44:76:74:51:70:46:3e:7d:82:
                    f3:58:04:e0:e3:08:d9:fc:41:bf:12:c0:e9:2d:ab:
                    5a:47:96:4a:48:a1:12:f9:60:c0:e9:0f:c3:e3:87:
                    ee:57:d4:46:51:c9:d7:83:34:6b:b0:c5:84:d0:d5:
                    f8:ba:b6:4a:6f:f1:80:be:e8:bc:d7:07:d2:54:98:
                    d7:62:ba:db:8b:00:c8:0c:1a:83:23:7a:23:7d:77:
                    b6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:78:8B:4A:DD:18:59:72:F6:7C:9F:F8:97:45:94:F2:13:8D:61:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4e90b8e4-af01-3c3c-b06d-ceff3c1ae620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:84:e7:dd:a2:3f:ad:f4:88:dc:96:46:44:f3:de:b4:b7:b3:
         97:65:11:b7:25:28:89:35:ea:7c:95:bc:69:18:c9:02:a5:f1:
         1b:7c:41:e8:88:27:f0:0c:1c:01:04:29:20:76:e9:54:c3:48:
         d8:db:fe:f2:1a:c8:7f:67:16:b0:b3:d1:4e:e6:76:3f:ec:01:
         2c:83:3d:30:0f:d9:09:49:90:46:c0:84:52:61:28:60:e9:4f:
         a5:e0:0b:f2:d5:eb:86:a0:6c:bb:d0:6b:ef:7e:93:25:1e:32:
         1a:12:73:05:c8:cd:44:d2:be:d0:b2:d7:84:49:9c:17:00:5c:
         3d:27:96:46:9a:d5:43:b0:48:35:cb:d8:36:d5:bb:35:3e:c4:
         56:e8:e6:d7:d3:cf:c5:56:e0:f8:45:90:7a:4b:df:5c:21:a6:
         e1:1e:3a:3b:46:2f:81:62:34:0e:19:63:08:05:e8:a1:98:3f:
         43:25:eb:db:14:13:c8:d7:77:78:e0:57:e6:6e:9f:a8:3e:d7:
         ce:5d:70:8b:86:66:60:a2:44:50:8f:9c:72:f0:4b:d1:3c:be:
         4f:41:31:2c:33:9d:2a:65:14:b9:43:f1:74:29:fc:95:18:d7:
         43:50:16:fb:d5:95:b1:0b:8a:70:17:cd:90:44:5c:a9:f5:38:
         75:0d:85:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:38:43 2026 by rpki-client