Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/0c42e28c-591c-306f-b000-3c57491d2ec2.roa
File:                     0c42e28c-591c-306f-b000-3c57491d2ec2.roa (raw, json)
Hash identifier:          sGfHuI63Q9PiWnOtpe1BS2mVFTC5Jlr/Apb0fIIQlxo=
Subject key identifier:   E7:CA:3F:F8:F8:08:1D:15:14:66:DA:0D:8F:3B:B5:7F:B2:AB:66:BF
Certificate issuer:       /CN=6b527806-37a2-4d56-8213-ee9130cd0038
Certificate serial:       010D0C9F4328584EA786F86EE80ED4D53315CE00
Authority key identifier: 07:C2:64:48:5D:A7:EF:C9:73:52:27:BF:22:8B:06:EF:71:41:16:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/0c42e28c-591c-306f-b000-3c57491d2ec2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400760
IP address blocks:        161.210.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/6b527806-37a2-4d56-8213-ee9130cd0038.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/6b527806-37a2-4d56-8213-ee9130cd0038.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:f8:6e:e8:0e:d4:d5:33:15:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b527806-37a2-4d56-8213-ee9130cd0038
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cc9cbd3a-968c-4fac-923e-384a49652d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7c:ec:a5:92:64:4b:da:d5:15:a8:c2:a0:71:
                    00:8e:84:1d:3f:99:75:9d:6a:dc:1f:5b:09:a7:30:
                    4f:8d:12:56:4a:c4:f3:64:87:23:fa:5f:d5:e7:e4:
                    1a:4d:24:c7:e4:63:6c:91:23:e0:ac:b6:86:db:64:
                    55:5b:e5:24:cb:4f:21:3b:a4:80:a5:30:53:a3:28:
                    08:f1:24:a7:bd:e3:ce:90:7d:cf:2c:45:5f:d0:f8:
                    96:21:ae:0f:fc:2a:f0:9e:30:24:ba:5e:ec:59:3e:
                    46:86:8f:84:90:f0:c4:7a:b4:af:b1:cf:79:c9:7f:
                    f4:25:fa:99:eb:78:91:3f:b2:e8:de:ea:6a:a7:e7:
                    f7:e2:da:3d:0f:33:30:0f:2a:b1:57:6b:83:80:dd:
                    a1:c2:24:1b:2e:fd:b2:5a:bd:52:07:dd:10:a0:04:
                    b6:a8:a5:97:e6:19:55:4b:9e:b4:a1:25:33:5a:84:
                    43:d8:6e:5d:b6:41:8e:ef:ec:01:45:ae:ab:9d:8d:
                    85:07:72:73:9c:85:8e:5b:ee:ac:53:a7:42:eb:0c:
                    0b:be:7d:b7:cf:f8:9d:c1:af:21:81:73:e4:c9:70:
                    10:2e:09:1d:6f:cf:44:0b:cf:54:cf:a9:b4:eb:a3:
                    11:83:ef:67:04:c9:95:f9:80:35:e4:c7:44:da:6e:
                    bb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CA:3F:F8:F8:08:1D:15:14:66:DA:0D:8F:3B:B5:7F:B2:AB:66:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/0c42e28c-591c-306f-b000-3c57491d2ec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038/6b527806-37a2-4d56-8213-ee9130cd0038.crl

            X509v3 Authority Key Identifier:
                keyid:07:C2:64:48:5D:A7:EF:C9:73:52:27:BF:22:8B:06:EF:71:41:16:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b527806-37a2-4d56-8213-ee9130cd0038.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.210.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:39:49:82:59:43:26:87:79:73:41:6f:6a:71:a8:81:f1:4e:
         3e:e2:03:7d:8e:a0:7a:e3:4e:eb:c1:15:b4:43:e8:28:bd:97:
         a1:cc:eb:83:0c:e1:71:89:1b:af:99:23:61:93:24:1a:57:b8:
         85:f4:f0:9f:da:f7:bb:b9:49:9a:2d:38:78:a1:01:8b:b9:b0:
         8a:99:51:e6:4c:23:51:24:30:19:a0:43:ad:c8:63:72:63:8c:
         97:a2:8b:3c:33:c8:2a:05:da:26:14:80:8e:10:92:cf:5e:eb:
         47:db:c6:8f:37:dd:d7:7f:63:90:69:c7:8f:3d:a5:f0:88:87:
         89:f0:b7:66:98:64:42:da:fd:54:12:ce:d8:99:c3:e5:3b:dc:
         a6:83:79:ba:25:c2:89:2e:83:75:a1:0a:1b:1e:6b:8a:e8:4c:
         68:6b:d0:97:c2:61:8b:7f:48:13:a7:0d:86:1e:48:be:3a:6c:
         e5:b0:86:c6:ba:3f:6e:ec:c2:36:a2:2e:e5:45:c9:f1:43:18:
         2d:2f:60:77:f4:5b:ef:b3:4f:d8:c2:fd:11:b2:21:7c:87:83:
         6f:6e:a1:91:1c:53:29:e6:94:3f:9e:47:2c:c6:f3:ff:79:63:
         85:fb:2c:cd:05:6f:5f:5e:be:ed:6d:d4:3f:1f:75:41:e8:94:
         cf:f1:9f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:04:19 2026 by rpki-client