Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4418db0a-1628-3c5d-b614-7de117f0a9fd.roa
File:                     4418db0a-1628-3c5d-b614-7de117f0a9fd.roa (raw, json)
Hash identifier:          TuRJeKbnLhL0xLybD/MesY3Kpaqar4UlH+LUTfdQVkE=
Subject key identifier:   F4:2B:50:79:BF:39:62:6F:27:07:F2:38:20:CE:99:F5:47:D6:6F:E7
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584D746FBE90D8DF3049CA45F000
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4418db0a-1628-3c5d-b614-7de117f0a9fd.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     21866
IP address blocks:        67.217.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:be:90:d8:df:30:49:ca:45:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=a558f84e-6fa6-4ee5-9017-83ec83b69261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b9:bb:a5:b9:db:59:fa:80:14:8e:9d:01:cd:
                    0c:3c:34:4d:92:a4:48:d2:75:bc:3c:fd:47:8d:57:
                    f6:f6:a0:3a:cc:81:4f:33:87:eb:2b:5d:3b:65:b4:
                    c3:4c:f1:53:e0:da:b2:53:a6:6c:42:1d:f5:e4:34:
                    cf:33:5a:a1:2a:da:79:6d:c7:b6:3f:41:41:81:62:
                    e3:75:19:7c:c6:9f:77:53:d0:65:39:be:21:58:6d:
                    d0:8b:10:23:58:08:91:ba:58:d5:ed:75:0b:f0:28:
                    77:c1:b8:3c:6c:f6:fc:d5:51:0d:d6:41:81:02:e1:
                    14:7e:57:05:5f:4e:b1:95:03:21:18:cf:45:79:d8:
                    12:91:2f:50:c7:b1:b9:d6:78:ea:b1:58:d7:a2:e0:
                    67:23:a6:fa:5e:1a:88:f1:12:f1:ee:8b:af:87:f2:
                    2a:91:3f:8c:bf:68:0a:49:ed:92:36:fc:f4:b3:db:
                    12:61:3e:e5:9b:86:7f:d1:98:d5:0d:e9:63:47:73:
                    d2:df:78:19:b4:fa:48:7d:91:c1:50:b5:53:be:2f:
                    d3:de:65:a3:a5:56:3d:9e:9f:78:25:d3:52:c1:b8:
                    d4:ad:da:7a:2f:d5:d7:f1:1e:3c:50:54:9d:02:47:
                    2e:a9:79:d8:8a:7a:c2:07:32:20:ea:00:7c:c3:bb:
                    98:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2B:50:79:BF:39:62:6F:27:07:F2:38:20:CE:99:F5:47:D6:6F:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4418db0a-1628-3c5d-b614-7de117f0a9fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:c8:c9:af:e5:1a:6a:2f:02:77:98:d5:2b:96:2f:67:cf:da:
         30:b1:e6:c3:85:af:b7:fd:7b:a7:29:c0:4b:c0:70:08:39:2c:
         90:53:24:e1:ff:c0:35:4c:48:8d:15:12:2c:36:f9:ca:0e:a9:
         fb:5c:00:ad:4b:ce:29:c1:0e:2c:d0:8e:23:14:90:ee:cc:8c:
         61:b9:17:a2:9d:c6:e1:4b:17:e8:14:bb:a9:67:e4:09:9d:b2:
         08:8b:39:1a:f1:e7:98:6f:9e:a8:17:37:6b:d6:c5:60:c3:c5:
         aa:1d:f9:62:fa:cf:a7:53:0b:ab:fb:60:ed:13:de:8c:35:ef:
         1d:5b:37:dc:88:73:5b:77:cf:0f:27:5f:04:ce:90:16:08:5c:
         3b:a8:cd:fc:96:30:14:d5:67:15:cd:7e:90:3d:60:ea:35:cb:
         26:58:94:c4:aa:13:a5:09:b4:8f:46:4a:8d:2c:f7:b7:7d:86:
         a9:5c:90:13:40:13:3c:c1:7d:60:49:a7:09:64:83:ff:af:a5:
         e9:1d:f5:c8:8a:41:35:2e:29:3d:8b:30:26:4c:e6:17:c2:12:
         f2:e3:e8:e8:41:3d:19:d0:17:8b:8e:e5:cc:59:04:df:7d:ef:
         b6:9d:2f:f4:a5:02:ed:43:33:e8:8f:04:04:42:86:aa:a7:da:
         b1:bb:23:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:07:12 2026 by rpki-client