Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/1b19639f-e0a2-3258-b5cc-37c2ca601bcc.roa
File:                     1b19639f-e0a2-3258-b5cc-37c2ca601bcc.roa (raw, json)
Hash identifier:          CjnmAVgLR7zw79KPXdk8mRs3ndKd57a7BVDmpEfnM4Y=
Subject key identifier:   95:A3:06:FF:42:E1:DD:7B:0B:23:76:FF:BE:A1:87:D5:C2:DF:EE:67
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584E9A7FD7A93DF377FE16C61D00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/1b19639f-e0a2-3258-b5cc-37c2ca601bcc.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        170.114.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:d7:a9:3d:f3:77:fe:16:c6:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=bcaa0340-0f73-4d8c-a3fa-2ba29124a2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6e:88:4c:fa:59:45:3a:4c:f2:e0:26:1d:fa:
                    35:8c:47:83:af:b5:ee:e4:8f:f6:a2:87:25:24:0d:
                    9f:96:0b:97:f2:f5:55:9c:77:75:89:24:1c:ec:ac:
                    ae:e1:3f:b6:e1:2d:4f:40:97:83:16:b1:d9:e6:e4:
                    b3:24:56:5b:a9:96:78:3a:55:d9:fb:8e:c3:99:9f:
                    f8:1c:79:3f:8a:0c:5e:7f:33:b8:6b:1e:78:57:ff:
                    e3:1d:e9:29:25:dc:26:82:00:4f:74:16:b7:e5:ba:
                    53:9d:a1:c6:dd:70:ad:77:8c:21:2a:11:3c:85:1c:
                    5e:09:68:f6:df:63:0d:c8:bf:65:54:08:41:81:8b:
                    6d:c9:5a:2c:06:e5:17:3c:2a:07:a1:f9:e1:3b:18:
                    65:78:41:60:09:8b:95:db:e0:cc:da:ab:b6:0a:23:
                    3d:98:ea:2d:fd:3e:26:32:1b:a6:a0:81:34:e0:a3:
                    fd:e2:be:cd:49:b6:95:8e:1b:2d:65:a7:e9:b6:f0:
                    38:b1:c5:82:61:37:b8:0e:94:bb:30:90:85:30:51:
                    32:be:3e:7a:16:63:b6:0f:fb:bc:db:27:26:8c:92:
                    b7:76:35:1a:18:97:20:9d:8b:da:a2:68:24:ab:40:
                    9c:d3:9b:2a:ba:a5:ac:3b:c5:ba:88:39:17:66:df:
                    e3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A3:06:FF:42:E1:DD:7B:0B:23:76:FF:BE:A1:87:D5:C2:DF:EE:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/1b19639f-e0a2-3258-b5cc-37c2ca601bcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:d2:96:d0:dd:35:36:c6:e1:3a:7a:2b:51:e6:31:9a:38:c2:
         32:1f:12:ca:15:67:2c:e8:35:27:65:1a:8c:08:78:b2:9e:d8:
         4f:58:76:40:3b:71:5e:ca:e4:78:f3:31:83:06:33:6c:bd:45:
         6c:c9:83:82:1b:78:e9:79:fa:8a:14:43:59:13:c0:4c:71:3c:
         b6:e2:51:b9:28:fe:5e:66:a5:0e:67:cf:1c:ce:b8:44:76:d9:
         f8:71:3c:ea:9d:a2:aa:3c:7a:8c:7b:76:0e:09:c9:bb:e7:11:
         8b:77:36:13:a4:aa:5e:d6:66:8b:83:bf:46:44:b3:71:86:2a:
         fb:13:0c:89:82:03:79:bb:98:1b:ff:0b:b5:b7:81:0b:b4:60:
         b9:c5:5a:75:04:68:39:5c:e3:d8:74:14:74:d4:dc:a6:c2:d5:
         9c:4a:b2:94:14:2a:e0:73:de:db:0e:57:fc:40:c5:24:39:71:
         02:1d:e4:71:e4:91:f8:e7:4d:40:9f:bf:e0:50:fe:d6:77:81:
         3e:11:9e:4b:42:aa:4c:a0:a4:d6:e0:9d:cf:5b:cc:aa:26:2e:
         19:4a:02:c0:cf:cc:7e:53:05:e5:2b:96:c8:da:8e:05:91:35:
         8a:0b:e2:f9:c5:14:0c:29:3a:7a:a6:37:3f:d9:3b:61:0e:bd:
         6d:a2:c4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:06:21 2026 by rpki-client