Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0cfb0bd0-600f-3425-bdb8-dd64e40b9c4c.roa
File:                     0cfb0bd0-600f-3425-bdb8-dd64e40b9c4c.roa (raw, json)
Hash identifier:          TxNNdFM5FC77J4JnTyuzVZqZddae+F4Qh2PsJ4ejJ40=
Subject key identifier:   CF:44:58:15:85:99:B1:04:0C:3E:6D:73:0C:FD:AD:2B:57:2E:2E:0E
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D95F007FE3955EBE3BEE27400
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0cfb0bd0-600f-3425-bdb8-dd64e40b9c4c.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     396982
IP address blocks:        128.77.0.0/18 maxlen: 24
                          128.77.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:07:fe:39:55:eb:e3:be:e2:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=cf378186-02fe-4490-a4fc-0ef0fb4014ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ba:54:b1:b4:0f:d7:2d:2d:42:5f:6d:65:78:
                    74:1d:aa:2f:c3:dd:7a:6a:0d:4a:e4:63:96:29:53:
                    f0:98:57:7a:6b:b3:3f:bc:62:d4:81:62:f2:aa:25:
                    8d:23:11:58:f9:2e:9f:51:2a:15:eb:9d:46:23:19:
                    2a:22:d9:ca:77:06:b2:3e:c1:99:c4:90:52:1e:25:
                    57:de:cd:8c:7a:07:25:15:d9:7b:a9:52:41:8a:e7:
                    64:04:32:a1:9d:d7:ef:47:18:e4:c2:aa:b6:a4:dc:
                    e2:8a:15:fd:b4:ed:66:7d:ee:c0:bb:bd:33:6e:c2:
                    7c:df:7b:be:a9:57:8c:0f:b1:82:7c:02:e4:de:f8:
                    f7:e1:29:1e:4e:b9:2d:76:af:bc:89:2e:49:13:15:
                    37:3e:2f:04:cb:08:94:1a:97:c4:01:75:d4:0b:b2:
                    79:1d:44:27:24:f7:4e:ac:11:6a:05:89:a7:89:a1:
                    c1:0a:76:7e:84:08:2d:2e:33:e0:f4:3c:e6:fe:be:
                    8c:8e:f6:57:3f:fc:25:6c:e0:f4:35:03:42:54:e8:
                    7c:dc:8f:bc:7f:2a:1b:6e:52:2e:dc:05:a1:70:9a:
                    6b:5d:5e:6e:4b:99:a2:fa:02:da:4d:e7:18:d5:86:
                    0d:fe:15:95:87:e8:c6:80:df:87:99:95:5d:a5:cf:
                    37:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:44:58:15:85:99:B1:04:0C:3E:6D:73:0C:FD:AD:2B:57:2E:2E:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0cfb0bd0-600f-3425-bdb8-dd64e40b9c4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.77.0.0-128.77.95.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:2b:5b:cc:cc:96:ad:42:1e:17:c6:cd:99:77:e5:b4:11:a2:
         ce:fb:d0:0a:a1:61:7e:78:ce:d0:81:82:30:11:65:dd:1b:81:
         84:c5:83:ff:c2:b4:3c:ae:1a:2f:90:9e:74:64:09:cc:87:ed:
         4d:85:90:cb:8c:df:92:31:14:c7:10:e3:e3:1a:f6:14:d2:c0:
         de:4b:08:5e:d1:ab:6e:a2:2b:b0:fb:dc:60:db:7b:d7:42:78:
         80:17:43:82:44:2c:d3:d8:82:16:1e:22:df:ab:2f:d5:5f:e0:
         fd:4f:20:fd:2f:8a:59:90:90:00:9a:86:f8:47:63:b3:9b:9f:
         0c:7e:00:f7:3f:af:73:ad:ad:20:52:60:2c:d9:e6:79:92:a4:
         22:75:42:b0:f6:07:82:d0:89:d0:89:d0:c7:c0:d6:5b:04:ff:
         b2:1c:b5:c6:4c:a3:1f:06:11:22:7f:ad:46:e6:72:26:b4:a4:
         3c:26:f1:e6:82:2d:0b:f7:ef:16:b4:17:a5:45:25:4f:a3:fa:
         af:94:e5:c6:9a:95:ec:5b:1f:b5:a9:89:1b:b3:f6:7b:11:0d:
         75:15:ac:de:cd:0a:6e:79:9d:9a:2c:6d:ad:f3:54:ba:c3:8a:
         84:47:a6:46:b0:c1:fc:2f:43:78:ff:aa:2f:1b:93:b8:5d:9b:
         fd:09:9e:e5
-----BEGIN CERTIFICATE-----
MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWE2V8Af+OVXr477idAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk
Y2YzNzgxODYtMDJmZS00NDkwLWE0ZmMtMGVmMGZiNDAxNGFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLpUsbQP1y0tQl9tZXh0Haovw916ag1K5GOW
KVPwmFd6a7M/vGLUgWLyqiWNIxFY+S6fUSoV651GIxkqItnKdwayPsGZxJBSHiVX
3s2MegclFdl7qVJBiudkBDKhndfvRxjkwqq2pNziihX9tO1mfe7Au70zbsJ833u+
qVeMD7GCfALk3vj34SkeTrktdq+8iS5JExU3Pi8EywiUGpfEAXXUC7J5HUQnJPdO
rBFqBYmniaHBCnZ+hAgtLjPg9Dzm/r6MjvZXP/wlbOD0NQNCVOh83I+8fyobblIu
3AWhcJprXV5uS5mi+gLaTecY1YYN/hWVh+jGgN+HmZVdpc83JwIDAQABo4IDXDCC
A1gwHQYDVR0OBBYEFM9EWBWFmbEEDD5tcwz9rStXLi4OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMGNmYjBiZDAtNjAwZi0z
NDI1LWJkYjgtZGQ2NGU0MGI5YzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwCATQME
BYBNQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0
dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG
SIb3DQEBCwUAA4IBAQABK1vMzJatQh4Xxs2Zd+W0EaLO+9AKoWF+eM7QgYIwEWXd
G4GExYP/wrQ8rhovkJ50ZAnMh+1NhZDLjN+SMRTHEOPjGvYU0sDeSwhe0atuoiuw
+9xg23vXQniAF0OCRCzT2IIWHiLfqy/VX+D9TyD9L4pZkJAAmob4R2Ozm58MfgD3
P69zra0gUmAs2eZ5kqQidUKw9geC0InQidDHwNZbBP+yHLXGTKMfBhEif61G5nIm
tKQ8JvHmgi0L9+8WtBelRSVPo/qvlOXGmpXsWx+1qYkbs/Z7EQ11FazezQpueZ2a
LG2t81S6w4qER6ZGsMH8L0N4/6ovG5O4XZv9CZ7l
-----END CERTIFICATE-----
Generated at Wed May 13 09:15:47 2026 by rpki-client