Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/19c2f3e6-d8fb-352e-a7d0-79b0373aa3f9.roa
File:                     19c2f3e6-d8fb-352e-a7d0-79b0373aa3f9.roa (raw, json)
Hash identifier:          umEovZ12GF/xXW2Bp+f1mqkpP+G+1aL4IvPG2OvOtKg=
Subject key identifier:   61:A6:7F:B7:56:17:4A:78:71:3C:F3:90:DC:ED:37:EA:A0:CD:12:41
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584F30526A44CD99400A93BE0A80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/19c2f3e6-d8fb-352e-a7d0-79b0373aa3f9.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        144.125.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:6a:44:cd:99:40:0a:93:be:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=a63b0742-a04e-4e57-84ff-1727f25b2c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:91:a7:37:3a:3a:a1:fe:47:f4:ca:67:6a:ac:
                    33:5e:75:be:92:22:13:17:f4:bd:d3:95:7a:ea:49:
                    a7:31:cd:04:b2:e9:aa:09:67:c9:cf:04:39:e5:31:
                    54:01:ed:c2:9e:87:c1:91:9c:c4:c5:89:88:37:5c:
                    bc:86:3a:c0:fe:58:03:69:0d:2d:17:19:02:66:56:
                    8e:1a:9e:b8:7c:37:1e:b0:4e:9a:36:d7:9c:57:97:
                    5a:e5:80:df:3d:72:22:e6:51:fb:d5:6f:52:a5:4a:
                    b7:47:0c:4b:6a:7c:8b:62:ca:b3:6c:1b:98:8e:6b:
                    a3:60:81:a4:97:ab:33:40:54:fe:42:61:ae:c9:8c:
                    64:9f:c3:1c:74:57:08:7d:bc:dc:de:0e:28:d3:bd:
                    41:fc:7b:7c:87:e7:36:14:08:00:d8:4d:a4:65:50:
                    31:6d:2e:d0:1f:9f:73:82:85:8c:07:b8:db:9e:d3:
                    ec:06:b8:c6:f3:4c:4e:34:b9:61:6d:be:8e:c1:fc:
                    bb:3d:52:50:2a:dd:22:ac:c2:c4:56:a4:85:8b:38:
                    68:d4:5c:96:59:82:6a:a1:cd:b9:da:47:37:1d:36:
                    16:93:2d:a2:78:d7:a4:a0:17:3a:6c:62:b8:21:9e:
                    f6:16:3b:bc:af:02:4f:f9:a2:3e:38:53:be:c1:9a:
                    67:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A6:7F:B7:56:17:4A:78:71:3C:F3:90:DC:ED:37:EA:A0:CD:12:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/19c2f3e6-d8fb-352e-a7d0-79b0373aa3f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:18:70:be:ec:3d:77:cc:c9:ce:62:c0:d0:a7:40:cd:f0:b6:
         43:73:e7:77:ed:ea:0c:ca:08:6a:b9:88:a4:8c:ab:bf:02:1b:
         ad:3c:78:26:c9:51:6b:e0:47:9d:fb:a5:d6:e9:5c:5f:a2:cc:
         f7:8f:e8:17:b4:b6:25:cb:3d:79:d3:34:b8:c1:f0:fd:47:78:
         1f:9e:81:49:4b:eb:5a:4e:44:0f:a0:49:f8:4b:a4:c8:9d:24:
         48:0d:bb:8d:b9:84:fa:82:cf:6e:22:15:31:2b:91:d4:88:76:
         1b:3c:71:6d:f7:ac:fa:dc:2d:b0:d3:fe:b4:36:e7:56:ac:61:
         fe:0d:26:2c:01:85:20:f6:1a:6f:e2:5a:a5:db:3c:8c:2c:6b:
         24:76:66:f7:4c:c8:40:3b:27:68:24:93:e5:ec:c2:68:a3:f9:
         27:42:20:27:b5:f6:83:7c:51:df:76:8b:ca:d9:15:af:9c:c7:
         16:49:f9:58:2a:cc:13:6d:79:40:29:41:90:88:14:fc:5a:c0:
         a4:e7:18:9d:33:4b:16:59:f9:5c:80:d5:d0:18:8b:bb:7a:da:
         df:99:5a:a6:45:41:2c:e2:9e:a4:68:d3:29:a7:35:de:64:98:
         af:b1:2b:2c:9a:bd:6f:d0:1e:d1:60:6e:1a:ec:a6:f8:5a:3a:
         ef:9e:80:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:13:24 2026 by rpki-client