Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/2a868130-b6f3-317f-b370-1f3f11ad0268.roa
File:                     2a868130-b6f3-317f-b370-1f3f11ad0268.roa (raw, json)
Hash identifier:          wK9nRVSBwdPJ/xFwvQJ9ApV8VozhjEc1sxitqvE52BQ=
Subject key identifier:   3C:40:A3:35:AF:4D:64:3E:13:B7:01:37:91:DD:8D:20:10:BE:5B:68
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D143D45A00166253060B086A0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/2a868130-b6f3-317f-b370-1f3f11ad0268.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        165.85.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:45:a0:01:66:25:30:60:b0:86:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=5ef93c47-b9d1-4d6f-9213-a7c15565aa8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:41:b9:7d:1c:21:b6:3f:45:1c:8b:03:42:
                    59:e5:40:17:6d:a3:4a:ae:de:57:36:64:1c:c8:86:
                    ad:c0:b3:27:b3:7e:00:0b:9d:70:41:d0:a7:41:0f:
                    5f:a7:62:ce:81:da:92:a7:d7:bb:a6:a5:2f:78:97:
                    9d:bd:ba:ad:ff:25:58:02:0b:96:a0:d4:d6:e9:f6:
                    2f:57:28:f2:f0:ca:dc:96:82:95:b9:75:7c:b3:e4:
                    5a:03:2a:f5:e7:c5:a9:2e:a5:c1:56:0e:a3:84:72:
                    67:5c:55:58:fa:84:5f:ad:42:99:1e:a3:12:5b:15:
                    da:a1:2e:83:a0:b3:a6:5e:be:80:82:8a:b1:07:91:
                    8b:c6:dc:ac:87:36:e7:10:5f:5c:69:59:56:87:ee:
                    f7:f6:e8:5d:3a:e6:4a:26:23:d4:c0:ec:0a:d3:a2:
                    31:9c:e6:86:46:82:c4:f2:6b:66:20:ff:33:63:37:
                    85:d1:00:d7:7a:37:04:f4:46:a9:13:a1:9b:3a:76:
                    d1:3d:99:ba:f3:86:d2:4d:52:26:42:67:7b:2f:a7:
                    f1:19:cf:d4:59:2a:aa:2f:64:95:62:9a:3d:90:98:
                    52:a2:48:e5:05:6d:f6:ba:b1:10:d6:46:e4:04:9b:
                    30:5c:c9:89:a7:f4:f2:20:15:96:21:4b:89:99:76:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:40:A3:35:AF:4D:64:3E:13:B7:01:37:91:DD:8D:20:10:BE:5B:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/2a868130-b6f3-317f-b370-1f3f11ad0268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:3f:e5:6e:54:34:91:91:90:0c:4d:b9:ba:25:d9:8c:a2:bb:
         d0:ec:18:02:92:b6:88:fb:e4:ac:15:de:76:39:5b:f5:a6:20:
         72:ca:71:1a:09:a9:b1:65:86:1e:a4:4d:80:80:ad:bd:60:1a:
         b4:81:2b:b0:53:ec:f0:e1:07:59:39:96:af:67:7b:bc:66:cf:
         c6:22:8a:a2:1e:c7:6d:24:7b:49:79:60:34:c0:0b:26:f9:08:
         88:ee:61:80:05:89:f2:bb:3b:ea:c5:9a:4c:19:09:b3:75:30:
         54:0b:3f:5e:03:65:18:a2:b1:a6:a5:45:b9:be:d2:87:f9:61:
         71:4a:27:c3:10:0f:a0:1a:fd:00:47:47:98:29:d5:69:cf:77:
         3f:eb:83:aa:48:97:c9:11:84:ad:e4:fa:bc:63:8e:16:1a:54:
         97:a2:2d:ff:c9:33:dd:0e:4f:f5:74:d9:92:ad:98:24:33:a0:
         c9:64:e5:f0:6a:fd:61:0b:d9:c7:e9:35:23:14:e5:dd:11:bd:
         61:4a:ff:65:f6:ff:8f:0a:9f:53:ba:ce:d8:c0:8c:7d:e4:06:
         f0:f1:39:88:9a:26:20:4c:1a:8f:52:a4:61:9a:b6:80:78:2f:
         e7:3f:44:57:3e:45:70:d1:e3:68:61:5a:33:2f:fe:12:1d:38:
         ee:6b:c0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:07:05 2026 by rpki-client