Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/2c3f2356-4506-34a1-8de8-ebabdf36cbda.roa
File:                     2c3f2356-4506-34a1-8de8-ebabdf36cbda.roa (raw, json)
Hash identifier:          0YiRGXVJpsvoKlLq3/J5EnaEPugaap9nwoUU31j7uI4=
Subject key identifier:   CB:7B:A8:D3:8D:7B:39:3A:63:BF:B8:0E:A5:58:A2:E5:A5:A0:6F:C9
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D143D77DF02800AA4D7E45580
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/2c3f2356-4506-34a1-8de8-ebabdf36cbda.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        130.41.138.0/23 maxlen: 24
                          130.41.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:77:df:02:80:0a:a4:d7:e4:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=db244a9e-66ef-456a-bc0f-f997e39e3940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:64:80:f0:43:06:dc:d1:71:79:b9:99:97:34:
                    1d:1e:b1:49:03:14:6e:69:83:8d:94:bd:d8:72:89:
                    fe:de:5f:6d:b0:80:92:21:9c:7e:c2:bc:a7:36:ca:
                    ad:f8:60:95:97:43:a6:d2:62:c2:2d:9f:00:b2:bc:
                    9a:d5:96:96:4e:b5:42:2a:03:a2:b3:17:9c:fd:2a:
                    40:7b:1f:1b:e8:8b:5e:f3:b4:55:38:aa:12:c3:b4:
                    58:3d:52:c2:8e:80:08:d0:78:49:66:3f:ef:32:05:
                    39:22:e6:c2:f2:bb:4c:5e:6c:cb:6a:56:97:7f:e3:
                    bf:61:00:c3:76:e3:d2:14:40:7e:28:93:1e:ee:e3:
                    8c:40:4e:e4:11:54:8f:37:fd:ba:8c:cb:5e:18:56:
                    ff:b4:16:94:f8:f6:ea:11:0f:bd:28:b3:8a:87:c6:
                    52:33:ba:b9:b9:73:a4:3f:e3:99:71:b7:fe:66:bf:
                    10:1f:c2:6e:bd:ac:9c:fd:68:fd:af:6a:3b:57:6c:
                    57:7e:a9:d1:e9:16:ce:eb:72:99:fa:57:c2:b3:de:
                    d2:2f:04:16:aa:9b:5d:f7:5a:ac:1c:79:f0:ad:50:
                    65:0a:d9:23:e1:d5:25:25:c0:9e:35:a5:d9:d9:1c:
                    fe:c3:4b:c7:03:a2:75:c2:34:78:13:a2:58:cd:b1:
                    78:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7B:A8:D3:8D:7B:39:3A:63:BF:B8:0E:A5:58:A2:E5:A5:A0:6F:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/2c3f2356-4506-34a1-8de8-ebabdf36cbda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.41.138.0-130.41.143.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:38:13:6d:e1:fd:6d:9b:b4:85:5b:f5:92:81:a1:26:a2:ed:
         9b:59:87:89:b2:99:cb:44:6c:4e:8b:99:c0:ef:e5:0e:b5:2e:
         9a:fe:77:06:ba:7d:5e:6f:f3:c1:07:48:03:6c:44:fa:9f:ed:
         52:06:53:3f:55:7c:93:17:26:a5:a5:c3:53:9c:ed:a0:9e:0c:
         00:9e:24:83:23:b2:77:d9:c7:1f:3e:41:9f:3b:aa:be:55:7e:
         46:0f:9b:f7:16:67:17:04:de:ca:71:7c:ac:e6:ca:7a:4d:aa:
         52:60:ac:7d:bf:cd:82:a9:7f:b4:14:47:ff:29:5c:19:59:fb:
         01:ea:c6:6b:bc:74:89:9b:4f:27:2a:53:5d:ae:e3:1e:c2:14:
         46:37:a4:4a:07:6b:0e:fe:99:37:da:45:77:bd:9a:be:11:d3:
         55:40:ad:0d:f8:65:72:60:17:b0:23:8e:b9:c0:a3:8d:2a:53:
         c8:93:c9:a3:bc:bd:f2:c6:b0:2f:d3:32:62:a6:cf:87:19:2d:
         08:a8:aa:ac:69:4e:3d:62:0d:9a:6d:41:d3:46:4b:2c:71:2c:
         a9:c9:f3:b3:2a:8e:8d:cb:60:b8:29:61:8b:62:25:20:8b:ff:
         92:b3:00:2f:b7:ea:a0:35:4d:52:d6:6b:a6:82:bb:19:9a:54:
         43:1d:c6:3c
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE0UPXffAoAKpNfkVYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
ZGIyNDRhOWUtNjZlZi00NTZhLWJjMGYtZjk5N2UzOWUzOTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWSA8EMG3NFxebmZlzQdHrFJAxRuaYONlL3Y
con+3l9tsICSIZx+wrynNsqt+GCVl0Om0mLCLZ8Asrya1ZaWTrVCKgOisxec/SpA
ex8b6Ite87RVOKoSw7RYPVLCjoAI0HhJZj/vMgU5IubC8rtMXmzLalaXf+O/YQDD
duPSFEB+KJMe7uOMQE7kEVSPN/26jMteGFb/tBaU+PbqEQ+9KLOKh8ZSM7q5uXOk
P+OZcbf+Zr8QH8Juvayc/Wj9r2o7V2xXfqnR6RbO63KZ+lfCs97SLwQWqptd91qs
HHnwrVBlCtkj4dUlJcCeNaXZ2Rz+w0vHA6J1wjR4E6JYzbF4vQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFMt7qNONezk6Y7+4DqVYouWloG/JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMmMzZjIzNTYtNDUwNi0z
NGExLThkZTgtZWJhYmRmMzZjYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGCKYoD
BASCKYAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAtzgTbeH9bZu0hVv1koGhJqLtm1mHibKZy0RsTouZwO/l
DrUumv53Brp9Xm/zwQdIA2xE+p/tUgZTP1V8kxcmpaXDU5ztoJ4MAJ4kgyOyd9nH
Hz5BnzuqvlV+Rg+b9xZnFwTeynF8rObKek2qUmCsfb/Ngql/tBRH/ylcGVn7AerG
a7x0iZtPJypTXa7jHsIURjekSgdrDv6ZN9pFd72avhHTVUCtDfhlcmAXsCOOucCj
jSpTyJPJo7y98sawL9MyYqbPhxktCKiqrGlOPWINmm1B00ZLLHEsqcnzsyqOjctg
uClhi2IlIIv/krMAL7fqoDVNUtZrpoK7GZpUQx3GPA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:05:03 2026 by rpki-client