Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/30b79f97-498b-3aef-8e52-d92064979d63.roa
File:                     30b79f97-498b-3aef-8e52-d92064979d63.roa (raw, json)
Hash identifier:          1Xi839Si4x3MuwCx9N3Xc4N8cK5ysV4tBhZkobHCQNY=
Subject key identifier:   1E:13:B5:A5:46:42:12:9B:C4:A5:74:01:C1:A8:35:23:67:96:11:8B
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584F612D72555830AB41ECB83E00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/30b79f97-498b-3aef-8e52-d92064979d63.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     394089
IP address blocks:        144.125.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:72:55:58:30:ab:41:ec:b8:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=31159c23-c0f2-489d-97a7-9dc3190fe76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4f:eb:73:be:53:50:ba:ee:25:10:a9:d4:6b:
                    15:c3:ec:5e:dd:84:2f:2e:c2:30:ac:89:cc:e1:25:
                    f9:86:13:73:e3:ac:ad:41:c2:35:eb:b4:7a:18:01:
                    d4:eb:93:06:39:0b:29:d0:f6:ab:7b:34:18:a7:f7:
                    13:3e:cc:d9:e3:c9:9f:97:e8:39:2b:2e:28:e9:39:
                    b5:d2:1d:7c:9d:8f:5d:3b:36:8f:3d:be:8e:62:e3:
                    58:c5:8f:6a:cb:18:6e:69:95:f6:b2:93:fb:5a:c6:
                    58:02:0e:80:d5:cd:2a:03:7a:3a:a6:b9:cf:5a:24:
                    56:40:6c:3b:97:b7:a7:02:60:3f:2a:ea:c3:96:7a:
                    ff:cf:19:3b:c2:da:af:71:eb:17:75:bc:fa:52:6b:
                    be:20:71:5f:dc:e5:e5:5a:a5:54:4c:86:d0:2e:ab:
                    b5:34:50:cb:83:57:e0:f5:82:4d:5b:7d:8b:bf:55:
                    58:56:27:e8:8a:84:2f:0f:87:e8:da:22:a1:de:e7:
                    03:54:69:93:9b:f1:be:82:61:11:82:47:63:06:34:
                    25:74:a2:16:98:13:37:ee:39:93:54:6c:41:a7:98:
                    2c:6d:13:08:72:04:b0:d5:60:f4:f9:8f:e5:bb:6c:
                    60:ac:bd:73:49:30:92:74:d4:30:73:2f:76:16:a7:
                    2e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:13:B5:A5:46:42:12:9B:C4:A5:74:01:C1:A8:35:23:67:96:11:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/30b79f97-498b-3aef-8e52-d92064979d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:e2:19:84:c7:8f:e6:2b:78:1e:8a:a9:b0:a6:ff:eb:88:85:
         48:8d:b3:c1:44:d0:80:3f:6b:e3:df:4f:ef:22:42:76:0b:dc:
         ff:34:9d:a0:fa:a8:43:eb:c9:e6:02:78:66:9c:ca:e6:c4:9e:
         56:63:3a:b6:87:3d:fc:3e:b1:c9:b5:fb:98:66:91:43:52:7e:
         16:57:4a:18:50:cb:f0:b3:22:dc:ad:cd:6f:74:7a:97:c0:a2:
         9f:44:77:de:2c:a0:0f:0e:e1:d7:39:81:43:3e:be:01:79:38:
         65:22:bc:f2:aa:85:19:e5:0f:85:06:74:c5:64:e7:a6:ec:22:
         c0:46:04:b1:6c:49:dd:01:b0:4c:65:e2:83:be:02:80:8c:c6:
         36:5a:11:47:4d:47:60:c0:20:3f:b2:d0:90:2a:a5:32:ce:5e:
         48:39:40:94:9d:36:4c:b1:b4:45:f8:4a:2a:e2:80:87:53:4f:
         d0:65:5c:66:91:b3:a8:8e:d7:41:df:1f:11:a7:1c:d3:95:66:
         bd:c5:7c:9a:c6:32:01:11:2e:d5:43:d7:26:39:9b:a5:1c:1e:
         61:4f:82:c9:00:6f:25:1c:b2:44:1b:4b:2f:d4:e1:b8:43:8e:
         2b:d8:9b:62:ee:ce:68:87:83:18:56:a9:b3:93:e5:17:ac:58:
         b7:b0:9e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:12:13 2026 by rpki-client