Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/391d27fa-5c61-36ba-b7e5-4200f69ee018.roa
File:                     391d27fa-5c61-36ba-b7e5-4200f69ee018.roa (raw, json)
Hash identifier:          G6zb0zEWEMje9Qt1GNYHS1m5eqRMXgmOiY6BvwBD7PE=
Subject key identifier:   8B:8E:DD:A9:4A:B5:82:B1:C4:AC:5F:94:A1:C1:86:80:B7:8D:6F:A5
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D237A1347FAD2411D85EA0E80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/391d27fa-5c61-36ba-b7e5-4200f69ee018.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        165.85.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:13:47:fa:d2:41:1d:85:ea:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=8b520834-1601-4467-a755-a7f00c39f6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ad:0c:8c:03:9c:8e:37:75:ae:ef:2b:3e:47:
                    71:bd:4a:b3:12:3c:7d:18:e4:b5:13:8a:e4:01:08:
                    39:69:45:2e:3d:97:aa:1d:bb:e5:71:34:e7:cb:2a:
                    d8:00:18:92:f9:ba:43:17:bf:a0:d3:98:08:f0:06:
                    21:16:be:08:73:1a:d2:8a:ce:5b:2d:c1:89:e4:25:
                    c2:72:ed:b9:22:13:d2:8f:af:5a:ec:72:df:79:d2:
                    43:9f:4b:61:2f:4b:7d:69:f3:b5:d7:3b:c0:05:ae:
                    72:46:e8:05:ce:66:3f:3e:8f:58:4c:70:57:e5:b0:
                    2b:14:03:7a:8b:d2:9b:e9:4c:e0:55:7b:92:2a:5d:
                    45:bd:a5:9e:99:6b:3e:cf:c4:4a:39:dc:c6:11:e2:
                    87:94:32:66:82:0f:55:ba:17:ef:a5:c3:fb:ba:77:
                    d8:fb:ad:de:ac:98:cb:bf:d8:7d:e1:04:76:0e:3d:
                    ac:b6:3e:7e:5b:47:ad:fd:0a:5e:b1:f9:c3:ee:f5:
                    75:aa:9e:7f:46:60:e1:dd:60:b9:e9:2c:60:05:1c:
                    50:8e:16:02:02:ff:cb:74:07:a0:2d:72:fd:18:e0:
                    6a:6a:cb:eb:6b:ca:18:36:09:c1:55:e9:b4:01:5c:
                    d1:a2:4e:d6:b5:bd:b9:b7:5e:04:4e:f8:68:8f:72:
                    35:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8E:DD:A9:4A:B5:82:B1:C4:AC:5F:94:A1:C1:86:80:B7:8D:6F:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/391d27fa-5c61-36ba-b7e5-4200f69ee018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:3e:37:6c:6e:ff:85:0a:7b:18:40:27:6b:0d:42:76:db:38:
         62:dd:fc:83:a5:07:5f:64:76:26:f9:65:11:8a:3e:80:93:89:
         49:45:97:7e:cf:fe:b2:24:57:d2:7f:7d:70:06:21:1e:e9:9b:
         88:03:1a:54:b1:1e:2d:ad:d5:0c:a2:84:fd:e7:7c:4b:de:f7:
         38:8c:2e:c7:25:2c:3b:a4:47:79:78:36:bb:88:76:c7:60:19:
         22:fa:32:6a:cf:fa:3b:5a:42:8c:38:b7:de:32:6f:cf:bb:48:
         20:c6:65:07:47:f4:04:c4:30:e1:3d:05:53:48:49:43:32:b3:
         c6:26:79:f5:df:89:02:70:82:76:5f:11:3e:25:16:3f:1c:c6:
         7f:aa:7a:20:64:98:1c:3f:f0:e0:15:76:53:89:3e:1b:76:16:
         31:80:d0:31:68:72:5c:4f:94:f1:95:d0:f5:e8:a4:50:3c:a3:
         2c:7f:aa:9c:f6:58:23:8b:23:72:f7:45:51:ff:26:36:4e:bb:
         05:1a:ac:77:96:c9:a0:e6:17:92:6e:59:ab:02:06:25:92:97:
         bb:ba:4a:5b:87:88:4b:90:9d:72:ab:12:9c:05:e1:41:6c:40:
         55:d8:65:01:3a:9c:4f:8d:8e:43:61:d1:4d:78:42:89:6e:03:
         fb:5c:57:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:20:05 2026 by rpki-client