Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/432319f3-7f03-347c-974f-cfba9c424236.roa
File:                     432319f3-7f03-347c-974f-cfba9c424236.roa (raw, json)
Hash identifier:          7OPHhnj0rzoIfko9dQYn5PdoV/OBZtSpY7XfJxO1Hks=
Subject key identifier:   1A:CB:CD:15:C7:71:31:58:0F:D2:DE:95:04:43:95:41:EE:41:DD:DC
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584F49737614C0F1C57D67462300
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/432319f3-7f03-347c-974f-cfba9c424236.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     394089
IP address blocks:        153.72.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:76:14:c0:f1:c5:7d:67:46:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=966c0620-95d8-42c1-91d9-1f3bcf2493d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:69:65:ca:55:a0:98:0d:75:a6:be:ef:30:5f:
                    da:2e:52:1e:00:47:6f:39:68:1a:13:7b:d4:24:2f:
                    12:8c:86:15:b7:25:ed:87:3a:a4:5e:67:e7:d1:0f:
                    c5:92:b1:fd:b9:00:1e:38:62:df:5a:2e:0f:d5:b6:
                    d3:3c:09:9f:06:9b:ce:f5:20:f2:f4:0e:ab:21:a1:
                    64:98:c2:3b:ab:2b:24:d6:68:2b:68:74:1e:d5:45:
                    d8:51:94:48:dc:8a:cb:6f:f6:36:98:6b:f3:5d:ea:
                    fb:06:fc:97:d3:bf:78:5a:fe:34:14:7d:c6:1c:cf:
                    e5:a1:d3:94:92:b6:1b:52:c0:51:c2:1b:41:bb:99:
                    26:f3:01:48:31:4c:2c:e0:a1:a1:6e:83:3c:62:51:
                    d6:e3:20:67:da:57:f6:81:1a:fe:2e:d3:f1:67:12:
                    23:fa:0f:8c:43:88:37:d5:3d:14:8f:8a:dc:78:93:
                    4e:53:be:1f:82:d6:b4:4e:c8:29:ab:2d:e3:ca:5f:
                    dc:68:67:a4:3a:7b:3f:50:2e:2f:1d:9f:6b:ee:5c:
                    86:59:44:45:9f:a4:94:32:ed:44:1a:e6:14:32:63:
                    3e:3a:b5:56:2b:f3:65:4b:1f:76:24:5d:3c:c4:14:
                    be:22:dd:a6:da:ee:59:74:60:0e:9a:16:d5:f9:b5:
                    d0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CB:CD:15:C7:71:31:58:0F:D2:DE:95:04:43:95:41:EE:41:DD:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/432319f3-7f03-347c-974f-cfba9c424236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.72.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ed:8e:90:36:70:ed:5d:4c:8d:b6:95:3e:de:b3:3b:82:9a:ad:
         f2:6c:49:40:49:19:38:f0:ec:95:50:46:9c:61:e7:06:92:76:
         61:9e:84:06:88:4b:d5:b7:72:d3:6d:04:32:e9:db:b2:90:28:
         30:9b:94:c5:4b:cf:37:1f:39:b5:70:c8:de:d4:58:01:60:20:
         65:fa:d3:f6:cd:54:fd:7a:4b:0a:4f:d1:9c:4f:78:77:18:aa:
         e9:41:e8:15:32:f0:09:82:d9:1a:01:6d:b9:af:d4:1c:fa:67:
         e0:17:42:f6:22:12:66:a3:5c:4e:0d:8e:6f:1c:22:2b:7a:9f:
         fa:37:26:17:64:76:47:c0:23:94:d1:4c:e2:ca:58:0e:57:f1:
         3a:6c:fe:27:7a:77:bf:ab:c2:9b:7a:46:46:1f:a7:57:17:b6:
         ed:e2:7e:e5:6f:c9:90:cb:de:b7:0f:a6:80:fd:86:27:2f:78:
         4a:44:a8:3b:6a:0d:e8:85:50:ab:6b:fd:29:ae:03:96:02:1d:
         5b:e0:61:4b:bc:b0:5e:ef:a2:99:64:94:d5:df:ad:68:98:25:
         41:bb:5b:e3:a4:54:33:70:0a:ec:6f:ad:a5:a5:38:a8:46:50:
         8e:da:28:df:39:52:32:ab:52:49:14:c0:0f:c2:5f:71:6b:b3:
         ac:bd:d4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:24:49 2026 by rpki-client