Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4b7d717e-bc57-32cd-b382-338a95179702.roa
File:                     4b7d717e-bc57-32cd-b382-338a95179702.roa (raw, json)
Hash identifier:          QnVvBnsv0MWFCpoqjwr+GgOuoPXje2CjeKOrxCyKv6I=
Subject key identifier:   25:46:2E:26:B6:49:E9:0E:0C:DE:A6:A7:97:69:C9:FB:80:1B:30:14
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584F20F7B2319F201D391BDC5200
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4b7d717e-bc57-32cd-b382-338a95179702.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     394089
IP address blocks:        144.125.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:b2:31:9f:20:1d:39:1b:dc:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=2ef12dd5-e90b-4594-897b-277e3c83ff13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4a:15:73:8a:dd:95:02:23:52:fd:3e:36:ce:
                    ac:cf:75:5c:5b:13:5a:58:99:7e:ed:b7:59:60:63:
                    66:c1:02:a5:9b:4d:b2:2b:e7:bf:31:f3:fb:dc:84:
                    24:af:1f:84:9a:3c:7c:75:51:66:d9:e2:05:af:71:
                    b4:91:82:93:92:2e:b4:e1:ba:e5:15:db:04:e0:91:
                    81:c7:97:27:48:d4:da:d4:30:b4:39:7c:6a:43:f8:
                    60:aa:fe:1c:2c:19:53:6c:e2:e9:6d:bc:a3:0f:db:
                    56:69:ad:8b:5b:41:74:dd:d2:78:a2:98:93:00:81:
                    b3:a6:61:2a:7e:fd:98:4b:a4:78:89:6f:61:8f:ff:
                    d7:79:19:39:6f:fa:82:7f:4b:3e:65:a3:07:a0:a7:
                    1d:a6:4d:e8:e7:af:cd:42:3a:53:ac:ad:67:f5:86:
                    f5:ae:78:d2:5f:4e:92:b7:ce:ea:aa:65:9a:81:cc:
                    93:88:51:81:08:0f:c3:3e:93:78:0a:ba:2b:03:47:
                    ac:62:47:e4:0c:aa:81:0d:06:f5:5f:ff:d9:89:74:
                    b0:d2:e7:cd:e9:a4:0f:bc:13:39:ba:87:a8:15:02:
                    d2:30:24:23:e7:98:ce:30:9c:14:6a:18:bc:68:7e:
                    1b:33:c0:d2:84:32:45:51:f5:ce:d9:09:22:8a:63:
                    e8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:46:2E:26:B6:49:E9:0E:0C:DE:A6:A7:97:69:C9:FB:80:1B:30:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4b7d717e-bc57-32cd-b382-338a95179702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:c4:a4:8f:8a:c9:c7:7b:53:ed:0e:f0:52:71:2a:6c:a5:40:
         9a:3a:a0:ae:3d:a0:f7:de:34:75:c0:7d:59:db:0f:b8:f5:48:
         11:ce:08:bb:7c:9b:55:8a:65:39:5e:9a:59:de:39:a8:0b:36:
         5d:fb:40:bd:d8:31:00:fa:c0:69:b2:a3:a0:48:dd:42:3d:a5:
         4b:4c:4a:fe:15:5b:92:6e:9c:f7:80:c8:56:7c:9d:c2:3b:62:
         e4:df:17:ce:4b:0f:2b:23:99:8e:92:35:b6:bb:87:01:fe:a5:
         ef:50:8e:19:3d:9b:8a:8f:78:a7:1b:53:93:26:2b:97:8a:a0:
         ea:78:d5:9d:0e:61:87:54:fb:fa:32:6e:d5:21:a2:18:d7:25:
         d7:02:4d:29:3e:d1:43:73:91:25:39:a8:95:53:99:14:aa:72:
         ec:98:1a:22:f3:72:5a:88:04:8e:39:02:92:a5:89:39:4a:2c:
         77:b7:2e:6f:db:f3:50:c7:64:cb:11:c0:43:1d:cd:d3:34:51:
         f1:5b:43:5d:ff:28:42:23:88:db:dc:5c:b2:5e:52:eb:cb:ef:
         f4:0a:79:28:dd:19:7a:e0:34:44:8e:93:d2:a7:c4:db:3f:50:
         c0:c9:9d:e8:88:8d:b4:8c:6f:8d:d9:e4:e7:e3:9e:73:65:b0:
         0d:51:f0:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97IxnyAdORvcUgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk
MmVmMTJkZDUtZTkwYi00NTk0LTg5N2ItMjc3ZTNjODNmZjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEoVc4rdlQIjUv0+Ns6sz3VcWxNaWJl+7bdZ
YGNmwQKlm02yK+e/MfP73IQkrx+Emjx8dVFm2eIFr3G0kYKTki604brlFdsE4JGB
x5cnSNTa1DC0OXxqQ/hgqv4cLBlTbOLpbbyjD9tWaa2LW0F03dJ4opiTAIGzpmEq
fv2YS6R4iW9hj//XeRk5b/qCf0s+ZaMHoKcdpk3o56/NQjpTrK1n9Yb1rnjSX06S
t87qqmWagcyTiFGBCA/DPpN4CrorA0esYkfkDKqBDQb1X//ZiXSw0ufN6aQPvBM5
uoeoFQLSMCQj55jOMJwUahi8aH4bM8DShDJFUfXO2QkiimPo8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCVGLia2SekODN6mp5dpyfuAGzAUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvNGI3ZDcxN2UtYmM1Ny0z
MmNkLWIzODItMzM4YTk1MTc5NzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGkH0AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGTEpI+Kycd7U+0O8FJxKmylQJo6oK49oPfeNHXAfVnbD7j1SBHOCLt8
m1WKZTlemlneOagLNl37QL3YMQD6wGmyo6BI3UI9pUtMSv4VW5JunPeAyFZ8ncI7
YuTfF85LDysjmY6SNba7hwH+pe9Qjhk9m4qPeKcbU5MmK5eKoOp41Z0OYYdU+/oy
btUhohjXJdcCTSk+0UNzkSU5qJVTmRSqcuyYGiLzclqIBI45ApKliTlKLHe3Lm/b
81DHZMsRwEMdzdM0UfFbQ13/KEIjiNvcXLJeUuvL7/QKeSjdGXrgNESOk9KnxNs/
UMDJneiIjbSMb43Z5OfjnnNlsA1R8Bs=
-----END CERTIFICATE-----
Generated at Sun Sep 27 11:28:39 2026 by rpki-client