Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4da226df-39b2-3a89-a92b-5e10f548c82c.roa
File:                     4da226df-39b2-3a89-a92b-5e10f548c82c.roa (raw, json)
Hash identifier:          LrgJBCWX8+0BOMpjic0jdR3uocAT46wJIb3fQZDqWJQ=
Subject key identifier:   44:88:FF:F0:80:04:AA:88:FF:97:DF:00:FF:C0:83:19:72:08:82:EA
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584E94EA5018CFF5B3B17FC6AC40
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4da226df-39b2-3a89-a92b-5e10f548c82c.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     396982
IP address blocks:        130.41.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:50:18:cf:f5:b3:b1:7f:c6:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=b9f79957-f8e9-4135-b9fe-ed5c541055bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cd:28:7a:62:3a:dc:ca:1d:f0:15:13:88:4e:
                    d9:be:15:3c:c1:03:84:75:06:b3:a1:9e:75:4e:9c:
                    9c:44:82:b8:3c:46:7b:09:78:06:2f:4d:87:ae:88:
                    55:34:6d:ba:c1:29:09:c0:b3:9c:32:84:5a:89:d6:
                    10:65:03:27:d3:71:ed:43:a2:5e:2f:0d:b4:0e:b3:
                    f5:13:63:41:bf:62:b6:90:71:3a:14:ab:83:09:f6:
                    24:bc:65:40:61:73:5c:cb:19:91:28:ac:ef:70:6f:
                    ac:eb:44:9c:b1:2b:79:50:ee:67:c0:28:21:1c:a6:
                    0d:06:8e:e8:af:6e:ff:49:c6:1e:49:f1:a5:af:2d:
                    75:56:a1:de:7b:17:9e:40:04:91:9c:b8:11:49:42:
                    53:da:63:6a:5e:69:bb:d2:1f:80:2c:b6:2e:cf:7e:
                    94:d3:bf:21:ad:2a:f3:c6:f0:73:32:99:d7:89:ba:
                    83:31:80:f8:83:1f:24:38:08:3e:c6:3f:66:a9:d0:
                    2e:cd:8f:2b:00:d2:50:4a:e7:9c:70:15:99:eb:e2:
                    96:ed:a3:61:f5:c1:29:27:ce:2a:d0:f4:35:8b:eb:
                    35:da:64:5c:76:15:cd:28:74:58:88:70:0f:d7:8e:
                    25:23:fa:e9:a2:de:ac:46:07:a7:52:b1:73:4a:3d:
                    84:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:88:FF:F0:80:04:AA:88:FF:97:DF:00:FF:C0:83:19:72:08:82:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4da226df-39b2-3a89-a92b-5e10f548c82c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.41.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:9e:93:7c:c9:ff:b7:f3:3c:eb:9c:33:5d:33:5d:d8:86:3f:
         2a:16:2c:6b:47:1a:a2:e5:2d:fe:50:a0:e4:2b:c3:5f:d4:69:
         8f:9d:d4:28:d1:66:06:31:f7:8f:e3:4a:63:1b:74:c5:b6:5c:
         ed:8e:34:f0:1e:2b:9d:f1:8a:5a:e7:8d:70:3a:8e:72:b3:c3:
         82:20:40:bb:f6:11:7f:ff:91:92:69:c3:0c:0d:69:be:10:9a:
         d1:13:84:6f:af:ed:f7:1c:0b:c9:06:d1:4d:bf:6f:f9:cb:49:
         8a:41:aa:f9:df:64:20:e2:61:f1:d2:53:79:c5:6b:dd:99:7d:
         2e:60:16:2b:da:13:01:a3:d8:c0:eb:10:c3:0d:d0:ef:06:4e:
         ff:6e:f2:91:ab:89:47:86:42:39:7f:9a:be:18:ea:6c:da:d1:
         22:ad:f7:a3:da:1d:87:59:8f:2b:0a:3d:96:9a:45:50:00:d8:
         df:66:03:f5:bb:79:b5:a6:c2:37:28:61:8b:3f:ee:89:be:d5:
         f9:43:eb:bd:b2:25:64:58:4f:e7:45:5f:04:83:2f:5c:4f:63:
         40:1b:cc:2a:1a:a0:57:a4:ec:f5:46:d8:c0:4e:95:af:1a:6c:
         11:54:08:f5:1c:3d:4c:84:fd:4b:09:d9:ed:11:55:9b:b2:6d:
         47:3b:83:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:41 2026 by rpki-client