Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/67b25c0e-bc7e-308a-82d1-3a804e2b04e8.roa
File:                     67b25c0e-bc7e-308a-82d1-3a804e2b04e8.roa (raw, json)
Hash identifier:          +A6FFGAC8gBGCjdbvUvCla2NPKovoKQs7I6MUyyXvqk=
Subject key identifier:   08:0B:B3:39:54:F2:E8:E8:C4:2C:42:38:D3:0A:EC:21:B5:41:85:3A
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584F49735E1267F4C0CEFF189840
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/67b25c0e-bc7e-308a-82d1-3a804e2b04e8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     394089
IP address blocks:        130.41.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:5e:12:67:f4:c0:ce:ff:18:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=17a82e63-b242-4842-b42c-3da6f424758a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:8a:ed:75:2d:0e:71:99:e1:d4:50:9f:c4:
                    21:06:ae:22:8a:81:93:d6:8f:bc:a2:72:87:be:e7:
                    fa:e6:5a:53:dd:3c:1c:cd:28:55:6a:5d:ce:e2:e1:
                    70:fb:c4:d5:0b:e7:a0:17:7c:ff:4a:33:2b:c3:00:
                    fc:ea:41:8f:c0:ab:49:fa:9f:50:a8:5a:a0:ce:ee:
                    99:84:9a:13:b3:32:e2:a0:66:0f:71:1f:a9:81:0d:
                    5c:04:08:f9:f3:10:35:e2:d6:09:1b:1b:6e:d5:19:
                    a5:75:ce:9e:37:dc:72:78:5c:50:07:bb:26:13:d0:
                    7e:61:1f:a8:fa:4a:c5:08:a1:5d:bc:f0:a5:ac:40:
                    2f:af:3a:54:39:9f:26:1c:bf:f3:29:b1:9a:f6:07:
                    7d:73:4e:7f:15:0f:f4:82:21:ae:3f:47:4f:e2:a7:
                    4b:9d:59:87:43:a6:2c:bb:41:8d:75:62:41:0c:45:
                    a9:81:87:11:aa:37:3d:ab:be:e6:51:fe:2d:1d:f9:
                    ac:5c:ed:16:4d:8a:af:ef:1b:da:25:2d:39:ed:01:
                    0f:fa:ea:de:4f:08:df:a2:76:94:e9:f9:54:6e:5a:
                    22:57:d7:78:63:9c:a4:15:11:42:3e:67:12:26:01:
                    d6:f4:51:89:44:e9:d4:3a:af:a2:5e:59:a2:a9:2c:
                    f9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0B:B3:39:54:F2:E8:E8:C4:2C:42:38:D3:0A:EC:21:B5:41:85:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/67b25c0e-bc7e-308a-82d1-3a804e2b04e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.41.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:23:b2:fa:5b:c2:ea:a0:62:7a:31:f6:c9:94:a8:96:87:4c:
         7a:9c:c1:5c:56:a1:87:68:e1:6f:1a:19:9e:fb:a9:67:25:2f:
         c5:23:a3:09:f9:c9:62:14:c1:2b:20:aa:9a:e1:e0:67:df:03:
         63:97:d2:45:0a:a8:2a:5c:1e:c5:1a:c5:89:36:b7:99:59:cf:
         cf:4d:c3:7f:e2:a1:9e:9c:d9:67:5a:46:65:fa:da:53:dd:30:
         60:86:d1:1b:84:48:b3:89:cd:57:42:22:bf:e2:50:87:5d:7d:
         fb:fb:44:11:2c:56:9f:75:70:03:e3:87:e0:f4:7c:16:61:87:
         57:34:2f:0a:df:22:7d:bb:c7:72:bc:c6:67:71:0a:08:34:52:
         ba:11:66:74:2d:3d:6a:e2:3e:73:1d:56:26:bf:d2:68:0c:c0:
         ad:6a:37:56:3e:ee:7e:f3:5d:10:02:73:7e:be:48:9a:65:d7:
         31:28:05:e2:d6:6a:99:07:b9:6d:83:79:85:55:8c:a3:84:8e:
         bf:b2:35:5b:fc:4b:01:cd:62:fd:90:0d:a9:0e:e7:29:6f:c6:
         59:3d:ec:cc:8c:9d:57:54:a1:cd:32:4a:da:cf:b6:98:bf:07:
         be:37:4d:22:c1:66:fb:d9:90:8c:a9:72:cb:a8:d1:23:d2:75:
         3e:62:df:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc14SZ/TAzv8YmEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MTdhODJlNjMtYjI0Mi00ODQyLWI0MmMtM2RhNmY0MjQ3NThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFCK7XUtDnGZ4dRQn8QhBq4iioGT1o+8onKH
vuf65lpT3TwczShVal3O4uFw+8TVC+egF3z/SjMrwwD86kGPwKtJ+p9QqFqgzu6Z
hJoTszLioGYPcR+pgQ1cBAj58xA14tYJGxtu1Rmldc6eN9xyeFxQB7smE9B+YR+o
+krFCKFdvPClrEAvrzpUOZ8mHL/zKbGa9gd9c05/FQ/0giGuP0dP4qdLnVmHQ6Ys
u0GNdWJBDEWpgYcRqjc9q77mUf4tHfmsXO0WTYqv7xvaJS057QEP+ureTwjfonaU
6flUbloiV9d4Y5ykFRFCPmcSJgHW9FGJROnUOq+iXlmiqSz5oQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAgLszlU8ujoxCxCONMK7CG1QYU6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvNjdiMjVjMGUtYmM3ZS0z
MDhhLTgyZDEtM2E4MDRlMmIwNGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgimIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEEjsvpbwuqgYnox9smUqJaHTHqcwVxWoYdo4W8aGZ77qWclL8Ujown5
yWIUwSsgqprh4GffA2OX0kUKqCpcHsUaxYk2t5lZz89Nw3/ioZ6c2WdaRmX62lPd
MGCG0RuESLOJzVdCIr/iUIddffv7RBEsVp91cAPjh+D0fBZhh1c0LwrfIn27x3K8
xmdxCgg0UroRZnQtPWriPnMdVia/0mgMwK1qN1Y+7n7zXRACc36+SJpl1zEoBeLW
apkHuW2DeYVVjKOEjr+yNVv8SwHNYv2QDakO5ylvxlk97MyMnVdUoc0yStrPtpi/
B743TSLBZvvZkIypcsuo0SPSdT5i39E=
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:09:50 2026 by rpki-client