Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6f8b9a23-274c-33bd-a25f-aaa5c30d05ac.roa
File:                     6f8b9a23-274c-33bd-a25f-aaa5c30d05ac.roa (raw, json)
Hash identifier:          szdhLsgEotMXLa2fDysdiaupAQ12goi5/TYc0jqDG/Q=
Subject key identifier:   A3:0E:22:F8:0F:12:B8:3D:13:0A:15:56:CE:0F:9D:5A:C3:8B:A4:2C
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584DBD05834A5519EEA3CC2E7120
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6f8b9a23-274c-33bd-a25f-aaa5c30d05ac.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     396982
IP address blocks:        144.125.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:83:4a:55:19:ee:a3:cc:2e:71:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=b85dd539-01f7-4ec7-8cb0-60cc477d6f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a4:c9:45:50:cd:39:9d:75:82:73:dd:27:f1:
                    4c:1e:07:4d:fc:4b:d3:8b:fd:ff:bb:4a:aa:73:c2:
                    af:64:ca:ad:0f:74:d3:18:f7:16:ed:e4:cb:38:dc:
                    6b:47:d0:d6:ed:50:98:2a:4b:eb:e8:65:31:64:cb:
                    df:fa:fb:9b:2c:1a:58:69:5a:51:01:7f:ea:67:9e:
                    8c:a7:34:2d:46:5b:ad:f7:2d:dc:39:80:30:d5:ef:
                    cf:83:37:83:78:70:fd:4a:fd:f8:9a:83:10:89:9c:
                    c0:2c:99:01:6f:7b:44:0e:ea:3e:43:2c:20:09:cd:
                    8e:b0:b3:9f:ad:34:9a:3c:39:3f:8a:0f:26:cf:a8:
                    b6:26:76:3d:83:28:41:c9:88:53:b7:f9:84:82:e8:
                    47:9e:5e:1d:82:64:ae:02:07:79:e4:36:7e:e6:45:
                    50:e1:3d:18:4d:3b:39:f4:b2:f5:e0:af:2e:36:30:
                    09:a6:15:4d:c9:42:6e:81:93:86:53:5b:85:aa:c8:
                    35:91:fb:b6:5b:19:7a:ac:fa:47:71:ef:07:fc:89:
                    e9:1e:c6:62:c1:1c:80:92:9e:ae:d9:2d:c5:11:df:
                    80:2e:bf:07:cb:05:c3:01:c8:76:6b:98:4e:2a:87:
                    4c:25:e8:79:cd:4f:3b:7e:12:b0:55:01:b6:e4:5f:
                    3a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0E:22:F8:0F:12:B8:3D:13:0A:15:56:CE:0F:9D:5A:C3:8B:A4:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6f8b9a23-274c-33bd-a25f-aaa5c30d05ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:e0:17:a7:13:6a:9c:49:33:e8:db:51:7c:9d:81:0a:f9:a8:
         90:21:14:11:62:31:9c:b7:30:10:38:6e:4e:af:89:9e:1c:32:
         30:21:53:f0:2a:4c:8a:fa:92:99:b4:30:f3:91:fa:04:e8:68:
         29:71:67:53:fa:03:db:c3:6f:15:e4:ba:81:72:77:83:5e:b9:
         7a:ef:a6:37:74:de:35:05:70:d4:b3:49:4c:bf:97:02:5c:e1:
         82:e3:47:da:62:67:68:4a:54:d4:0c:5a:aa:a2:65:d8:f8:97:
         1f:c3:d1:57:c8:8e:d5:b3:b0:6f:27:a1:a4:23:f7:00:4b:ad:
         a8:14:89:e3:4b:1f:83:c0:86:cc:71:72:04:7d:eb:38:78:77:
         54:62:25:4d:1a:37:0e:cd:cf:9d:2e:7d:47:73:22:f0:a9:70:
         e6:76:1f:c8:4b:82:33:4c:a9:2d:1c:d6:a2:33:31:57:d0:5f:
         17:ca:a5:e1:77:d2:df:c1:45:dc:2d:a5:33:30:14:ef:11:83:
         1d:cb:97:63:8a:fd:25:a4:f1:27:ae:28:cb:78:a0:5b:11:a2:
         03:ec:c5:0a:f7:81:6f:93:15:87:a6:f0:55:42:63:cc:02:7c:
         68:37:9d:9b:f5:85:92:f9:43:db:40:29:3d:13:04:79:61:ec:
         ae:61:74:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:13:21 2026 by rpki-client