Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7ff6f129-a6b8-30bc-bca7-7ae8b966ffee.roa
File:                     7ff6f129-a6b8-30bc-bca7-7ae8b966ffee.roa (raw, json)
Hash identifier:          eiMNe17W8YF8eQQfXfECpkx+nag0Ucg8BxS/a2l3CxI=
Subject key identifier:   90:10:C9:48:E9:FE:08:CD:C9:C8:4B:75:5C:7F:56:D6:41:B8:AB:5C
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D91C016ADAAEC2F1705046100
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7ff6f129-a6b8-30bc-bca7-7ae8b966ffee.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     396982
IP address blocks:        169.224.152.0/21 maxlen: 24
                          169.224.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:16:ad:aa:ec:2f:17:05:04:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=ae83ebec-63a6-4eae-8fee-ab5b3bd36d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:52:02:64:1a:db:78:c7:26:29:17:60:46:9a:
                    11:de:3d:a9:42:ee:8e:c5:62:0c:e8:97:2f:ad:77:
                    eb:44:31:3f:df:ed:e0:93:88:7d:b1:8f:c6:57:b4:
                    83:91:96:db:51:23:0a:10:38:14:ea:27:e6:2b:53:
                    7b:59:d5:0f:83:3a:1a:65:9f:80:ec:2c:58:0f:cc:
                    4f:7b:48:5b:e5:46:dc:5b:1a:f6:98:64:3e:53:03:
                    53:82:31:f6:41:d2:93:2f:8b:b7:ed:8a:2d:49:40:
                    af:d7:55:cf:35:ad:51:ca:87:3b:0a:a3:64:8a:66:
                    db:74:51:5d:48:74:3a:e4:63:9b:09:d1:56:27:eb:
                    b3:e6:f5:ef:26:3d:0d:ec:c7:4f:7f:25:dc:76:47:
                    76:66:62:7c:8d:bc:89:09:da:c8:eb:a4:13:14:da:
                    b7:64:a7:3c:8c:29:db:1c:89:ba:57:29:51:99:27:
                    15:7a:63:7c:ce:bd:75:ad:c1:6e:ad:f8:b3:6e:53:
                    9c:89:02:ea:ff:53:ae:99:2e:87:f2:77:92:a2:5c:
                    b2:3c:20:22:55:4f:04:26:cb:96:32:7b:48:95:16:
                    41:2e:cb:bf:40:5c:71:b3:73:86:97:8c:9c:d4:b2:
                    73:6a:a1:c4:39:fe:22:17:57:7c:36:a2:63:4d:60:
                    5b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:10:C9:48:E9:FE:08:CD:C9:C8:4B:75:5C:7F:56:D6:41:B8:AB:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7ff6f129-a6b8-30bc-bca7-7ae8b966ffee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.224.152.0-169.224.191.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e8:20:6e:7f:7d:1d:9b:fd:40:15:51:c0:d7:f6:4d:64:15:cf:
         de:e7:fc:95:ce:47:66:d3:f1:bd:e0:38:4a:b1:c2:30:aa:14:
         79:74:a6:90:08:3e:f2:2b:3c:25:64:7e:55:c9:aa:c6:1d:51:
         b0:fb:51:f3:31:d4:83:0a:76:e3:8a:85:0a:c9:86:53:a8:d3:
         58:a8:bc:41:f5:70:0f:df:1c:8b:cd:51:69:9e:6e:42:2e:47:
         dd:69:24:fe:f8:66:0c:53:1a:fe:b5:ea:d8:87:9e:cc:79:d8:
         a3:dd:af:50:c0:48:76:2c:8b:58:a6:1b:6e:1b:79:0b:09:17:
         c5:2e:23:c8:9e:a9:09:ce:28:7f:fd:67:7c:7c:4a:43:f1:a3:
         a5:9e:09:17:c2:4f:4d:a8:c8:c5:03:54:03:de:dc:e1:f9:06:
         ee:8d:bb:48:08:1c:05:73:cf:37:ce:25:3e:97:f6:cd:d3:f0:
         ae:3a:31:af:19:ed:bf:cd:42:34:9e:75:44:03:f4:26:76:77:
         71:55:01:13:98:0b:84:f3:40:3c:28:4e:69:de:7c:5f:41:f0:
         ba:85:f9:5b:0b:3a:8c:e5:4f:ea:4c:78:03:0f:10:e5:c9:84:
         43:5b:a1:08:20:a9:4d:ea:50:d2:88:7f:29:7f:22:d0:38:0e:
         a9:fa:39:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:11:23 2026 by rpki-client