Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a381323b-73af-38db-a69b-03642ca6bbad.roa
File:                     a381323b-73af-38db-a69b-03642ca6bbad.roa (raw, json)
Hash identifier:          UhXy6ZnbMHCqAQy9iEutd/acmXbJXgYBPv18f7+rlws=
Subject key identifier:   EE:C5:EE:5E:C7:C4:7E:AA:78:03:24:EB:21:D8:D5:12:60:BC:D2:9B
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D2644C7B345B3C223FD164D00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a381323b-73af-38db-a69b-03642ca6bbad.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     396982
IP address blocks:        165.85.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:c7:b3:45:b3:c2:23:fd:16:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=e19b0411-ecf8-487a-a721-9a22f5c649ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:05:6f:1e:dc:1d:aa:8f:74:a0:81:02:ad:
                    81:b5:eb:a6:b9:23:5b:1c:59:31:b9:a6:90:d0:99:
                    80:fa:21:a3:14:ca:82:bc:ef:80:72:99:f8:5d:82:
                    05:57:f6:8a:07:f2:24:25:a2:90:b0:0a:4c:61:fa:
                    5c:4a:89:79:67:0f:c0:a0:fc:0b:e1:1b:18:7e:21:
                    55:72:b0:3a:00:e4:c2:7f:cf:5e:60:88:b6:8c:04:
                    30:1c:66:c7:97:af:bf:f3:88:3b:20:db:79:0a:6f:
                    bf:e2:0c:ce:f9:9c:e7:3e:4e:84:2d:90:ee:61:70:
                    c5:d4:eb:73:78:5b:8e:80:fd:f5:f7:33:2c:8b:88:
                    17:a2:b5:4d:be:f7:06:c9:6d:db:75:44:cb:fc:e0:
                    3c:f2:ae:57:68:5c:69:7d:0d:82:30:ed:a5:da:fc:
                    06:32:9d:a3:46:61:63:60:9a:9b:5d:23:0a:3e:ec:
                    f6:a2:fa:45:f4:fc:b1:0d:35:e8:19:f3:b4:c3:c1:
                    c4:e7:f0:7b:a7:1c:99:30:73:5f:0f:88:04:62:e5:
                    95:2c:17:92:5a:2a:3c:d0:1b:78:89:3f:63:41:71:
                    af:31:4a:de:c0:ac:3b:7a:cd:67:f6:cb:7a:33:1c:
                    0c:87:2d:cc:21:60:f8:de:41:2c:67:ed:46:d7:74:
                    77:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C5:EE:5E:C7:C4:7E:AA:78:03:24:EB:21:D8:D5:12:60:BC:D2:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a381323b-73af-38db-a69b-03642ca6bbad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:a3:04:f2:79:61:51:fc:88:be:d4:bd:68:02:de:41:82:25:
         52:0a:7c:82:0e:8d:14:29:61:84:8a:3b:55:2b:6c:b2:a0:24:
         3a:17:a3:5f:7a:ff:2a:fe:1c:35:24:a0:fa:43:0e:b3:09:8b:
         6d:02:b3:37:1e:78:c6:f6:6e:9e:05:ce:cb:52:da:ab:11:65:
         0e:db:bc:e6:6f:48:22:53:6b:4a:7d:d5:83:30:78:ff:a5:8c:
         c8:11:54:96:f7:2e:08:24:6a:c0:e9:db:83:77:8a:05:ff:7b:
         a2:c9:ca:b9:90:b4:c3:3e:22:29:da:fe:a0:d4:ab:ee:e9:0c:
         9b:ab:9e:d5:53:8e:df:30:30:63:28:8b:00:1e:9d:80:05:0d:
         3c:3d:e7:35:2c:f1:0f:43:9d:4d:fa:c9:53:14:9a:56:38:66:
         db:cb:72:02:40:de:d4:52:52:28:36:08:de:7a:c2:64:b6:65:
         67:3f:8d:7c:6f:b8:73:b5:66:69:bd:49:1a:70:48:31:ad:20:
         f5:45:85:40:5c:83:37:0e:65:b2:d8:fb:e0:46:75:3f:d7:45:
         a7:fe:d6:4a:dd:77:49:f6:d6:73:07:bc:e3:cb:d8:48:9a:e4:
         85:91:41:f0:5d:53:7e:1b:29:7e:e6:db:b6:32:f1:0a:40:d1:
         b6:2e:48:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRMezRbPCI/0WTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk
ZTE5YjA0MTEtZWNmOC00ODdhLWE3MjEtOWEyMmY1YzY0OWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGkFbx7cHaqPdKCBAq2BteumuSNbHFkxuaaQ
0JmA+iGjFMqCvO+Acpn4XYIFV/aKB/IkJaKQsApMYfpcSol5Zw/AoPwL4RsYfiFV
crA6AOTCf89eYIi2jAQwHGbHl6+/84g7INt5Cm+/4gzO+ZznPk6ELZDuYXDF1Otz
eFuOgP319zMsi4gXorVNvvcGyW3bdUTL/OA88q5XaFxpfQ2CMO2l2vwGMp2jRmFj
YJqbXSMKPuz2ovpF9PyxDTXoGfO0w8HE5/B7pxyZMHNfD4gEYuWVLBeSWio80Bt4
iT9jQXGvMUrewKw7es1n9st6MxwMhy3MIWD43kEsZ+1G13R3uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO7F7l7HxH6qeAMk6yHY1RJgvNKbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvYTM4MTMyM2ItNzNhZi0z
OGRiLWE2OWItMDM2NDJjYTZiYmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpVXwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOCjBPJ5YVH8iL7UvWgC3kGCJVIKfIIOjRQpYYSKO1UrbLKgJDoXo196
/yr+HDUkoPpDDrMJi20CszceeMb2bp4FzstS2qsRZQ7bvOZvSCJTa0p91YMweP+l
jMgRVJb3LggkasDp24N3igX/e6LJyrmQtMM+Iina/qDUq+7pDJurntVTjt8wMGMo
iwAenYAFDTw95zUs8Q9DnU36yVMUmlY4ZtvLcgJA3tRSUig2CN56wmS2ZWc/jXxv
uHO1Zmm9SRpwSDGtIPVFhUBcgzcOZbLY++BGdT/XRaf+1krdd0n21nMHvOPL2Eia
5IWRQfBdU34bKX7m27Yy8QpA0bYuSEo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:43:21 2026 by rpki-client