Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a8110795-d7de-3823-8d82-9bee50bd0f9d.roa
File:                     a8110795-d7de-3823-8d82-9bee50bd0f9d.roa (raw, json)
Hash identifier:          qL9pDBRIFdweX+5T0r51JIq7V+zjNGKaJXc51L8QcfE=
Subject key identifier:   2F:DA:5C:DE:C4:B1:25:1A:84:42:2C:0E:2D:9C:26:BC:4D:A3:CB:04
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D19B4AD23FFA35979D79A57E0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a8110795-d7de-3823-8d82-9bee50bd0f9d.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     5400
IP address blocks:        130.41.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:ad:23:ff:a3:59:79:d7:9a:57:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=3aac0017-9e23-4122-9cf1-457a594c7b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:61:b0:83:13:00:d4:15:57:fb:54:33:bc:5f:
                    8f:97:a8:73:71:aa:82:67:7f:e3:54:c1:42:ae:7b:
                    af:18:f0:65:dd:e3:76:a4:a8:f6:c2:3a:d2:f1:e1:
                    2f:48:bb:11:2c:f7:3a:e4:df:c7:59:e3:e1:11:b4:
                    a4:03:4c:0b:20:76:c7:c3:37:25:19:a3:26:95:6b:
                    4a:59:e6:fb:a5:85:d0:9b:76:d3:b0:6d:af:73:16:
                    a1:bf:55:2d:4d:1a:3c:7c:fc:62:e3:02:2d:bc:aa:
                    95:87:d4:77:67:8e:44:fa:e9:02:32:9d:94:17:49:
                    56:85:c2:f7:f3:ba:8d:07:5d:6a:1f:f5:f4:f3:a7:
                    87:09:11:a1:d7:24:a8:b2:a5:d6:20:b3:fc:04:ff:
                    8a:bf:09:4e:0c:de:ca:29:41:57:f1:4d:cf:e8:a5:
                    a0:79:75:ed:e9:eb:e1:bc:b9:47:8f:51:34:dc:fc:
                    db:53:dd:ed:c6:9f:2c:b5:ad:9e:5b:77:9f:38:38:
                    90:9f:a2:cd:82:0e:2d:46:b8:eb:c8:39:42:ee:7c:
                    78:94:d7:e3:ee:36:c4:50:ef:67:f5:46:41:a2:d8:
                    e3:06:e7:06:9a:50:32:2d:c9:07:e0:7d:a4:7b:ac:
                    ef:e7:43:2f:fd:d1:d1:16:78:35:f2:9e:1a:e3:88:
                    dc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DA:5C:DE:C4:B1:25:1A:84:42:2C:0E:2D:9C:26:BC:4D:A3:CB:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a8110795-d7de-3823-8d82-9bee50bd0f9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.41.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e9:cf:a9:5f:39:59:4e:19:d7:9a:16:a3:91:91:ba:63:55:11:
         c3:8a:03:35:f0:5b:d4:ab:8e:c7:36:7f:93:18:87:83:45:d2:
         5c:10:ce:93:46:b6:fa:f6:a3:07:e9:3f:21:1b:f6:d2:f0:c7:
         91:d8:59:89:c2:27:a0:ea:38:43:9d:cd:49:93:19:28:ef:43:
         3b:f8:ed:83:59:b2:69:b5:f1:0e:d9:59:7c:90:4c:aa:12:dc:
         34:1f:83:b4:9c:88:ea:a3:4e:b7:62:e1:45:2c:fb:d1:29:96:
         70:06:c2:15:a1:c4:a5:07:1b:0f:65:16:9e:bd:6e:03:d8:24:
         9a:4b:24:c9:a6:4b:9e:6d:c4:62:e7:e4:4a:f3:ff:cd:12:02:
         9f:0a:9b:6a:b7:73:15:73:05:6a:cf:8d:60:13:ae:30:b9:ef:
         05:e2:5b:df:e2:f9:ac:7c:a4:03:9d:ef:bf:e7:91:b4:82:43:
         85:f0:fd:1d:55:e4:2f:2e:4d:33:6c:91:f3:e5:f3:a9:23:a8:
         f1:df:c9:0f:0e:5e:a1:07:67:71:be:d7:76:13:55:14:34:d5:
         20:57:2e:4c:a7:44:1c:9c:e9:4f:61:fe:9f:ef:91:87:e7:22:
         cc:89:46:c9:b7:bb:fd:5f:3a:37:dc:c5:a3:9d:70:ca:ee:fa:
         98:4c:0e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:16:40 2026 by rpki-client