Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a8e2af1a-4281-3c50-bbf8-1d2418a92a47.roa
File:                     a8e2af1a-4281-3c50-bbf8-1d2418a92a47.roa (raw, json)
Hash identifier:          IH0kVXCaA0oQUnSDWb0iW6XqmtFE24ym+ZngjnkE+FU=
Subject key identifier:   F9:F3:58:AA:12:8B:10:E0:2E:3C:DC:95:FB:51:7F:57:3B:29:78:17
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584F498C277D6F6979B92FE58500
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a8e2af1a-4281-3c50-bbf8-1d2418a92a47.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        153.72.234.0/24 maxlen: 24
                          153.72.235.0/24 maxlen: 24
                          153.72.236.0/24 maxlen: 24
                          153.72.237.0/24 maxlen: 24
                          153.72.238.0/24 maxlen: 24
                          153.72.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8c:27:7d:6f:69:79:b9:2f:e5:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4db71aee-4acd-4002-9549-2ff07aedaa2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e0:0f:91:5d:75:a8:cb:6c:01:a6:6f:30:b8:
                    ea:02:92:e9:84:33:b9:b3:e6:35:94:74:3a:4d:91:
                    77:8f:61:df:16:09:f1:85:87:03:b7:29:c2:e2:d7:
                    12:37:c3:90:5f:a3:81:50:18:a4:c7:98:20:ae:60:
                    58:ed:4d:a1:24:29:18:79:41:6b:de:79:9d:bf:0a:
                    c7:c0:23:67:de:0c:ca:c6:84:88:75:e8:03:a6:4b:
                    be:37:b8:67:cd:07:7b:0a:be:3f:58:42:7b:47:f3:
                    4f:08:89:10:f6:27:88:fe:b0:46:9e:4e:88:67:86:
                    2f:31:b6:4c:e3:0b:59:32:da:46:8f:45:dd:27:5b:
                    d2:02:db:43:8a:54:58:fb:33:3a:fc:60:36:9b:38:
                    d2:70:f6:ad:b6:2a:af:3a:f4:eb:65:e6:1a:b3:b1:
                    ee:a2:b8:a4:5c:5d:75:5f:b7:4b:2e:09:d1:70:45:
                    43:c2:6b:4d:41:89:2a:f6:bf:ef:2e:ed:2c:2a:88:
                    cb:0c:3a:71:8b:ee:d2:6a:f3:8d:e8:13:90:6e:c3:
                    af:76:de:42:27:ed:77:e3:0e:99:e7:57:f6:a2:a1:
                    1d:db:c6:27:d7:79:04:03:cf:84:d1:64:bf:80:11:
                    62:aa:3c:dc:f7:24:69:b4:af:23:52:2d:77:c1:dc:
                    61:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F3:58:AA:12:8B:10:E0:2E:3C:DC:95:FB:51:7F:57:3B:29:78:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a8e2af1a-4281-3c50-bbf8-1d2418a92a47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.72.234.0-153.72.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:29:4b:19:96:06:cc:3b:27:9e:36:a9:18:1e:a4:9c:91:e6:
         d1:cb:6e:36:e0:28:a6:23:24:ae:16:f1:72:d3:28:50:69:38:
         24:7f:c3:07:20:d4:83:02:59:e0:49:cd:bf:08:e2:5d:c3:16:
         4c:5a:4d:54:0f:58:e8:57:c7:b2:81:d9:46:aa:3e:bf:fa:cd:
         e7:9c:56:55:c5:51:8a:ef:f6:98:82:d4:60:a1:2f:4d:e5:51:
         de:4e:aa:08:4e:d0:e6:d3:d2:57:84:76:75:6a:60:21:9e:90:
         e4:51:35:19:97:08:71:40:2a:92:08:c3:9c:fa:34:a9:b7:5b:
         56:66:8e:b5:0d:0e:4b:8b:93:fe:4c:83:06:89:44:99:ca:60:
         d7:31:fc:b9:ec:54:79:b2:1b:02:00:c4:e1:79:8d:a9:34:d4:
         5b:21:a3:36:3e:f4:54:0d:13:74:30:db:cd:ab:c9:e7:37:ef:
         03:7d:3f:39:c0:60:ac:5a:c5:b5:4e:f7:27:dd:fb:54:2e:2c:
         d7:33:41:0c:f6:0e:d7:c9:ef:a9:56:8f:5a:c7:b0:18:30:77:
         13:a9:21:1e:97:01:71:45:34:8a:76:56:4d:16:e0:1b:d3:92:
         93:d2:49:f8:9b:5f:5e:97:4c:13:49:68:0d:3f:79:5c:54:52:
         fb:1c:cc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:26:07 2026 by rpki-client