Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b0c10a91-4a27-3106-a121-8cff1cedbf64.roa
File:                     b0c10a91-4a27-3106-a121-8cff1cedbf64.roa (raw, json)
Hash identifier:          f1phYCZtP7y3zhlZr7XmXMfdFhZ48ZmJ8QBNrYffxjI=
Subject key identifier:   28:99:9E:D5:1C:9D:9E:E6:B2:50:F8:25:71:D2:07:54:44:5D:69:BD
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D9A2034D775B4EDC1222ED028
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b0c10a91-4a27-3106-a121-8cff1cedbf64.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     2763
IP address blocks:        153.72.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:34:d7:75:b4:ed:c1:22:2e:d0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=2c3e03ed-4cbe-4754-8c1a-7936f0b6124c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:12:e2:96:4b:a7:c3:5c:49:94:47:37:7c:b3:
                    9b:8d:9c:65:16:9b:79:10:7d:93:ad:41:d0:ad:86:
                    5d:d9:e0:80:45:1f:e7:16:69:ba:1b:ca:26:5b:ff:
                    6f:ff:0a:71:83:73:c2:fa:46:a6:15:89:53:4d:b6:
                    10:27:9d:85:02:6c:3b:0c:f8:d0:43:07:94:bb:89:
                    77:ff:36:71:7c:da:7f:2b:2a:8e:ff:cf:0d:f6:8b:
                    b4:32:73:5f:af:0e:5f:bc:dc:20:48:10:dc:76:e4:
                    14:99:b5:88:ee:db:62:0c:33:ef:57:01:c8:f5:e6:
                    16:6c:18:4a:3d:d7:0d:c5:6e:1c:b5:d8:dc:da:19:
                    a6:eb:33:a0:11:db:2a:1a:b4:5a:6f:2d:9d:a1:76:
                    53:56:6c:77:4a:a2:57:e8:0a:23:be:e3:82:ac:33:
                    dc:d0:e0:29:3b:0d:d0:f8:5f:50:8e:30:30:04:06:
                    d1:61:d6:f9:04:ad:c7:0a:5c:6c:3c:f9:bf:16:4c:
                    7e:5f:2a:a1:8a:ae:62:4e:47:2a:ad:c2:c0:21:4b:
                    f8:9a:0b:1e:67:26:50:b5:c8:9c:78:a7:ec:b2:f4:
                    12:28:21:6b:34:55:5d:f6:96:c7:15:83:fd:07:06:
                    fe:cd:38:d9:fa:8d:9c:12:1f:8a:d0:ac:2b:fc:7d:
                    21:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:99:9E:D5:1C:9D:9E:E6:B2:50:F8:25:71:D2:07:54:44:5D:69:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b0c10a91-4a27-3106-a121-8cff1cedbf64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.72.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:03:98:3b:2f:84:b5:df:38:c8:44:7e:a8:cb:df:bf:f0:f8:
         3c:6c:cd:b9:af:88:aa:66:bc:e7:c8:62:a7:d5:05:20:56:57:
         d3:5c:c8:73:e5:3e:f4:b0:23:0c:a1:e2:5f:9f:60:99:03:cc:
         b0:96:da:31:27:2e:d7:d2:1b:dc:03:0d:1c:9e:5d:72:6a:6e:
         fc:0b:b4:13:20:89:9a:22:04:e2:41:cc:5e:c1:64:99:a3:e6:
         11:20:3e:54:d9:55:a7:d2:c0:79:ce:ee:68:3b:8b:82:1c:a8:
         30:c2:58:b8:59:e7:23:52:62:e4:a9:cd:21:b8:de:d2:75:74:
         e4:5e:fc:36:89:ad:9f:f3:e1:f4:e9:56:99:f4:56:6b:6c:6b:
         ef:5d:96:51:2c:52:dd:4a:80:c1:a7:6c:30:66:0c:b0:da:0c:
         95:5d:c9:48:e5:83:31:42:bd:16:97:69:97:0e:de:20:44:c0:
         f7:f0:35:e2:3c:b6:f4:26:59:26:2f:97:71:97:82:7f:78:2d:
         58:4b:dd:48:c8:14:98:ec:e8:af:45:bf:96:64:7c:17:3c:3c:
         31:4d:1f:fb:f2:7b:46:9e:e9:f9:ea:cf:a2:8c:b5:0c:11:f0:
         5c:8c:3e:a1:57:71:7f:3a:4a:1b:f7:a2:63:f4:a6:d5:e7:9d:
         e4:cb:7b:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIDTXdbTtwSIu0CgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk
MmMzZTAzZWQtNGNiZS00NzU0LThjMWEtNzkzNmYwYjYxMjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhLilkunw1xJlEc3fLObjZxlFpt5EH2TrUHQ
rYZd2eCARR/nFmm6G8omW/9v/wpxg3PC+kamFYlTTbYQJ52FAmw7DPjQQweUu4l3
/zZxfNp/KyqO/88N9ou0MnNfrw5fvNwgSBDcduQUmbWI7ttiDDPvVwHI9eYWbBhK
PdcNxW4ctdjc2hmm6zOgEdsqGrRaby2doXZTVmx3SqJX6AojvuOCrDPc0OApOw3Q
+F9QjjAwBAbRYdb5BK3HClxsPPm/Fkx+Xyqhiq5iTkcqrcLAIUv4mgseZyZQtcic
eKfssvQSKCFrNFVd9pbHFYP9Bwb+zTjZ+o2cEh+K0Kwr/H0howIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCiZntUcnZ7mslD4JXHSB1REXWm9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvYjBjMTBhOTEtNGEyNy0z
MTA2LWExMjEtOGNmZjFjZWRiZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmUhgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABUDmDsvhLXfOMhEfqjL37/w+DxszbmviKpmvOfIYqfVBSBWV9NcyHPl
PvSwIwyh4l+fYJkDzLCW2jEnLtfSG9wDDRyeXXJqbvwLtBMgiZoiBOJBzF7BZJmj
5hEgPlTZVafSwHnO7mg7i4IcqDDCWLhZ5yNSYuSpzSG43tJ1dORe/DaJrZ/z4fTp
Vpn0Vmtsa+9dllEsUt1KgMGnbDBmDLDaDJVdyUjlgzFCvRaXaZcO3iBEwPfwNeI8
tvQmWSYvl3GXgn94LVhL3UjIFJjs6K9Fv5ZkfBc8PDFNH/vye0ae6fnqz6KMtQwR
8FyMPqFXcX86Shv3omP0ptXnneTLe7g=
-----END CERTIFICATE-----
Generated at Wed May 13 10:27:33 2026 by rpki-client