Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c4467442-9f89-3a55-b00f-481d409584c4.roa
File:                     c4467442-9f89-3a55-b00f-481d409584c4.roa (raw, json)
Hash identifier:          kN307Ab3vafD2hWmKx/P1ZDNuYBFudRhdb+508JFNcU=
Subject key identifier:   00:69:64:8B:71:83:5F:F6:80:9F:2C:1A:46:1C:7A:B6:B4:DD:22:06
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D19B4AC3BFF3E4F0FBE682700
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c4467442-9f89-3a55-b00f-481d409584c4.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        165.85.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:ac:3b:ff:3e:4f:0f:be:68:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=f52be14c-8f48-473a-a237-31f2cfd64076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8a:0d:b6:0e:93:ec:7d:a2:19:d6:ce:14:94:
                    0a:b3:39:bf:4c:58:3d:52:60:0f:81:9b:09:2a:54:
                    55:8c:b9:5b:c9:a0:10:ca:42:59:f4:90:c8:16:a2:
                    10:c4:71:f2:db:d1:29:d6:1e:8e:07:37:09:ca:02:
                    8f:0c:1f:0f:43:72:8e:03:18:c2:f8:ed:b2:dc:ae:
                    f1:a5:bf:69:e5:51:c4:df:d7:b4:1c:cd:bc:79:3a:
                    0a:b5:77:89:4e:c1:f5:21:5d:2b:96:54:3a:d2:48:
                    35:57:06:89:af:cb:fe:42:e7:99:23:be:fa:b5:2f:
                    7d:ab:0d:48:1d:2a:6b:9f:18:01:58:2e:a3:aa:e8:
                    91:ac:2c:ea:d5:5e:3d:73:59:76:f7:82:7a:01:d9:
                    c7:6c:6f:08:86:10:2e:df:61:55:ca:29:59:b6:9d:
                    2a:80:b5:09:f7:8b:23:bb:5a:f1:92:6a:08:85:4a:
                    e9:ca:6a:e0:0b:bf:f4:02:7f:0d:48:5b:bb:77:17:
                    21:e5:f7:a0:b7:c9:08:ba:e9:32:44:ae:be:bb:93:
                    89:7d:f6:c6:23:51:93:f0:b4:13:2d:eb:7c:44:59:
                    b6:f2:18:99:df:42:d1:0c:dd:87:33:9e:94:ba:bd:
                    e7:e0:7a:8e:5e:98:f6:04:a3:20:c0:cd:d4:de:53:
                    95:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:69:64:8B:71:83:5F:F6:80:9F:2C:1A:46:1C:7A:B6:B4:DD:22:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c4467442-9f89-3a55-b00f-481d409584c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:9b:74:b6:cd:d7:4b:3d:91:ec:47:ea:38:91:23:96:59:7d:
         76:31:65:56:a2:df:6c:b6:1d:b2:66:f8:5d:25:85:e7:f6:aa:
         bc:36:1f:eb:44:e3:c6:0d:5b:d8:e3:0f:78:14:da:73:d4:e7:
         38:59:1d:04:8a:93:e7:15:51:4c:5b:96:be:40:b4:f8:da:c6:
         aa:6f:4c:2f:c5:a1:07:dd:ff:19:86:8c:91:83:de:87:76:90:
         68:b3:f6:61:d8:45:aa:ee:31:bb:24:cc:e2:ae:ec:70:73:a0:
         86:33:f0:ec:32:d0:6b:25:6f:05:d9:0e:f7:2b:9f:17:82:5e:
         13:2c:69:69:42:c4:eb:e9:5a:ec:a4:6a:ca:47:2e:1c:e6:03:
         d4:50:f8:b0:14:3f:bc:bf:6a:85:a1:ba:16:8e:42:8a:3b:f3:
         ba:ec:39:c0:a0:ef:5c:c9:cf:a0:11:d1:6e:6e:18:22:ca:e2:
         98:ba:7f:33:81:a6:59:b4:32:2d:84:b0:bd:9e:87:a8:95:db:
         b4:34:87:17:e6:89:eb:80:a7:b1:87:19:06:26:1d:7e:92:24:
         06:1c:25:e2:ae:a6:e6:37:b9:60:fd:c9:a8:c2:66:5f:d7:28:
         af:d2:1b:fc:1c:64:d3:46:5f:e9:74:35:46:a6:9b:21:ad:17:
         b2:b8:22:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtKw7/z5PD75oJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk
ZjUyYmUxNGMtOGY0OC00NzNhLWEyMzctMzFmMmNmZDY0MDc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4oNtg6T7H2iGdbOFJQKszm/TFg9UmAPgZsJ
KlRVjLlbyaAQykJZ9JDIFqIQxHHy29Ep1h6OBzcJygKPDB8PQ3KOAxjC+O2y3K7x
pb9p5VHE39e0HM28eToKtXeJTsH1IV0rllQ60kg1VwaJr8v+QueZI776tS99qw1I
HSprnxgBWC6jquiRrCzq1V49c1l294J6AdnHbG8IhhAu32FVyilZtp0qgLUJ94sj
u1rxkmoIhUrpymrgC7/0An8NSFu7dxch5fegt8kIuukyRK6+u5OJffbGI1GT8LQT
Let8RFm28hiZ30LRDN2HM56Uur3n4HqOXpj2BKMgwM3U3lOVaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFABpZItxg1/2gJ8sGkYcera03SIGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvYzQ0Njc0NDItOWY4OS0z
YTU1LWIwMGYtNDgxZDQwOTU4NGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFpVVgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABubdLbN10s9kexH6jiRI5ZZfXYxZVai32y2HbJm+F0lhef2qrw2H+tE
48YNW9jjD3gU2nPU5zhZHQSKk+cVUUxblr5AtPjaxqpvTC/FoQfd/xmGjJGD3od2
kGiz9mHYRaruMbskzOKu7HBzoIYz8Owy0GslbwXZDvcrnxeCXhMsaWlCxOvpWuyk
aspHLhzmA9RQ+LAUP7y/aoWhuhaOQoo787rsOcCg71zJz6AR0W5uGCLK4pi6fzOB
plm0Mi2EsL2eh6iV27Q0hxfmieuAp7GHGQYmHX6SJAYcJeKupuY3uWD9yajCZl/X
KK/SG/wcZNNGX+l0NUammyGtF7K4Iog=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:09:11 2026 by rpki-client