Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c5842001-692f-3f07-9920-1fac641a491d.roa
File:                     c5842001-692f-3f07-9920-1fac641a491d.roa (raw, json)
Hash identifier:          dTQSp+GUbxPNi66OXifYr/7jqp8KtQOiCPmJA+AAfsA=
Subject key identifier:   FB:32:22:41:BA:16:7D:D3:DA:56:6C:ED:86:2A:97:9F:C5:22:D7:EF
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D2BDA0DCED208B3DF9981BA80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c5842001-692f-3f07-9920-1fac641a491d.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     36561
IP address blocks:        165.85.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:0d:ce:d2:08:b3:df:99:81:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=0d11ac07-5190-49c6-91d3-02776768137b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e3:bc:8f:67:76:5c:01:88:52:c9:7d:be:4d:
                    2a:77:50:67:e6:74:a2:89:20:c7:63:7a:5f:34:6c:
                    e9:57:5e:ad:3b:c0:cc:c3:2e:6e:7f:5d:06:8a:af:
                    81:22:6c:6d:a1:29:57:bd:0b:52:31:bf:cd:d0:4d:
                    59:f6:b8:5c:b1:29:d8:e0:1d:c7:5b:77:e6:f1:c3:
                    69:f2:2d:6b:53:3b:7f:97:cf:65:25:5a:e1:53:e4:
                    08:63:5e:5f:9a:2b:8a:91:ad:f1:7a:c3:aa:9b:81:
                    25:8d:b7:2e:d2:49:95:a7:e3:c0:0f:b1:6e:4a:e1:
                    9a:09:54:2d:e1:07:bf:b2:34:92:7e:0d:ae:83:f0:
                    41:a7:76:3d:72:3e:bb:31:dc:80:95:11:82:4b:57:
                    28:b3:f8:49:86:c4:7f:eb:84:50:73:2c:59:b4:90:
                    9b:90:0d:27:d6:88:90:8f:9b:3c:f2:73:90:f6:4e:
                    0f:f6:76:19:3e:f2:2a:4d:96:5f:6d:26:90:36:c5:
                    c7:59:8f:64:cc:63:a4:72:0b:b0:36:09:4a:45:b1:
                    76:3d:31:76:62:e1:73:cf:24:54:17:a2:91:92:ba:
                    03:72:6b:7a:eb:08:07:84:e1:c6:05:8c:61:e1:d4:
                    cb:24:1f:a4:db:fc:0b:06:13:32:35:01:cb:fa:94:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:32:22:41:BA:16:7D:D3:DA:56:6C:ED:86:2A:97:9F:C5:22:D7:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c5842001-692f-3f07-9920-1fac641a491d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e6:d3:b2:fe:82:c2:1e:6b:9a:31:f2:e0:ec:da:4a:d6:7f:ef:
         df:a6:fa:74:09:dc:8c:69:79:42:1f:5d:74:d7:a4:43:04:0e:
         33:bc:9f:a9:01:b9:9c:ae:75:2b:56:e2:79:7a:a7:49:52:e3:
         63:fa:65:63:67:5c:a5:e4:bd:2d:ec:cf:e3:84:d6:11:45:4f:
         7c:4c:78:db:52:7b:7e:c1:6d:2c:2f:aa:4d:7f:a7:d8:2d:be:
         92:1a:8d:ee:f8:a6:1a:01:0d:b1:c9:e1:71:16:b6:20:e9:45:
         f6:3b:7a:c9:9d:da:74:af:09:53:76:db:92:ff:3f:59:9a:95:
         97:e4:5a:2f:4d:fb:c7:b8:33:e1:9d:ad:44:e1:4d:7e:d3:e0:
         de:c3:2f:bc:0f:82:19:e8:2c:0d:20:37:b2:68:6f:8a:49:25:
         93:19:00:f3:8c:ae:25:88:58:88:2e:8e:69:b1:40:66:3a:4a:
         0b:a8:bb:ae:9e:55:7c:ad:d7:66:15:ae:dd:54:44:80:ec:6d:
         16:09:d5:e6:ae:1b:0e:e5:3b:1c:60:3a:94:85:d2:40:77:82:
         87:9c:a1:6b:44:69:58:77:cf:bc:18:5c:b0:a7:e6:ce:f8:2b:
         d1:ab:87:c1:a7:7b:63:6d:44:e1:c8:58:60:da:6e:52:07:ce:
         b1:0a:9a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:00:30 2026 by rpki-client