Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d8dfe143-6812-3517-a4b7-14d1bb9040e5.roa
File:                     d8dfe143-6812-3517-a4b7-14d1bb9040e5.roa (raw, json)
Hash identifier:          GSb6rGOOpsIs3dws6ZxV8Q03tQU1DCYAuipMZQwA+uI=
Subject key identifier:   8D:E7:FD:A9:11:AC:A4:F5:1A:0E:3E:9C:6F:FF:91:02:D0:52:AE:92
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584DBD057F8BE77D579F2B4FAD00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d8dfe143-6812-3517-a4b7-14d1bb9040e5.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     394089
IP address blocks:        144.125.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:7f:8b:e7:7d:57:9f:2b:4f:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=631dbeeb-51da-479f-ae61-26aef4a1fafe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5e:18:af:4a:1d:ca:7e:96:06:bf:e3:89:f0:
                    36:61:77:aa:b0:bd:7f:7a:c4:84:bd:a8:c2:b5:11:
                    f6:36:c2:54:b9:ba:75:92:dc:da:9b:26:8a:d9:81:
                    08:96:de:21:3c:3c:05:7c:37:72:9a:3a:80:6e:75:
                    f1:96:ef:ab:61:f7:5d:09:d2:48:fd:8f:47:74:e9:
                    ef:35:a5:31:53:79:5a:ac:76:b4:50:77:17:d2:c8:
                    84:9b:83:5d:19:8c:6a:09:2e:d3:16:d1:98:94:12:
                    cb:a6:60:89:6c:10:98:93:43:65:35:64:b8:4e:bd:
                    ea:16:0f:bb:a1:e8:76:e8:68:e2:fa:09:21:a9:4a:
                    fc:8b:d5:47:3c:99:19:52:d4:df:12:9d:86:d7:cc:
                    87:3f:f6:cd:a0:a1:d4:da:a4:d7:39:c8:de:a1:b2:
                    c7:68:00:8f:d2:b6:0c:13:dc:6c:8c:3d:67:a5:73:
                    88:33:3b:fc:7f:22:6a:57:fa:d3:72:e1:83:e2:86:
                    48:56:b9:e1:84:33:60:52:ab:1f:2e:5c:0a:62:a9:
                    d4:d6:1f:29:cc:ad:00:c5:bc:79:07:a3:4d:85:29:
                    78:5f:43:5d:ec:cf:ec:09:84:08:2b:18:de:10:2c:
                    88:52:7f:2b:ff:f8:83:68:21:3a:f0:fd:ba:03:f9:
                    15:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E7:FD:A9:11:AC:A4:F5:1A:0E:3E:9C:6F:FF:91:02:D0:52:AE:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d8dfe143-6812-3517-a4b7-14d1bb9040e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:58:8b:48:ff:de:4a:73:73:9e:93:77:b5:65:96:d5:a2:6b:
         89:58:81:16:d0:94:56:6a:1e:44:db:4c:a5:9a:a5:40:a2:e4:
         c3:14:d9:c5:74:d9:36:12:17:48:1b:c1:78:fd:10:20:6a:ba:
         45:7d:47:72:27:5d:73:54:f8:e0:3d:c9:31:87:d6:ac:ce:40:
         27:09:42:77:78:30:56:34:d3:1a:31:78:80:24:8d:34:a1:0c:
         68:1b:8f:10:07:5b:0a:27:d4:e0:3f:b6:23:ce:db:84:d2:20:
         38:4b:93:64:17:dd:91:4b:5d:6b:ca:76:0e:d1:45:ad:38:4a:
         1c:6f:b2:62:a1:c1:dd:2c:bf:87:f3:88:9b:3a:d3:97:c6:b6:
         f6:a6:97:11:ce:60:bf:6e:e7:c3:54:94:f0:60:dc:22:cb:10:
         db:82:88:e7:6c:23:44:af:ba:51:4b:94:a4:d7:2a:47:0d:09:
         49:4f:ca:20:e7:8c:67:c8:91:e5:49:c7:d7:b4:e3:bf:83:0d:
         f0:10:9e:71:f0:a7:1b:94:d6:c3:2d:fa:81:c8:c8:cd:91:76:
         4b:f3:c4:65:96:47:9b:9f:57:4e:92:f5:d2:06:d4:7b:8e:71:
         a9:df:8d:e9:38:c1:1a:88:17:ef:27:e0:de:b8:ff:9e:93:6f:
         bb:a3:a1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:37:17 2026 by rpki-client