Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/dd85bd1b-de33-37d0-8cca-7e9162008b23.roa
File:                     dd85bd1b-de33-37d0-8cca-7e9162008b23.roa (raw, json)
Hash identifier:          LbS1N3kiRLt3b2ROtnyqnLkEfVw91fmI92NMqY016pY=
Subject key identifier:   D1:79:50:EC:84:56:77:6D:88:F5:0A:D8:AC:29:AB:5B:E8:35:40:15
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D91A964A1252C447EDBFC7A00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/dd85bd1b-de33-37d0-8cca-7e9162008b23.roa
Signing time:             Mon 20 Apr 2026 12:15:05 +0000
ROA not before:           Mon 20 Apr 2026 12:15:05 +0000
ROA not after:            Sun 19 Jul 2026 12:15:05 +0000
asID:                     396982
IP address blocks:        153.72.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:a9:64:a1:25:2c:44:7e:db:fc:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr 20 12:15:05 2026 GMT
            Not After : Jul 19 12:15:05 2026 GMT
        Subject: CN=ea32f8f3-8998-4428-87fe-2bf8938429a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6d:15:5e:1f:0e:9a:49:b3:24:ca:60:7e:e0:
                    5b:83:e2:e9:df:46:bc:be:fd:4e:7e:aa:b3:2d:af:
                    51:73:60:02:d3:c5:a3:34:05:3d:80:b1:95:a0:be:
                    f3:a3:07:65:73:46:61:9c:48:6d:9d:e3:59:71:e0:
                    aa:32:e5:25:6f:4a:b0:a7:c8:62:cb:22:ff:41:9d:
                    f1:d8:6a:61:b4:d5:55:16:a6:3a:b5:9a:c1:9f:e9:
                    ee:5f:da:ad:f8:79:58:5b:cd:24:20:24:b0:92:2d:
                    0d:cf:fc:6f:2f:40:16:83:4b:80:b5:b4:b9:99:7d:
                    d3:27:24:35:1f:22:10:aa:39:2c:05:90:4e:5a:70:
                    9a:67:b2:c7:55:75:90:bd:cd:0a:2a:11:25:77:29:
                    e4:f4:a7:6f:de:b4:07:d9:18:c1:36:43:59:2b:43:
                    5f:1d:6c:7a:49:9b:81:66:48:95:eb:06:61:49:b4:
                    c2:88:44:89:39:70:77:c7:3e:7f:c5:0d:5a:75:aa:
                    89:51:62:23:a3:82:ee:e5:1c:c3:98:35:41:44:fe:
                    61:1e:db:ae:0d:80:32:50:38:25:a3:5b:dc:87:8e:
                    a5:d1:0e:01:85:8c:4c:01:62:d7:88:23:de:b2:d9:
                    de:db:3b:b2:0b:d5:1d:16:e5:55:7f:39:fb:e8:c3:
                    39:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:79:50:EC:84:56:77:6D:88:F5:0A:D8:AC:29:AB:5B:E8:35:40:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/dd85bd1b-de33-37d0-8cca-7e9162008b23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.72.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:53:19:3d:cb:8f:38:cc:76:02:2e:b2:0c:b1:27:73:18:e5:
         07:be:a2:36:f0:cb:14:5a:26:0f:52:9b:21:7b:9a:de:a0:a4:
         d5:7b:42:ec:1a:69:fc:d4:51:d9:a5:d5:eb:a2:3c:f3:65:53:
         3a:75:fe:04:bb:2e:9b:28:69:5b:6c:e0:4d:87:ca:4c:32:d6:
         66:ab:d3:6a:75:4e:1c:48:6c:eb:2a:0b:b3:a3:e9:c7:12:d2:
         4c:69:c3:f5:d7:68:95:a6:93:4c:ed:9b:0f:f6:f3:11:af:39:
         3f:53:b2:1d:bd:a9:fb:ce:99:fb:5e:a0:a3:3b:e6:1f:69:7d:
         51:94:72:e0:be:43:67:00:54:4b:2a:27:dc:58:d5:cb:15:c4:
         d4:83:75:1d:e1:9b:90:01:ec:cb:ab:34:95:1a:fe:18:17:74:
         36:00:32:78:68:8c:63:c8:5e:d7:f9:c6:1c:18:67:f4:d4:47:
         19:6c:38:a0:38:77:a0:d8:f9:c1:13:5b:f1:a0:e8:df:e5:8e:
         a4:37:1f:cd:ff:4c:59:18:f9:82:1a:b7:a8:52:8d:57:ae:a5:
         87:da:b4:4f:49:a5:b6:93:57:0e:78:21:af:08:dc:b2:63:c3:
         20:9e:c7:56:42:f3:57:38:9a:e6:72:e2:57:06:91:01:e9:c2:
         0f:7e:89:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:33:09 2026 by rpki-client