Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/de3f9907-606e-34bf-8e8e-7085513478a2.roa
File:                     de3f9907-606e-34bf-8e8e-7085513478a2.roa (raw, json)
Hash identifier:          anRhuJ672nuOzfwfxCvFJ7Qp0wdfhgPFewbcXqkMFvE=
Subject key identifier:   4B:5F:82:A6:E9:AE:7B:DF:3B:79:CF:FE:9C:43:06:B4:DD:83:6D:36
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584DBF34C808F65FE9B562829E80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/de3f9907-606e-34bf-8e8e-7085513478a2.roa
Signing time:             Wed 06 May 2026 19:47:19 +0000
ROA not before:           Wed 06 May 2026 19:47:19 +0000
ROA not after:            Tue 04 Aug 2026 19:47:19 +0000
asID:                     31898
IP address blocks:        75.125.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:34:c8:08:f6:5f:e9:b5:62:82:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: May  6 19:47:19 2026 GMT
            Not After : Aug  4 19:47:19 2026 GMT
        Subject: CN=385fa755-6531-45ee-9b08-565eb541ad97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:80:fe:92:c4:34:a1:8b:17:44:6d:fa:28:f1:
                    0f:bd:d2:5a:bf:05:50:06:63:53:ab:a4:98:a3:f9:
                    b8:0c:b9:32:77:57:63:6c:65:d3:ef:96:f4:ee:ab:
                    54:18:a4:23:a6:bc:34:98:b0:ca:f0:7f:f8:6b:79:
                    1a:37:42:3e:bd:99:f0:b6:19:dc:e6:1b:6f:b5:84:
                    0f:96:9c:70:46:89:02:72:d6:af:ef:b0:4a:d1:ee:
                    9c:b8:b8:9d:de:fb:0b:9e:1a:f2:08:ea:06:f5:03:
                    82:be:d1:4f:83:2e:b2:5c:23:a2:09:9a:6a:58:41:
                    9d:9b:7d:69:df:38:5d:20:c7:16:73:f4:f0:fb:d0:
                    5a:a5:5e:02:03:c2:d9:9f:43:8e:05:72:0e:41:24:
                    e0:ff:a7:7f:c7:99:c6:8a:e6:0b:74:60:91:d4:65:
                    78:84:29:d2:52:03:15:8e:b8:1e:fe:d8:dc:f8:d3:
                    35:ab:85:de:14:22:2a:73:42:38:28:cf:f1:3e:b0:
                    11:19:e7:8e:42:fc:db:f0:77:0e:41:53:ab:ad:35:
                    56:1b:2c:19:35:d3:ff:69:ed:af:e5:cd:93:b6:80:
                    b1:bd:9a:9b:50:4b:68:c4:2a:5c:78:52:95:cd:d8:
                    12:97:f6:c5:0b:cf:62:8c:2e:0a:bf:46:17:08:db:
                    c8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5F:82:A6:E9:AE:7B:DF:3B:79:CF:FE:9C:43:06:B4:DD:83:6D:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/de3f9907-606e-34bf-8e8e-7085513478a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.125.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:bf:bd:24:cc:bf:a1:dc:9a:14:e6:a9:f7:58:1e:c8:12:84:
         b0:57:94:a3:60:83:27:64:b7:67:1f:ec:c2:9b:64:6e:7b:a4:
         f4:f5:59:f6:d7:bb:08:ed:a1:ec:1b:41:6e:d1:fa:b9:ee:8c:
         da:21:40:00:75:62:c4:ef:92:e4:94:e9:bd:9f:50:e2:79:c9:
         5b:17:af:23:f8:92:e8:ea:98:18:1d:e0:b9:f3:a5:59:92:fe:
         90:8f:b3:e0:47:86:be:81:f3:1a:14:58:6f:28:0c:fb:84:6a:
         d3:4b:b9:29:64:ee:e2:60:b8:90:c7:c5:27:e3:fb:b8:78:0a:
         e1:65:13:b7:47:29:f3:fe:f6:18:4d:1d:a2:27:cf:9b:50:9b:
         e0:94:a8:7a:2d:b6:2d:10:d5:7a:34:1d:4a:dd:8b:98:fd:01:
         89:af:68:54:5c:88:c5:cf:c7:06:4e:a1:81:3e:3a:5f:bd:7d:
         9c:8b:f3:e6:14:9f:5d:52:d6:ec:5d:7a:5b:6d:8a:63:9b:33:
         28:e5:d9:10:36:73:ec:ef:42:63:a1:1c:f3:e1:49:4a:25:35:
         ab:74:5d:48:e5:d6:36:0f:9e:64:00:2f:70:35:4f:0c:87:cd:
         5b:d9:0e:77:e6:b6:3e:e0:94:45:f7:bc:9e:6c:e8:79:44:e3:
         66:f3:54:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/NMgI9l/ptWKCnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI2MDUwNjE5NDcxOVoXDTI2MDgwNDE5NDcxOVowLzEtMCsGA1UEAxMk
Mzg1ZmE3NTUtNjUzMS00NWVlLTliMDgtNTY1ZWI1NDFhZDk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4D+ksQ0oYsXRG36KPEPvdJavwVQBmNTq6SY
o/m4DLkyd1djbGXT75b07qtUGKQjprw0mLDK8H/4a3kaN0I+vZnwthnc5htvtYQP
lpxwRokCctav77BK0e6cuLid3vsLnhryCOoG9QOCvtFPgy6yXCOiCZpqWEGdm31p
3zhdIMcWc/Tw+9BapV4CA8LZn0OOBXIOQSTg/6d/x5nGiuYLdGCR1GV4hCnSUgMV
jrge/tjc+NM1q4XeFCIqc0I4KM/xPrARGeeOQvzb8HcOQVOrrTVWGywZNdP/ae2v
5c2TtoCxvZqbUEtoxCpceFKVzdgSl/bFC89ijC4Kv0YXCNvIMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEtfgqbprnvfO3nP/pxDBrTdg202MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvZGUzZjk5MDctNjA2ZS0z
NGJmLThlOGUtNzA4NTUxMzQ3OGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGS32AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALm/vSTMv6HcmhTmqfdYHsgShLBXlKNggydkt2cf7MKbZG57pPT1WfbX
uwjtoewbQW7R+rnujNohQAB1YsTvkuSU6b2fUOJ5yVsXryP4kujqmBgd4LnzpVmS
/pCPs+BHhr6B8xoUWG8oDPuEatNLuSlk7uJguJDHxSfj+7h4CuFlE7dHKfP+9hhN
HaInz5tQm+CUqHotti0Q1Xo0HUrdi5j9AYmvaFRciMXPxwZOoYE+Ol+9fZyL8+YU
n11S1uxdelttimObMyjl2RA2c+zvQmOhHPPhSUolNat0XUjl1jYPnmQAL3A1TwyH
zVvZDnfmtj7glEX3vJ5s6HlE42bzVK8=
-----END CERTIFICATE-----
Generated at Wed May 13 07:57:10 2026 by rpki-client