Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/f38deae1-6a5d-3a92-a8b9-cd103457df05.roa
File:                     f38deae1-6a5d-3a92-a8b9-cd103457df05.roa (raw, json)
Hash identifier:          5RclDJjWNM8rMzjw+Yo9q/EPEXg5RG32gewigFApxjk=
Subject key identifier:   F0:6F:ED:03:E9:66:D2:5B:8C:0A:BF:77:B8:74:9F:62:84:75:D2:81
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584DA11AE8918D95C217D0DAC040
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/f38deae1-6a5d-3a92-a8b9-cd103457df05.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     16509
IP address blocks:        144.125.106.0/23 maxlen: 24
                          144.125.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:e8:91:8d:95:c2:17:d0:da:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=b703dfe9-421d-4be2-821c-968e48124d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0d:78:d0:29:4e:bb:1f:87:bd:3b:eb:68:e2:
                    ed:04:fb:db:b0:50:8e:0b:6e:ff:5f:ef:6d:d6:4a:
                    2f:c8:1c:56:9c:fd:f6:47:f2:a3:bb:b6:42:00:45:
                    ea:d5:85:ec:cc:81:ab:1d:50:87:b4:d6:4f:61:02:
                    1f:f9:5c:5a:92:65:e4:dd:21:e7:e1:38:43:93:a8:
                    e6:05:98:f5:90:de:3d:9c:be:b4:0b:0c:0f:c7:39:
                    d5:21:66:95:09:1e:7e:2c:5a:9e:63:44:e6:ff:9a:
                    fe:51:e4:37:0e:17:1c:ea:53:bc:a2:fe:71:bc:08:
                    31:a2:4b:fd:ac:03:e9:20:b9:d3:28:99:8a:79:42:
                    7e:e1:6c:70:81:d4:5a:2a:54:9f:0a:8d:82:e5:69:
                    47:31:6a:76:75:39:08:46:36:c5:1f:b6:ce:02:e9:
                    64:ba:37:53:03:b9:b7:2b:66:c1:21:42:44:7e:37:
                    94:d2:5f:15:d9:c8:3c:47:2d:18:46:c4:85:17:14:
                    c6:d0:dd:e6:95:8e:f1:fb:a9:da:85:6a:47:29:3d:
                    61:9c:cd:f1:20:3e:3f:0d:a1:e3:e9:c4:aa:12:97:
                    47:03:2e:1e:2c:8d:e5:bf:c2:cd:9f:bd:01:da:d6:
                    a3:0e:ed:4d:49:a3:58:c6:d2:1d:21:4b:0f:ae:73:
                    4b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6F:ED:03:E9:66:D2:5B:8C:0A:BF:77:B8:74:9F:62:84:75:D2:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/f38deae1-6a5d-3a92-a8b9-cd103457df05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.106.0-144.125.109.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:01:69:36:0d:26:5c:45:d5:df:75:72:20:09:cc:3b:a7:f4:
         c0:26:86:fe:58:ba:0f:da:07:ed:66:02:95:b7:a2:fa:7d:19:
         83:9c:48:d0:d6:ea:4b:9e:93:22:d1:0a:dc:5f:a9:bb:cc:ed:
         16:5a:04:2d:20:c0:c4:a1:5c:67:8a:78:a7:98:5b:1b:65:09:
         d1:af:cc:cd:ec:68:c7:b4:e7:88:f9:9b:95:5a:5e:11:55:11:
         8a:0c:34:c7:9b:c8:ec:2a:00:a5:2f:6c:b2:59:e2:26:82:d0:
         a5:e2:75:c0:ee:90:e3:e1:99:ed:4e:9e:4e:2e:73:7c:8d:4a:
         03:10:36:2d:c8:30:b6:65:36:a0:2b:f0:34:18:1f:c7:76:0a:
         3a:97:4e:ed:9d:bb:f6:72:22:da:fd:92:78:27:72:aa:e9:22:
         de:61:5b:bf:8b:5d:42:5c:cc:a6:e7:85:8c:ef:f9:65:37:69:
         de:55:e0:1b:82:04:22:65:81:d9:3d:cd:51:91:15:96:69:95:
         a7:9e:64:4e:0f:1f:e2:6e:54:fa:85:47:91:4b:b3:1d:98:e8:
         86:44:24:3d:df:e6:65:1d:a8:87:98:de:c0:16:d0:5d:47:aa:
         e0:9d:10:bd:bf:5a:9e:d5:40:99:3d:08:a5:bc:a2:14:7d:7a:
         9b:6f:77:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:40:57 2026 by rpki-client