Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/bb90af53-26c0-30ac-967a-271e14c0c885.roa
File:                     bb90af53-26c0-30ac-967a-271e14c0c885.roa (raw, json)
Hash identifier:          aEAWYilEYNWF66Bmg+BG5sIu+RUkEj8lwPqt59U8ogQ=
Subject key identifier:   EE:0E:A2:44:5C:A0:86:61:8E:AC:37:07:CF:60:E8:67:DC:63:A7:E4
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584E66DA3B7A15D28368FBBE8D60
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/bb90af53-26c0-30ac-967a-271e14c0c885.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     19901
IP address blocks:        9.144.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:3b:7a:15:d2:83:68:fb:be:8d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=1ae045de-4850-4b52-a3d3-fc648fb433b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:87:3b:d2:c6:8f:63:a6:e8:fc:70:1b:d0:a6:
                    88:83:2d:6a:0d:99:a2:d3:3d:1d:2a:6a:28:df:4d:
                    97:ef:3c:4b:4f:56:ac:bd:19:eb:8c:2a:37:54:83:
                    c9:23:53:1a:39:a5:e7:fb:e0:59:8c:25:b3:21:2c:
                    21:27:bb:9c:3e:27:79:37:b2:df:6d:fb:78:7d:61:
                    c9:f8:db:7c:ed:c2:20:74:b2:24:c5:67:fe:6d:77:
                    17:93:1f:9e:d5:ca:b3:12:ca:3c:a7:03:09:1f:5b:
                    ff:fe:23:04:03:5c:5c:80:1e:3b:24:a4:cf:da:3a:
                    29:e5:07:2c:8b:3a:ba:83:ae:47:d4:02:c6:4b:39:
                    f6:9e:32:ed:ac:c7:7d:2c:df:4a:93:da:c0:67:7d:
                    f4:ac:37:7f:b3:c3:22:2e:b8:83:63:4c:22:87:a4:
                    3e:c1:fe:63:ee:af:2e:6b:ac:61:eb:ed:d7:d9:1e:
                    e9:87:ec:99:d6:b4:31:46:a1:66:50:d5:ca:16:d5:
                    7e:c2:40:0f:40:e8:ac:5c:4a:8a:89:96:9e:47:ee:
                    c0:f9:00:77:6c:9d:96:5f:ef:ec:74:e4:3c:b6:ad:
                    11:50:28:15:7b:2e:2f:28:7f:49:f2:f4:1a:a8:de:
                    27:bb:4d:ab:b5:8c:cb:f7:ce:86:7e:80:79:e4:e7:
                    32:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0E:A2:44:5C:A0:86:61:8E:AC:37:07:CF:60:E8:67:DC:63:A7:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/bb90af53-26c0-30ac-967a-271e14c0c885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  9.144.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:64:ca:a7:dc:59:82:fc:3e:f3:c4:e3:2a:fe:f3:0a:63:d1:
         f2:59:ed:13:33:b4:f4:9a:f4:b0:a6:36:35:7b:a9:b5:cb:2b:
         25:40:00:c8:c4:83:17:5d:28:fe:60:49:24:10:5d:11:88:24:
         a8:84:8f:bf:f5:ff:5e:f7:ae:5d:51:35:fd:2e:4d:74:5d:65:
         d5:12:e4:68:a1:68:52:3d:0b:06:a3:3a:ad:0c:96:ad:b9:f1:
         96:9b:ba:a1:d1:19:61:cb:27:0c:4c:62:31:31:b9:d6:5e:1c:
         7c:d7:b6:92:ee:b2:93:57:cd:5a:66:ea:11:99:9d:50:51:64:
         9b:f2:ae:fa:d7:2f:7b:7d:fa:59:17:19:ab:e5:28:b4:cd:3c:
         fc:ae:17:59:06:85:bc:cc:ab:62:8e:8d:ba:cb:2b:48:ae:6a:
         e6:d1:1c:7f:32:50:56:ee:2d:59:66:06:a4:90:10:76:de:5b:
         15:08:a5:aa:64:d9:12:c5:1b:e7:72:14:e8:96:2a:3d:aa:49:
         05:b8:9e:04:eb:bb:75:09:62:ac:95:d7:73:db:fd:16:45:49:
         cd:58:e8:81:9e:38:b8:3a:a5:4a:d6:b0:64:d9:18:a0:83:83:
         17:dd:cb:4b:d5:69:69:8d:08:26:ff:0d:1b:06:d5:9b:13:9e:
         04:1b:67:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:16:59 2026 by rpki-client