Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/089df9ae-2f5e-3c3d-aaa5-23952fdcddf4.roa
File:                     089df9ae-2f5e-3c3d-aaa5-23952fdcddf4.roa (raw, json)
Hash identifier:          4rvpsHOxpcJPSRgqrRBkRWfLVBMyGfGbaTAoZRBP6tQ=
Subject key identifier:   E3:24:FD:69:04:7A:B2:4C:E4:B0:7A:ED:CA:78:10:90:5C:7A:44:EB
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584DC29AEE6C009DD394B254BA00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/089df9ae-2f5e-3c3d-aaa5-23952fdcddf4.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     11105
IP address blocks:        207.23.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:ee:6c:00:9d:d3:94:b2:54:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=00aedeb2-8512-4f74-8484-baa5ee9b74d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:64:16:81:2e:b4:91:3a:bf:12:c2:5d:10:92:
                    85:90:ff:af:60:4b:fa:08:de:ac:76:ae:f8:f3:70:
                    99:99:e5:99:32:5d:21:ea:e8:5d:96:4e:04:18:11:
                    31:0d:95:2a:aa:7f:5f:e2:93:9a:6f:c3:e1:95:b9:
                    60:be:a5:fc:c5:e9:f5:b8:9b:9e:7a:1a:c6:53:a6:
                    55:a3:9c:f4:aa:fa:ac:d5:3c:db:03:68:24:5d:08:
                    cd:c3:35:a3:cb:b9:6a:4e:de:ae:5f:c3:32:80:82:
                    76:e0:85:40:61:fc:f1:b0:b8:5c:82:4f:d7:de:95:
                    a9:69:89:ee:19:a3:e4:d7:59:48:31:28:63:a3:80:
                    ad:17:33:8f:8b:67:19:14:41:95:0e:54:e2:8e:cc:
                    d3:e0:d6:4a:25:bc:b9:ca:53:31:b8:e8:3c:9b:3d:
                    91:6c:24:04:b5:c3:78:88:dd:15:53:60:2f:13:2e:
                    55:74:75:c2:16:ec:a6:3d:c3:d8:ef:a1:3e:31:e1:
                    6d:d2:bb:11:37:e0:d7:71:c1:65:cc:57:c3:75:79:
                    c1:a6:f6:ea:b7:97:ea:0b:e9:f1:44:8e:47:94:56:
                    3d:f0:ff:15:34:b9:32:26:f5:1b:a1:c8:96:05:f0:
                    e1:d8:12:45:44:37:2c:d0:8d:de:fe:67:6e:65:e8:
                    f1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:24:FD:69:04:7A:B2:4C:E4:B0:7A:ED:CA:78:10:90:5C:7A:44:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/089df9ae-2f5e-3c3d-aaa5-23952fdcddf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:ad:15:71:f2:f0:f2:51:e4:f4:a2:3f:7f:b8:9f:ef:76:a0:
         42:2b:1c:e4:b1:e0:89:cf:cd:77:b0:2c:35:dc:6c:2a:bb:d6:
         7b:63:ab:50:79:62:83:56:99:19:e5:01:de:f6:ed:05:38:e3:
         cf:b9:cb:24:20:83:85:25:3c:ef:92:97:cc:67:63:d2:1b:b4:
         f4:8f:3f:e9:24:8e:06:51:53:56:a7:7c:1c:e8:29:34:20:73:
         af:d6:9e:be:ca:a7:e0:15:ec:7b:44:65:42:41:a1:9f:8b:8f:
         88:3a:a9:8f:e0:06:41:6d:2b:81:9c:4d:e1:5e:e3:39:66:2d:
         ea:3c:84:79:dd:e1:de:53:38:ab:04:44:96:30:8b:c3:85:11:
         b7:ba:06:b3:94:4b:27:e0:5a:cb:30:a1:b8:2d:a5:29:28:05:
         a1:a3:38:64:08:81:15:a9:14:35:44:07:59:70:a7:7c:64:ce:
         00:68:5a:7a:af:f4:89:40:9b:d8:d4:a9:f0:46:b4:59:04:2c:
         5e:8a:55:2b:4b:d1:d5:4a:7f:62:f8:ee:f6:ab:59:3d:37:9d:
         f3:f7:6a:b8:e4:56:73:33:5c:2a:a1:11:94:b9:c4:e6:6c:a1:
         44:65:33:8b:5c:2f:64:1b:9c:89:a3:39:3d:6a:a6:6c:cc:0c:
         a9:7e:b3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:05:03 2026 by rpki-client