Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/09e34663-a15a-36ad-a77c-f96fd301f414.roa
File:                     09e34663-a15a-36ad-a77c-f96fd301f414.roa (raw, json)
Hash identifier:          qvXux3xpWsr6zKGHx2e24DbNeC9YRdxi+EPSnWYD52Y=
Subject key identifier:   34:70:68:2A:30:70:29:7E:7F:05:1F:CD:BB:D9:DF:C6:81:65:F4:8C
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D04E2317BF1075DCAD38A4B00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/09e34663-a15a-36ad-a77c-f96fd301f414.roa
Signing time:             Sun 01 Mar 2026 02:00:31 +0000
ROA not before:           Sun 01 Mar 2026 02:00:31 +0000
ROA not after:            Sat 30 May 2026 01:00:31 +0000
asID:                     396982
IP address blocks:        153.72.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e2:31:7b:f1:07:5d:ca:d3:8a:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar  1 02:00:31 2026 GMT
            Not After : May 30 01:00:31 2026 GMT
        Subject: CN=143a674e-d583-4291-a5a5-1322951845cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:aa:ff:a5:33:f2:da:14:95:33:57:3e:09:8e:
                    c7:21:de:97:25:9d:02:de:d4:ce:50:4d:22:12:56:
                    5f:51:45:ba:6a:40:77:ba:27:27:2d:bf:06:83:a7:
                    35:48:ff:54:a6:81:26:cd:5d:d2:19:7b:5b:4a:72:
                    9a:b3:3d:b1:62:ac:b0:ea:4f:be:30:9b:f4:c5:7f:
                    a2:1f:4d:29:4e:35:64:de:b7:bc:a5:91:59:34:21:
                    eb:77:0f:5d:f7:52:ce:34:5e:79:a9:31:3c:6d:a7:
                    1b:9d:dd:da:62:05:64:41:34:a0:3e:0c:02:27:95:
                    f4:e8:f9:75:d3:15:f4:56:8b:51:35:a7:1a:0a:84:
                    02:ef:19:02:3b:1e:2d:5f:70:96:71:1d:37:11:1e:
                    a3:39:68:a3:a5:ea:3a:9c:4a:57:b1:c5:c1:c5:2b:
                    c9:9d:a3:01:9f:8c:0a:49:6a:c4:9c:d3:6c:a3:94:
                    87:e3:2b:e5:da:83:af:f9:26:35:35:16:33:be:e4:
                    9a:81:e1:25:62:1f:fb:18:a3:8a:45:8e:d0:70:f2:
                    16:76:c0:49:be:a2:8f:f1:0a:a1:20:24:ff:10:b2:
                    2d:ae:84:ba:f2:c0:05:c9:56:95:0d:3d:9d:05:57:
                    eb:b0:f1:6e:22:30:e1:86:43:b6:17:3a:4c:ae:8e:
                    20:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:70:68:2A:30:70:29:7E:7F:05:1F:CD:BB:D9:DF:C6:81:65:F4:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/09e34663-a15a-36ad-a77c-f96fd301f414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.72.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:9b:c3:9f:76:09:d1:82:c2:d4:db:7a:1c:28:b3:15:1a:82:
         3c:18:15:35:67:0b:92:78:9f:cd:01:03:e5:f6:23:8b:f8:96:
         fc:3b:cd:98:5f:e3:1d:69:26:bf:a0:49:34:b3:b1:e5:11:2d:
         34:48:d7:ce:3a:85:68:dd:a1:35:73:c6:5f:bb:d5:d5:ea:51:
         4e:9d:b7:eb:1e:a7:30:ca:dd:eb:07:96:57:59:6d:fd:15:40:
         8a:f3:1d:6d:43:f5:44:80:b4:2e:11:19:e2:12:71:df:ed:2e:
         50:d7:00:f3:11:40:d7:21:b0:eb:f4:bb:12:da:7d:81:4e:2b:
         4a:e5:ae:2d:d0:48:67:3c:3a:2b:20:60:85:d7:de:36:17:d9:
         01:44:24:ee:6c:73:95:3f:8d:3d:8b:6c:76:43:55:93:56:0f:
         c7:6e:8b:85:c8:7c:d7:74:6c:27:8c:0f:86:32:da:77:fb:51:
         61:63:a0:aa:45:86:f5:0b:b6:52:b9:31:15:ba:74:8f:5e:a7:
         62:1a:56:d6:65:de:fd:48:64:1c:68:86:88:d5:2d:3e:5e:5d:
         0d:db:b0:1e:91:68:f8:8f:ea:0d:54:fc:b3:3a:82:31:c2:48:
         13:2e:b5:f9:e7:57:c9:bf:94:b7:5c:65:d0:49:db:25:1b:b6:
         2b:91:6b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:29:46 2026 by rpki-client