Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/30b79f97-498b-3aef-8e52-d92064979d63.roa
File:                     30b79f97-498b-3aef-8e52-d92064979d63.roa (raw, json)
Hash identifier:          YMLNy+B8snp9qbaKnoC7BTJt3ngf816rSL/b+4JKI6U=
Subject key identifier:   63:2D:DF:CC:D8:81:26:F1:32:72:0C:C7:E6:14:D7:70:EE:A3:1A:EE
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584E1CDEE20C7DFC16923DC4BA60
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/30b79f97-498b-3aef-8e52-d92064979d63.roa
Signing time:             Tue 09 Jun 2026 09:00:13 +0000
ROA not before:           Tue 09 Jun 2026 09:00:13 +0000
ROA not after:            Mon 07 Sep 2026 09:00:13 +0000
asID:                     394089
IP address blocks:        144.125.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1c:de:e2:0c:7d:fc:16:92:3d:c4:ba:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jun  9 09:00:13 2026 GMT
            Not After : Sep  7 09:00:13 2026 GMT
        Subject: CN=d8d9e16a-6dba-4fe7-bcfa-a0b9b9df3e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ee:c1:b3:9f:8c:9b:89:61:a2:06:1b:13:b6:
                    f1:e5:64:2c:f3:2a:85:2a:8f:23:bf:63:0c:5f:a8:
                    b8:5e:06:4a:e5:48:b3:79:a2:3a:66:02:87:25:01:
                    fa:d9:16:89:94:b5:8c:df:34:00:4e:41:fc:d4:af:
                    c0:a2:d6:5c:7d:89:d4:49:ba:1f:e0:5b:32:23:b3:
                    d6:3f:54:96:48:d4:cd:35:b0:3f:c2:a2:20:4a:f5:
                    3e:e1:c9:32:41:89:b0:c0:f4:8e:82:48:29:a1:74:
                    57:3b:5e:36:46:5a:b1:f0:8e:0e:bb:b5:11:fe:3f:
                    0b:94:9a:08:43:84:5e:5f:e1:44:d8:ee:4b:e6:38:
                    08:5a:6f:26:7c:ef:b4:52:bb:bd:4c:29:28:d9:71:
                    f7:37:04:c1:cd:0f:c8:19:73:fc:22:f3:6d:ba:02:
                    74:4c:6d:4e:d5:75:ca:13:a8:2c:a1:6e:16:60:21:
                    9b:68:2d:c9:8d:b6:42:e2:fd:0d:53:df:19:20:18:
                    e5:e0:98:20:fa:ef:aa:7d:65:09:d3:a2:d0:9e:5d:
                    6c:bf:52:90:bf:d8:d6:5c:15:82:4a:18:ca:59:72:
                    cc:44:8b:34:5a:e0:a9:3c:e4:c6:eb:6e:fa:a7:71:
                    f4:2f:8d:16:80:ac:4b:f5:a7:ed:ec:7a:f9:be:4a:
                    ed:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2D:DF:CC:D8:81:26:F1:32:72:0C:C7:E6:14:D7:70:EE:A3:1A:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/30b79f97-498b-3aef-8e52-d92064979d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:7c:a6:9b:12:c3:cc:20:f4:24:56:58:a3:82:43:8b:19:40:
         cc:82:bd:fe:54:3f:94:99:3d:65:1b:26:a8:b1:42:db:a6:29:
         68:e9:f8:a2:20:76:c8:99:cf:96:50:9f:27:7f:1b:6a:8c:a8:
         9a:f7:ad:9c:ba:f1:0a:23:57:bb:2d:68:0b:b1:b0:a2:99:cc:
         d7:69:2c:c1:34:70:dd:75:99:e8:19:10:cf:f3:1b:e8:22:c4:
         55:49:fb:09:f2:f0:d4:5f:56:b6:ca:1c:3e:4b:70:b8:e9:84:
         fc:65:59:eb:0b:9c:8a:7e:fb:67:37:8d:e2:5b:cc:2e:1b:76:
         f7:2d:c8:a0:85:e1:f1:fd:26:2d:b7:cb:d0:31:2e:3a:4b:7c:
         a8:1c:8a:68:3d:ae:05:2d:6a:e8:1e:b4:cb:ba:e5:60:5e:be:
         e9:5a:fa:7d:d7:99:b1:7d:77:17:d1:ca:45:a6:7b:60:72:a7:
         26:55:2b:d1:e6:88:b4:82:0d:4b:fd:a6:8a:d8:fb:95:87:85:
         28:58:74:4d:5c:da:61:6b:7a:66:57:b9:2b:5b:b2:f8:d6:95:
         f2:33:a7:32:7e:2d:4a:58:30:1c:69:44:d4:8a:9a:84:7d:60:
         38:30:c1:c7:da:23:58:fb:5c:bd:09:37:35:c2:e4:43:e1:c5:
         33:c6:9e:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4c3uIMffwWkj3EumAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI2MDYwOTA5MDAxM1oXDTI2MDkwNzA5MDAxM1owLzEtMCsGA1UEAxMk
ZDhkOWUxNmEtNmRiYS00ZmU3LWJjZmEtYTBiOWI5ZGYzZTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO7Bs5+Mm4lhogYbE7bx5WQs8yqFKo8jv2MM
X6i4XgZK5UizeaI6ZgKHJQH62RaJlLWM3zQATkH81K/AotZcfYnUSbof4FsyI7PW
P1SWSNTNNbA/wqIgSvU+4ckyQYmwwPSOgkgpoXRXO142Rlqx8I4Ou7UR/j8LlJoI
Q4ReX+FE2O5L5jgIWm8mfO+0Uru9TCko2XH3NwTBzQ/IGXP8IvNtugJ0TG1O1XXK
E6gsoW4WYCGbaC3JjbZC4v0NU98ZIBjl4Jgg+u+qfWUJ06LQnl1sv1KQv9jWXBWC
ShjKWXLMRIs0WuCpPOTG6276p3H0L40WgKxL9aft7Hr5vkrtYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGMt38zYgSbxMnIMx+YU13DuoxruMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMzBiNzlmOTctNDk4Yi0z
YWVmLThlNTItZDkyMDY0OTc5ZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkH3gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIF8ppsSw8wg9CRWWKOCQ4sZQMyCvf5UP5SZPWUbJqixQtumKWjp+KIg
dsiZz5ZQnyd/G2qMqJr3rZy68QojV7staAuxsKKZzNdpLME0cN11megZEM/zG+gi
xFVJ+wny8NRfVrbKHD5LcLjphPxlWesLnIp++2c3jeJbzC4bdvctyKCF4fH9Ji23
y9AxLjpLfKgcimg9rgUtaugetMu65WBevula+n3XmbF9dxfRykWme2BypyZVK9Hm
iLSCDUv9porY+5WHhShYdE1c2mFremZXuStbsvjWlfIzpzJ+LUpYMBxpRNSKmoR9
YDgwwcfaI1j7XL0JNzXC5EPhxTPGnts=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:56:01 2026 by rpki-client