Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3af9cfd0-042d-3289-b4a9-a08a847f2052.roa
File:                     3af9cfd0-042d-3289-b4a9-a08a847f2052.roa (raw, json)
Hash identifier:          xSDux4EsvLtYzs+z+xJuP/88/FN0VgZfM8/LecbWL/4=
Subject key identifier:   E0:45:FA:31:D3:CC:40:C1:3E:9D:1C:85:4B:7C:B7:2F:E0:E3:0D:85
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D8695378AF8E0C6B2F0640380
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3af9cfd0-042d-3289-b4a9-a08a847f2052.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     396982
IP address blocks:        134.231.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:37:8a:f8:e0:c6:b2:f0:64:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=a1228025-904d-444d-9c8d-c7648c892dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:26:3d:71:74:c9:aa:9e:52:a6:70:30:20:e6:
                    ac:a5:c2:ff:1e:45:c2:56:3d:27:cc:ae:87:6f:08:
                    5e:e2:70:20:8a:76:3d:3b:21:70:38:0b:81:1a:7e:
                    c9:5c:5a:36:e9:4e:f3:7a:7b:5a:9f:4a:3a:0b:b2:
                    bc:53:f8:80:1a:20:46:53:34:f0:85:68:9c:2c:6d:
                    6a:c7:89:75:54:c5:1f:9d:92:ce:5a:e2:05:5f:31:
                    05:38:24:25:a9:75:cc:4f:7d:b6:62:3d:06:fc:a8:
                    6c:8f:7a:c3:d6:ec:74:98:f3:49:00:d5:c4:00:64:
                    b3:a0:b0:cf:b1:b3:45:84:7d:8f:0f:3f:76:3e:57:
                    0f:21:72:87:d9:14:b1:40:80:5c:6a:72:8c:0a:ee:
                    68:50:66:40:d7:ab:77:fb:b4:29:3f:8c:5f:41:ec:
                    be:07:68:4c:4a:dd:12:2f:dc:43:c0:c6:5f:df:cb:
                    06:b5:eb:68:d4:95:60:eb:b3:71:ae:65:0f:63:19:
                    31:d9:34:17:09:69:25:20:24:d6:b1:f9:33:49:dd:
                    6f:ff:c8:2f:5b:f8:f4:bc:aa:51:61:51:ae:3d:d0:
                    04:88:ec:08:3d:15:75:a4:d6:bf:a5:a1:3c:81:eb:
                    e3:4d:ee:6b:76:58:15:c4:62:26:2b:45:1a:12:35:
                    ae:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:45:FA:31:D3:CC:40:C1:3E:9D:1C:85:4B:7C:B7:2F:E0:E3:0D:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3af9cfd0-042d-3289-b4a9-a08a847f2052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.231.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:0b:d9:67:46:52:e0:d8:79:4d:b2:e8:ca:fe:69:3f:85:f3:
         23:f6:cb:da:a3:ed:28:bf:55:91:bd:62:cd:44:1e:2e:d8:4d:
         ba:d1:66:a6:f2:20:15:8c:42:b5:38:cc:d2:b2:61:30:9b:4b:
         cb:7c:d5:23:3c:3d:56:e4:fd:46:29:84:06:88:71:3e:1e:1d:
         5e:51:5a:54:c1:6e:ea:70:58:57:16:fe:a9:67:88:96:d0:1f:
         a9:37:b8:31:8e:6e:ca:8b:ee:6c:98:29:33:00:86:69:66:3a:
         cb:91:1f:f0:e4:d4:b7:4b:6b:75:b6:ff:a1:90:6a:3e:52:75:
         f1:5d:96:f6:c3:aa:52:be:6c:b8:31:d6:e0:e0:b9:42:e5:2e:
         08:13:da:69:5a:68:38:a9:14:5a:6c:c7:1e:d5:60:72:02:bd:
         99:85:a7:1c:08:73:4b:e8:b5:96:24:25:6b:4e:e2:35:bf:9d:
         e2:cc:5a:01:59:2e:30:ea:4a:7c:c7:91:60:0c:d4:22:03:52:
         cc:38:85:be:2a:fb:3d:da:dc:1c:14:90:f9:5e:70:15:b2:84:
         ce:49:4f:79:5d:05:69:45:f9:02:a2:c2:79:a5:3a:41:15:30:
         64:85:8c:b9:cd:b7:84:c8:76:d2:56:8b:c5:b2:56:89:e1:ba:
         d4:e2:af:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:03:56 2026 by rpki-client