Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/41df949b-c3a4-3114-80d7-6a950c47ac20.roa
File:                     41df949b-c3a4-3114-80d7-6a950c47ac20.roa (raw, json)
Hash identifier:          7csk+g2YdfL+cpmGLCxH1joB4VHTte7TxYNbzfdgn4k=
Subject key identifier:   92:B3:95:8A:FB:7B:C6:23:A7:A0:8B:9A:12:98:CB:CA:7D:39:FA:6A
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584CBF17203EA2B29FB7E2633B40
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/41df949b-c3a4-3114-80d7-6a950c47ac20.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     396982
IP address blocks:        134.231.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:20:3e:a2:b2:9f:b7:e2:63:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=497c9001-e271-45c0-b949-0b63f4e3a2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f1:8e:e3:0c:f3:0b:ea:af:66:c3:f4:fd:52:
                    86:cc:2c:21:54:1f:58:37:d6:40:7d:c2:10:f5:8f:
                    d1:6b:11:1e:08:1f:11:fe:0e:8e:9f:6d:0b:c9:e1:
                    17:ca:47:64:7c:41:c9:07:99:3f:37:f5:5b:85:60:
                    14:2d:1b:3a:5d:bf:3b:e0:2c:97:77:b8:de:7a:c9:
                    b2:91:2b:8e:b6:ba:87:9b:8a:4c:a7:65:0e:bb:ec:
                    f2:c7:a3:82:f2:9e:7f:39:df:ee:a0:3f:6d:da:fb:
                    72:29:76:ad:2e:5c:c7:26:8c:33:68:ec:21:9f:2c:
                    d7:0b:f9:4b:2c:d1:1f:86:d3:b8:4e:64:ad:b9:04:
                    5d:d9:95:86:dd:b6:4d:95:4c:86:eb:bd:97:25:fe:
                    d1:d3:63:1d:08:09:b2:13:17:9d:12:aa:55:e5:29:
                    7e:08:35:42:e2:bc:12:4a:bb:4b:54:cf:92:4e:b4:
                    bb:f6:61:56:64:65:fa:b5:a6:17:42:51:63:2c:f3:
                    5d:aa:6d:05:2f:6f:2f:74:9a:3a:d7:47:59:9a:8e:
                    53:da:ca:c0:83:51:a3:9e:88:e7:2c:d6:dc:a6:ff:
                    b5:45:e4:94:04:68:e9:0e:fe:1d:d5:44:fd:5b:1c:
                    d5:31:ac:e8:52:20:cc:a8:75:0c:34:ba:ee:f0:a6:
                    ad:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B3:95:8A:FB:7B:C6:23:A7:A0:8B:9A:12:98:CB:CA:7D:39:FA:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/41df949b-c3a4-3114-80d7-6a950c47ac20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.231.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:47:9d:9f:0e:a0:9f:2d:77:d7:fd:a5:14:20:ac:47:5f:41:
         d2:7a:e7:9b:07:ab:e3:02:e3:3f:3f:f3:6a:10:66:07:9a:a7:
         93:1f:4d:89:8e:4e:04:b4:7a:76:59:e8:2e:7b:84:75:0e:77:
         17:86:e6:9f:e1:16:40:6e:e5:1b:c5:30:7b:e6:3c:2e:5d:03:
         a9:78:41:b0:7d:8f:cf:cf:27:78:31:b1:d9:e0:52:cf:7d:45:
         0d:89:5e:52:71:df:7d:54:87:ff:c7:89:a3:19:e7:92:e4:2f:
         8e:32:eb:ee:47:4d:59:85:e9:17:c9:c6:b7:18:db:f0:d1:8c:
         47:b7:6b:e7:3c:1c:53:5f:0a:13:9d:41:f1:2d:c7:68:e8:52:
         49:33:5d:20:28:c5:69:0f:7e:dd:64:1c:ac:f3:58:eb:f2:51:
         e5:10:60:34:d8:08:03:18:30:29:94:27:e1:61:f7:da:82:97:
         a7:71:75:26:c1:28:29:5f:2d:a3:a3:80:7d:6f:04:a6:ac:ec:
         25:87:99:56:d4:4d:93:57:52:ba:67:8c:80:28:fb:df:ae:74:
         07:ab:e9:6f:f3:0b:52:15:e3:02:40:21:e8:8a:66:31:3e:42:
         f9:10:f5:86:ea:62:5a:f3:17:e3:8a:6c:7b:74:ec:0a:84:91:
         4b:95:bb:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy/FyA+orKft+JjO0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk
NDk3YzkwMDEtZTI3MS00NWMwLWI5NDktMGI2M2Y0ZTNhMmQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvGO4wzzC+qvZsP0/VKGzCwhVB9YN9ZAfcIQ
9Y/RaxEeCB8R/g6On20LyeEXykdkfEHJB5k/N/VbhWAULRs6Xb874CyXd7jeesmy
kSuOtrqHm4pMp2UOu+zyx6OC8p5/Od/uoD9t2vtyKXatLlzHJowzaOwhnyzXC/lL
LNEfhtO4TmStuQRd2ZWG3bZNlUyG672XJf7R02MdCAmyExedEqpV5Sl+CDVC4rwS
SrtLVM+STrS79mFWZGX6taYXQlFjLPNdqm0FL28vdJo610dZmo5T2srAg1Gjnojn
LNbcpv+1ReSUBGjpDv4d1UT9WxzVMazoUiDMqHUMNLru8Kat/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJKzlYr7e8Yjp6CLmhKYy8p9OfpqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvNDFkZjk0OWItYzNhNC0z
MTE0LTgwZDctNmE5NTBjNDdhYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhuf+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKpHnZ8OoJ8td9f9pRQgrEdfQdJ655sHq+MC4z8/82oQZgeap5MfTYmO
TgS0enZZ6C57hHUOdxeG5p/hFkBu5RvFMHvmPC5dA6l4QbB9j8/PJ3gxsdngUs99
RQ2JXlJx331Uh//HiaMZ55LkL44y6+5HTVmF6RfJxrcY2/DRjEe3a+c8HFNfChOd
QfEtx2joUkkzXSAoxWkPft1kHKzzWOvyUeUQYDTYCAMYMCmUJ+Fh99qCl6dxdSbB
KClfLaOjgH1vBKas7CWHmVbUTZNXUrpnjIAo+9+udAer6W/zC1IV4wJAIeiKZjE+
QvkQ9YbqYlrzF+OKbHt07AqEkUuVu/w=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:48:21 2026 by rpki-client