Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4df31f09-6c4e-3c1a-adde-aaadb12d0392.roa
File:                     4df31f09-6c4e-3c1a-adde-aaadb12d0392.roa (raw, json)
Hash identifier:          skYnBtU9NYFJ809NCHlVAJvqKsJXxWB+asbQpp2R25g=
Subject key identifier:   94:3B:37:E5:5B:A7:2F:10:12:15:4A:A7:3D:8A:AB:C9:B7:0C:76:D8
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584F4975A259DA625A325AC20A00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4df31f09-6c4e-3c1a-adde-aaadb12d0392.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     394089
IP address blocks:        130.41.160.0/19 maxlen: 24
                          130.41.192.0/19 maxlen: 24
                          208.127.224.0/21 maxlen: 24
                          208.127.232.0/21 maxlen: 24
                          208.127.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:a2:59:da:62:5a:32:5a:c2:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=09377b4f-eb05-4c5c-b8bf-7b3994b01735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e2:72:c1:37:12:d0:bd:38:b7:b7:74:ff:0f:
                    63:a3:5f:58:19:44:d8:37:5c:60:cb:77:5f:75:40:
                    18:fa:d7:09:e9:93:54:de:80:85:4e:62:09:96:3d:
                    58:44:0c:16:6d:af:c1:23:51:41:44:e4:7b:24:ab:
                    89:e2:53:59:8b:01:8f:cb:22:88:38:6c:dc:b6:4e:
                    f8:d5:71:93:1d:59:fa:d4:3c:46:c7:c9:d1:56:83:
                    0b:c0:0e:4c:4c:d9:38:d0:3d:f5:fe:8d:8d:99:de:
                    5b:f8:37:cc:2e:53:b1:79:3f:b2:2d:15:1f:de:13:
                    3d:a0:6b:3c:ae:d5:8a:78:f4:e9:fb:53:b6:ca:c3:
                    94:32:81:72:e9:5d:3e:77:f8:ea:80:cd:51:cd:5c:
                    f8:52:94:ed:05:e3:ec:73:5d:8b:de:ef:9d:8c:41:
                    04:88:2e:7c:50:c2:57:73:18:dd:a4:b4:04:6d:af:
                    ea:be:b7:c3:43:aa:94:5e:6a:3e:5f:ca:49:83:c5:
                    84:bb:a3:3d:7c:f7:de:30:f4:18:be:33:fb:f3:87:
                    36:4d:d2:29:bf:47:2a:0f:cd:ca:6f:85:91:1f:b5:
                    86:2c:d6:c8:b2:28:61:e6:46:55:f5:a6:43:02:8f:
                    90:48:ca:4f:1d:d6:e6:62:d7:fb:f0:42:57:03:ac:
                    3f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3B:37:E5:5B:A7:2F:10:12:15:4A:A7:3D:8A:AB:C9:B7:0C:76:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/4df31f09-6c4e-3c1a-adde-aaadb12d0392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.41.160.0-130.41.223.255
                  208.127.224.0-208.127.247.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:7c:58:9a:57:80:88:53:f7:3f:9c:b9:56:c3:4b:ff:fd:a9:
         98:4b:b1:7e:cb:01:1a:d3:e5:5c:17:fc:e4:b8:ee:a5:ec:f3:
         50:17:dc:ff:db:ea:65:77:b1:be:3b:9b:44:83:64:c5:23:ba:
         da:73:62:b9:2d:38:6d:fa:9d:d5:09:fc:21:30:fb:f8:4b:94:
         20:50:77:6c:9d:3d:c3:03:59:e0:a2:03:98:2a:a7:20:c7:65:
         b8:ae:29:4c:69:60:d6:22:d5:0f:2f:7f:db:eb:ea:ed:05:75:
         db:18:94:bc:fe:00:49:6a:a1:70:85:83:db:82:1e:3d:6e:fb:
         91:b7:68:a5:5d:58:52:0f:95:7c:56:4b:bf:e6:6f:e6:66:25:
         78:4c:93:dd:d6:c1:74:1b:92:73:69:9f:6d:66:5d:3d:b0:30:
         1c:ad:40:17:6f:e7:53:be:d1:24:ac:22:b4:65:c1:1d:1b:11:
         1d:3d:1a:cb:28:f3:e7:fb:ba:4f:85:6e:95:0a:3d:15:a0:4d:
         35:6a:c6:be:a6:50:52:fc:4a:32:53:38:f4:23:db:df:46:69:
         a9:82:55:af:ac:bf:32:4c:07:fa:dd:4d:a0:9c:31:28:6a:60:
         4b:22:d5:7d:2b:d9:30:e0:fd:7f:7f:d7:c9:00:dc:03:48:2c:
         7b:b5:a4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:24:10 2026 by rpki-client