Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/5d760108-eb1a-3a8b-bf12-37d162719713.roa
File:                     5d760108-eb1a-3a8b-bf12-37d162719713.roa (raw, json)
Hash identifier:          hfwdMLI88vvCD+7+ZCzZJVpOD2BP24o4YdIRCdYCiYA=
Subject key identifier:   F0:83:9A:C2:26:98:56:32:0A:96:BA:83:01:AA:89:5B:5D:19:9F:27
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D04E234A88FC1BECD62E70280
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/5d760108-eb1a-3a8b-bf12-37d162719713.roa
Signing time:             Sun 01 Mar 2026 02:00:31 +0000
ROA not before:           Sun 01 Mar 2026 02:00:31 +0000
ROA not after:            Sat 30 May 2026 01:00:31 +0000
asID:                     396982
IP address blocks:        144.125.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e2:34:a8:8f:c1:be:cd:62:e7:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar  1 02:00:31 2026 GMT
            Not After : May 30 01:00:31 2026 GMT
        Subject: CN=53461478-9d7c-4b71-bfdd-35e70501b990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a1:f6:91:0c:f8:0b:f5:df:81:5c:8e:1a:28:
                    aa:f6:5d:51:9c:b7:cd:b9:b9:93:d6:42:df:6f:c5:
                    54:21:48:6d:5f:77:d8:56:fe:3c:ee:b0:76:14:ba:
                    d7:29:17:1a:9d:2f:63:1d:1c:65:2c:31:fa:e7:97:
                    50:2f:d3:bf:0a:e0:ca:48:96:8f:f4:6a:7e:51:29:
                    e8:4a:cc:3d:8a:5c:12:93:bb:5d:8c:59:1d:46:5e:
                    7a:36:81:54:a0:3e:b5:a5:ef:7b:e1:c9:a9:d1:18:
                    3f:86:fd:ee:1e:24:f2:d0:b4:95:97:b7:d2:85:bb:
                    d0:60:98:94:f1:af:bc:88:c3:a3:db:ab:50:84:35:
                    5c:77:7f:ac:41:80:0d:7c:9f:7c:4b:86:6c:5a:85:
                    60:2b:66:cd:c4:c4:5f:ed:69:75:ed:e5:0b:7e:2e:
                    39:a6:9a:e4:ca:a2:1c:18:22:78:22:9f:38:4b:41:
                    33:0b:8c:5c:6e:bc:76:a0:e3:82:26:39:b8:46:a7:
                    93:fb:77:b2:f8:33:bd:9e:35:cd:c9:bc:bc:e6:d2:
                    9d:90:30:f9:e3:90:df:dd:2b:97:c2:c0:d6:74:79:
                    f2:48:e6:08:79:d0:41:5d:65:81:1d:1d:0a:81:72:
                    9d:69:df:a5:d3:2e:ae:df:32:91:5b:8c:14:24:52:
                    c8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:83:9A:C2:26:98:56:32:0A:96:BA:83:01:AA:89:5B:5D:19:9F:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/5d760108-eb1a-3a8b-bf12-37d162719713.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:0f:00:2c:6d:36:9d:fa:8b:11:4f:b5:56:2d:16:18:9f:ab:
         0e:31:69:fa:6a:e6:55:04:4b:7a:10:d9:4e:b4:1c:62:5f:df:
         c2:58:6a:17:b4:4d:f6:6e:c3:de:b1:82:b4:e9:ab:a8:63:10:
         fa:79:60:91:2c:b0:d3:41:8d:0c:c6:c5:c7:03:65:64:ab:69:
         fe:28:88:9b:17:28:d7:26:1d:1c:af:bf:9c:75:95:cb:b8:23:
         5a:3d:4a:bb:88:5a:c8:a9:af:02:10:17:13:8d:a1:a4:db:90:
         ab:2e:98:98:e6:53:e2:c7:5d:94:9a:8f:ae:b1:47:85:9f:5e:
         14:f8:80:2a:09:7f:97:2f:42:72:25:fa:32:54:b8:29:ba:7c:
         a6:ae:9f:bf:97:93:a4:e2:0e:d7:d6:5c:78:90:d9:ca:18:12:
         f0:c0:71:32:10:95:0d:83:78:21:2c:13:79:a1:d0:f0:a5:5b:
         5f:73:6e:bb:b5:41:5b:3e:cf:38:b8:8d:b0:94:cc:20:fa:50:
         e8:4c:b9:83:1c:73:cc:e4:42:5f:82:ae:3e:36:ba:7f:94:24:
         ba:7a:17:69:74:8f:eb:d4:8e:52:f7:c0:d2:4b:a8:c2:96:58:
         cc:7c:7e:81:2d:4d:19:30:83:ca:bc:2f:ee:a5:29:bf:bc:30:
         40:e9:92:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:01 2026 by rpki-client