Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/67b30145-3947-3e20-824d-141c13f806de.roa
File:                     67b30145-3947-3e20-824d-141c13f806de.roa (raw, json)
Hash identifier:          KUYWLGyC1deivq7Zkepfz6sKlY9SpotF1Bc6CyoFDvY=
Subject key identifier:   BC:63:3F:A4:0E:A3:E5:A6:F4:DD:C7:2E:F4:7D:C0:65:5D:B0:75:F4
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D5E1A694D2959D8A35F5B8A50
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/67b30145-3947-3e20-824d-141c13f806de.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     394089
IP address blocks:        134.231.240.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:69:4d:29:59:d8:a3:5f:5b:8a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=f9938b21-cdb6-4faf-8a08-2399dc040b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b2:8a:e9:d3:3c:55:50:8d:b8:a2:f6:8d:3b:
                    f9:62:4a:64:4f:4a:f3:2e:d8:72:a5:97:7d:1b:f2:
                    7b:b7:15:80:d4:4e:cc:db:28:23:c8:f4:14:e3:31:
                    67:c2:57:02:7f:41:89:1a:14:aa:8d:2d:b8:e4:81:
                    eb:8e:24:54:34:e7:5c:d3:d2:13:7b:89:82:8e:b7:
                    41:19:92:c7:68:56:5a:87:98:7c:ed:dd:d8:da:9f:
                    b4:25:0f:03:4b:1e:36:9c:58:de:0b:d2:7b:60:e6:
                    15:be:8b:aa:72:32:e4:13:3d:ca:ca:95:b5:da:4c:
                    e2:8e:f2:1a:28:c0:06:1e:31:0b:da:e8:07:a1:03:
                    d0:44:6b:0f:a0:23:87:57:53:91:3e:6e:5b:85:28:
                    b6:5c:81:d4:2b:58:71:36:64:cd:52:b7:b8:8f:26:
                    5e:4d:ed:b3:b0:1c:a2:6c:d8:88:f6:67:78:a3:37:
                    09:60:b6:b0:eb:ea:91:16:e7:90:96:66:06:d1:77:
                    d2:d2:05:e9:a2:07:36:fe:04:32:ca:e9:d0:6c:0a:
                    c9:e3:bc:1a:45:aa:28:51:76:25:a6:aa:5b:e9:39:
                    f8:c7:77:c8:96:95:94:dc:bb:cf:84:e6:52:7a:f6:
                    0f:28:9a:c5:59:31:07:0d:45:b6:be:5b:f0:5a:b3:
                    e2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:63:3F:A4:0E:A3:E5:A6:F4:DD:C7:2E:F4:7D:C0:65:5D:B0:75:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/67b30145-3947-3e20-824d-141c13f806de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.231.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:64:26:de:13:c7:a7:68:bd:ae:6a:9f:5b:3b:d6:c9:23:29:
         35:fa:ae:75:27:8a:c9:ab:76:f2:e9:a5:a4:98:65:c7:ca:f9:
         0d:bb:67:e5:22:6b:df:02:23:7c:9f:64:f1:27:84:7e:a5:32:
         9a:97:ee:76:d6:74:0c:1f:69:82:37:30:f6:f0:e7:94:0d:73:
         15:5c:5f:95:bc:21:74:41:bf:44:ea:a4:9d:96:55:aa:10:6d:
         bb:b4:f3:77:68:63:36:7a:31:04:c4:77:15:03:09:ef:8b:66:
         79:4c:65:53:45:dc:66:ae:a1:99:e2:71:6b:6e:e2:51:20:15:
         b5:b7:58:45:5c:2f:64:73:ff:06:21:5c:f8:18:3d:70:8f:af:
         4c:23:ac:6e:75:05:ec:db:33:f5:7a:90:7b:2d:fb:89:0b:3b:
         ce:cf:6d:88:c5:31:56:5b:84:db:23:ae:e2:f9:44:bf:32:44:
         04:ce:3b:8e:46:ce:2e:2d:da:f6:27:48:38:24:3a:f4:ca:ae:
         00:0a:ae:40:ef:bd:f2:f9:42:23:c8:0e:a5:f8:89:3f:91:bc:
         d7:96:e8:38:48:b8:56:a9:f2:50:1c:3d:bd:f3:99:d9:fd:44:
         d9:d8:d2:9e:8f:57:48:1a:3e:8e:ff:51:80:34:19:b2:3d:f0:
         d8:51:ea:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:34:11 2026 by rpki-client