Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6f7ab555-a850-3f9a-9966-c568643b038f.roa
File:                     6f7ab555-a850-3f9a-9966-c568643b038f.roa (raw, json)
Hash identifier:          8BkUMLFkXgv4WPrKU2SVZpvp1CPIN/F6+3+PUnkJHQk=
Subject key identifier:   DA:95:47:C8:B5:AA:1E:2F:F0:87:E9:6E:A2:7D:47:A4:38:CF:2E:0C
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584CB2872E2E8E4E25D93D9DFA00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6f7ab555-a850-3f9a-9966-c568643b038f.roa
Signing time:             Fri 30 Jan 2026 14:00:40 +0000
ROA not before:           Fri 30 Jan 2026 14:00:40 +0000
ROA not after:            Thu 30 Apr 2026 13:00:40 +0000
asID:                     54538
IP address blocks:        165.85.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:87:2e:2e:8e:4e:25:d9:3d:9d:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jan 30 14:00:40 2026 GMT
            Not After : Apr 30 13:00:40 2026 GMT
        Subject: CN=817eaade-09a0-4d1f-8710-d941b98c5e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cc:f0:a2:ca:2a:43:3e:bb:33:50:e8:be:42:
                    2d:2c:3b:ff:81:d6:d9:ad:ce:b4:b0:d8:12:ce:fa:
                    83:12:8b:2a:76:81:e0:c6:3d:76:6a:62:af:2b:75:
                    dd:91:84:af:35:6c:31:5a:e6:3b:fa:19:3b:e4:1b:
                    f4:af:25:3b:76:04:b7:87:9d:07:a3:8c:b9:1d:bd:
                    40:97:31:99:29:e9:0d:15:4a:5d:b0:7f:dc:62:27:
                    b3:bd:0f:e4:c1:9a:b4:6d:c0:a1:ea:16:5f:b0:c1:
                    4f:48:7b:e2:1b:59:08:9e:4a:12:cb:01:77:d0:39:
                    b0:a6:62:ed:ce:df:97:ac:80:3a:50:6e:6e:b3:9c:
                    5b:b3:4f:d5:54:ac:25:a3:25:b2:c7:80:ca:4e:0b:
                    42:0a:62:6d:6a:b2:07:3d:0b:f7:ad:8b:87:f5:b7:
                    f3:8c:37:9c:38:3f:90:b9:26:31:74:4b:fa:9a:82:
                    4a:00:93:c1:a0:23:e0:4a:da:df:2a:62:c0:5a:3e:
                    05:d8:45:4e:55:2c:22:a1:c0:2d:14:32:0c:09:83:
                    09:eb:b2:40:29:da:32:d2:c9:1b:ef:65:24:b8:ab:
                    e7:02:83:2f:3f:f8:45:1a:70:7e:51:81:8d:ea:27:
                    b0:c4:34:ef:35:38:02:ba:8c:7e:58:3b:10:00:98:
                    f9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:95:47:C8:B5:AA:1E:2F:F0:87:E9:6E:A2:7D:47:A4:38:CF:2E:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6f7ab555-a850-3f9a-9966-c568643b038f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b1:ad:65:35:77:48:15:8a:12:7f:76:40:4d:33:d8:f5:ee:
         0b:b3:5c:51:74:f5:74:af:86:8e:05:35:27:8d:0b:46:35:ff:
         98:71:a6:30:d2:13:bc:da:62:e8:18:b7:1d:ef:f0:82:ae:b7:
         6f:87:29:27:79:b1:58:79:53:b3:bf:e7:e1:cb:25:51:c5:a8:
         c5:2f:b4:8d:d5:8a:cd:5d:2f:06:fe:fc:38:ae:83:17:4f:0e:
         be:8f:64:71:e8:ce:4c:98:bb:f2:07:62:11:29:8c:b4:6f:a6:
         7e:4b:b8:0e:1b:d0:b0:58:59:e0:b2:0b:39:3b:b2:8f:5a:66:
         a0:e8:a9:aa:a6:3e:68:97:af:df:25:c0:8d:dd:12:2a:83:4c:
         e6:53:9d:b2:de:75:ab:3b:a5:42:9d:8b:da:ae:29:f1:8d:9f:
         06:30:01:f3:76:ff:7e:59:c3:a5:96:f0:35:81:70:62:47:78:
         5b:26:ef:91:2f:69:c9:65:1c:87:3b:26:ee:c2:7e:16:d9:a3:
         7c:69:85:e6:da:6e:b8:23:d0:de:94:4f:b0:bd:56:e0:b3:33:
         61:59:24:55:44:9e:28:20:80:33:44:0c:59:f0:fa:c9:92:1d:
         fb:2a:f4:e2:68:2e:2f:47:90:bb:9e:91:7d:6f:60:18:25:d7:
         4a:da:b5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:12:11 2026 by rpki-client