Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6f8b9a23-274c-33bd-a25f-aaa5c30d05ac.roa
File:                     6f8b9a23-274c-33bd-a25f-aaa5c30d05ac.roa (raw, json)
Hash identifier:          rxN7Qv6p+23m2QejLUKniapm7yR6a+U8cVZrR1j9RkI=
Subject key identifier:   DA:4D:89:3B:A2:86:E9:9B:49:D5:8C:06:AD:40:55:3C:32:1D:ED:5C
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584CDC6761B5AEB020DEC42D4300
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6f8b9a23-274c-33bd-a25f-aaa5c30d05ac.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     396982
IP address blocks:        144.125.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:61:b5:ae:b0:20:de:c4:2d:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=79d2a262-e5ed-423c-a37b-3bd6cca719a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:ad:25:9f:d4:72:f1:a4:f1:dd:4f:24:73:a6:
                    07:f0:1f:3b:63:f5:a0:aa:f4:14:9a:9a:02:74:ef:
                    db:fd:36:55:b7:71:e3:9c:c4:6f:f0:ca:5d:90:0d:
                    c0:ec:c4:29:88:94:0a:9b:fc:ca:35:62:25:44:ef:
                    ae:51:a0:77:49:38:58:b1:a5:69:a2:8d:9d:41:0c:
                    84:c9:31:3d:ac:87:78:c1:a4:9f:93:30:25:51:0b:
                    92:70:17:09:05:70:83:c5:e1:26:78:8f:33:3c:4c:
                    0d:bb:53:a8:1d:84:5c:5b:f4:3c:21:3e:ef:bd:89:
                    46:56:89:a6:c6:e2:cc:48:01:29:37:77:15:c7:62:
                    99:41:00:70:78:33:5d:ef:02:c4:18:04:2b:f9:93:
                    0b:e7:e3:a1:f5:30:98:12:1c:ba:f6:46:8c:6d:27:
                    f0:56:04:96:57:af:ba:b7:66:69:cb:54:d1:c1:ad:
                    4f:a2:20:92:4e:7c:90:0f:13:8f:b4:01:07:56:34:
                    f2:a5:79:7f:3d:4c:7c:89:de:5b:84:4a:ae:1a:00:
                    cd:cf:65:0b:32:cb:f1:c9:21:77:26:93:a7:4b:5c:
                    af:81:30:c8:20:d6:4f:1e:08:6b:70:b9:b2:ab:d0:
                    9f:46:b8:b5:76:67:da:01:af:32:c9:c7:fe:74:0e:
                    1c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4D:89:3B:A2:86:E9:9B:49:D5:8C:06:AD:40:55:3C:32:1D:ED:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6f8b9a23-274c-33bd-a25f-aaa5c30d05ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:bb:eb:a8:eb:2e:98:b2:a9:a8:7a:5b:51:e9:51:db:36:ca:
         ca:75:06:d5:e3:d8:a2:a3:e0:4a:82:2c:31:18:0a:2b:36:92:
         dd:23:c0:e4:3d:3a:29:0d:32:24:25:a6:f7:c2:63:8d:9c:16:
         35:d0:6d:c7:76:c6:c2:ca:d1:e8:1e:32:ef:49:b1:83:59:be:
         2f:ea:a0:1c:8e:f3:86:ae:2f:e7:1c:c2:93:87:f1:e7:a7:b4:
         95:7f:f3:df:4b:bf:73:44:77:00:05:2f:13:74:5f:50:85:cc:
         9c:10:84:a0:c9:02:82:9b:fd:b8:ed:18:2f:c3:98:b2:6a:fe:
         be:81:1b:73:ad:87:a1:ea:43:fc:93:3c:55:de:64:80:6b:45:
         3a:e5:7c:fe:78:61:f4:c6:cd:cf:6b:d4:77:e2:ea:25:36:8a:
         d1:00:c5:42:79:9d:e4:ec:a5:b3:59:70:fc:b9:f9:b5:cd:b6:
         ee:e5:e0:4c:9b:d2:22:cc:a6:5c:c0:3a:19:75:d4:0b:9e:76:
         1a:56:84:71:f6:ca:8a:86:c5:fd:55:45:8e:a9:18:e1:e7:5e:
         82:91:a6:03:50:6d:95:63:8a:26:f7:e6:23:f1:f4:0b:37:54:
         a1:0a:8d:8a:d2:e9:e1:9b:73:4d:62:eb:6a:03:02:f5:ab:98:
         ec:43:e2:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ2G1rrAg3sQtQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk
NzlkMmEyNjItZTVlZC00MjNjLWEzN2ItM2JkNmNjYTcxOWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+a0ln9Ry8aTx3U8kc6YH8B87Y/WgqvQUmpoC
dO/b/TZVt3HjnMRv8MpdkA3A7MQpiJQKm/zKNWIlRO+uUaB3SThYsaVpoo2dQQyE
yTE9rId4waSfkzAlUQuScBcJBXCDxeEmeI8zPEwNu1OoHYRcW/Q8IT7vvYlGVomm
xuLMSAEpN3cVx2KZQQBweDNd7wLEGAQr+ZML5+Oh9TCYEhy69kaMbSfwVgSWV6+6
t2Zpy1TRwa1PoiCSTnyQDxOPtAEHVjTypXl/PUx8id5bhEquGgDNz2ULMsvxySF3
JpOnS1yvgTDIINZPHghrcLmyq9CfRri1dmfaAa8yycf+dA4crQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNpNiTuihumbSdWMBq1AVTwyHe1cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvNmY4YjlhMjMtMjc0Yy0z
M2JkLWEyNWYtYWFhNWMzMGQwNWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkH1wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIi766jrLpiyqah6W1HpUds2ysp1BtXj2KKj4EqCLDEYCis2kt0jwOQ9
OikNMiQlpvfCY42cFjXQbcd2xsLK0egeMu9JsYNZvi/qoByO84auL+ccwpOH8een
tJV/899Lv3NEdwAFLxN0X1CFzJwQhKDJAoKb/bjtGC/DmLJq/r6BG3Oth6HqQ/yT
PFXeZIBrRTrlfP54YfTGzc9r1Hfi6iU2itEAxUJ5neTspbNZcPy5+bXNtu7l4Eyb
0iLMplzAOhl11AuedhpWhHH2yoqGxf1VRY6pGOHnXoKRpgNQbZVjiib35iPx9As3
VKEKjYrS6eGbc01i62oDAvWrmOxD4oQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:47:27 2026 by rpki-client