Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7bde728e-9cc8-3b9b-8f2e-a65a9d0a69c0.roa
File:                     7bde728e-9cc8-3b9b-8f2e-a65a9d0a69c0.roa (raw, json)
Hash identifier:          gqhvSw7PAwO7IyFyvbFAgWCL5xiSFx42s5JgEFBl1lU=
Subject key identifier:   CE:85:B9:BA:86:62:98:DE:3F:B0:3C:39:9D:EA:9F:62:06:18:CD:5B
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D746FD019F9454A4F8134F380
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7bde728e-9cc8-3b9b-8f2e-a65a9d0a69c0.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     396982
IP address blocks:        134.231.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:d0:19:f9:45:4a:4f:81:34:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=887965a4-6aca-41b1-8d55-a6271695e1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:71:32:33:04:db:51:15:31:b9:2c:9c:b8:d0:
                    d2:32:d0:fb:07:4f:1f:01:90:aa:a1:dd:15:73:d3:
                    cd:a1:98:7e:a3:80:94:7f:cd:33:a6:67:1a:56:a8:
                    a4:d7:99:51:1d:03:e5:9c:ae:5b:fa:81:e3:3f:95:
                    a9:62:83:09:ab:33:e5:68:d6:80:61:f8:ec:3f:30:
                    66:63:3d:85:94:01:c9:07:0f:fd:90:a8:96:d3:45:
                    79:f5:e8:e2:1b:99:e7:88:9d:5e:c7:87:57:18:57:
                    3c:d1:93:46:c1:a8:34:11:22:a6:6c:cf:b1:a4:51:
                    0b:2c:dc:3b:db:00:7b:ea:13:2e:c3:3d:d1:49:4a:
                    b8:06:6e:81:4b:1a:17:5c:f9:57:d2:5a:e1:e3:4a:
                    79:b9:af:e4:b3:73:b0:d1:8f:a8:9e:55:20:e5:72:
                    62:a3:3a:e5:0a:b5:92:51:50:95:16:28:d5:29:24:
                    3b:f4:98:a5:f3:c6:01:d1:b0:f7:3a:4b:25:bd:9f:
                    2b:49:6b:83:0a:d7:69:d0:33:f1:78:5a:3c:08:5b:
                    1b:26:59:a8:be:4e:76:a7:3f:60:de:c1:2d:20:ce:
                    bf:c5:1f:2c:3f:be:97:53:22:70:8e:c1:e8:36:bb:
                    41:af:83:74:70:2c:46:0e:73:5c:70:62:51:3a:47:
                    e3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:85:B9:BA:86:62:98:DE:3F:B0:3C:39:9D:EA:9F:62:06:18:CD:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7bde728e-9cc8-3b9b-8f2e-a65a9d0a69c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.231.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:d2:b5:f2:17:65:4e:05:f7:20:6d:b4:64:33:f1:15:93:00:
         dd:87:f5:75:37:09:88:1e:35:59:cd:8a:b8:63:e6:3c:7e:fe:
         ec:a5:2e:40:53:cc:19:26:ea:0c:c7:1c:1d:d9:ac:6b:43:a6:
         b3:d8:07:a3:b2:ba:df:72:6c:39:67:a0:a2:cc:44:98:fb:dd:
         c5:c3:94:95:07:af:d5:e5:9c:32:e4:97:2e:58:0f:cf:f9:dd:
         2f:13:0f:64:0a:2f:74:e9:bd:bf:8a:89:4e:04:19:28:eb:38:
         5d:b7:c5:7e:f5:81:a9:64:e4:fb:95:8e:ce:22:23:11:90:2f:
         6d:7b:6f:76:e4:7e:85:c3:81:ca:4c:41:10:5a:6a:11:a1:3b:
         3a:da:97:36:17:4a:1c:0b:e0:93:c3:00:15:3c:e0:d6:3a:6e:
         17:9e:27:62:97:99:b3:00:16:1d:74:64:5b:25:f7:09:a2:05:
         a9:2e:48:6b:f1:a9:57:59:31:be:8d:b0:d9:54:37:20:7e:87:
         9e:5d:33:fe:b1:d9:07:9a:5e:1c:52:2b:f0:15:ed:eb:0a:c0:
         73:bf:94:8a:a6:9b:7e:12:da:ef:e7:f0:44:3b:47:36:4e:49:
         4a:b5:25:fd:08:ad:d4:bf:ad:9f:24:d6:67:d2:73:4e:22:0e:
         0f:19:83:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:59:34 2026 by rpki-client