Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/80e481a0-27f8-3217-b8fd-6ff413f14e49.roa
File:                     80e481a0-27f8-3217-b8fd-6ff413f14e49.roa (raw, json)
Hash identifier:          SCD3FoQ5RbDKfK/Pl8omgokBrkxIuy3cUEfaFyFhtnE=
Subject key identifier:   FB:AE:70:9B:AD:EB:0F:A0:B3:3E:5D:CC:2A:F8:28:D7:E4:FC:7A:EA
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584EA78822AE991D15B17ED8DD80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/80e481a0-27f8-3217-b8fd-6ff413f14e49.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     31898
IP address blocks:        153.72.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:22:ae:99:1d:15:b1:7e:d8:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=603077e6-ce01-4912-a353-105b29285492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0f:9c:bf:9c:c0:ca:74:fe:03:43:87:ef:2c:
                    81:cc:ad:2e:11:be:50:13:64:90:63:4a:0d:2a:7c:
                    14:6e:80:1e:ed:16:d8:db:f6:fe:9b:04:78:ac:3f:
                    81:9d:76:1b:bb:a8:cc:4e:fb:84:f3:fb:20:06:65:
                    4d:99:82:5b:6e:b4:bb:28:56:58:26:36:c2:96:56:
                    7a:11:2a:92:6e:75:01:45:c9:6e:65:1e:e2:28:14:
                    cb:4c:8f:4d:e8:09:77:31:f3:53:54:6e:5f:4d:f1:
                    65:b7:93:82:b2:28:c1:1c:b2:64:db:b5:a0:e4:8e:
                    bf:8d:84:a7:50:7d:37:3e:46:9e:28:5a:f4:9a:99:
                    a8:54:77:bb:d2:e4:f2:92:c3:62:00:db:53:39:f1:
                    74:46:24:ce:d9:66:69:be:f5:49:d5:a7:c2:83:c2:
                    71:5f:e8:71:1e:23:6f:36:6e:d1:44:97:fc:7a:2c:
                    0c:f8:6d:04:5c:b9:a7:8e:8f:48:75:53:6a:0e:5c:
                    44:4b:16:16:9e:70:90:98:4a:fe:25:1d:40:48:24:
                    74:f3:2e:47:87:94:81:eb:4b:04:45:89:45:ff:80:
                    ad:78:89:f4:b5:19:d6:1e:2f:5c:05:23:7d:c4:fa:
                    22:75:d4:88:83:f4:c9:6f:81:66:df:f6:7f:a0:1f:
                    96:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AE:70:9B:AD:EB:0F:A0:B3:3E:5D:CC:2A:F8:28:D7:E4:FC:7A:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/80e481a0-27f8-3217-b8fd-6ff413f14e49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.72.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:94:37:bb:58:42:7e:88:0c:6c:19:ac:e3:2e:87:02:6f:d2:
         f3:96:02:52:5a:37:03:6c:75:7f:a3:e8:14:4d:1b:18:2d:34:
         34:a2:37:43:80:1b:bc:8f:81:4b:20:95:9b:15:7b:ac:f9:55:
         aa:4f:cf:cf:f3:75:aa:36:5d:33:63:0f:f8:ff:f1:96:a8:d4:
         8c:23:7b:10:08:72:bc:08:04:ee:28:c9:e0:62:ed:e7:d2:b7:
         be:eb:60:40:06:b3:71:4c:3d:16:23:3c:3a:58:6b:b2:ce:7e:
         5d:d1:3c:2d:25:cf:e7:c0:10:23:28:05:9b:da:69:c9:2a:a3:
         0d:da:6f:18:ee:53:70:66:c2:cf:1f:5c:b4:28:d2:28:55:9f:
         0d:5b:59:05:9d:02:1e:bf:a5:54:4e:44:b3:57:6a:97:5b:31:
         1d:be:d2:4d:bf:72:df:ac:e1:7e:bf:2a:a3:9c:71:55:54:6d:
         8a:54:06:1c:86:e3:be:5c:9a:87:13:2e:b3:d2:28:09:e0:cc:
         5e:bb:f9:65:a3:4b:02:3c:ab:70:1f:41:8d:82:31:b9:37:f4:
         a8:2c:f9:f6:ea:eb:1f:27:49:95:c3:28:17:c3:65:49:8a:94:
         d4:79:cd:4a:99:e3:ce:25:8e:8a:da:b5:a5:49:cd:0d:36:db:
         10:8e:58:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:27:01 2026 by rpki-client