Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a6053937-604d-37c0-82bc-da28830eecc7.roa
File:                     a6053937-604d-37c0-82bc-da28830eecc7.roa (raw, json)
Hash identifier:          qzRD1iv3+rkvAfUfSxMKKgNeC+owkNK6UDLoigs71iY=
Subject key identifier:   86:EA:53:D1:15:E9:15:22:2B:F8:D5:7D:B5:75:28:47:3A:6E:4C:98
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584E253EFACA9619FD4864545F00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a6053937-604d-37c0-82bc-da28830eecc7.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        168.149.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3e:fa:ca:96:19:fd:48:64:54:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=a5459a76-1058-4048-b9ff-0c1ad5d923ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c3:b9:8c:a4:f1:90:5c:50:d4:09:75:c6:29:
                    61:9f:05:27:b2:56:ba:06:7b:bd:26:63:2b:87:e1:
                    f4:66:de:8f:44:14:b7:2c:fe:26:6a:48:03:9c:23:
                    6b:32:3e:f6:bb:ee:83:e2:ee:8a:37:11:0d:7e:be:
                    df:4e:33:37:e9:d5:86:30:73:2b:d3:6a:a3:72:ee:
                    ce:08:cc:c0:59:c0:04:10:8a:86:71:b4:70:a0:d0:
                    00:68:c7:07:d3:de:4e:34:21:1b:d2:88:44:bb:3f:
                    4d:f2:a4:e7:75:b1:1b:39:24:c7:32:77:7e:97:7c:
                    8d:e2:f4:d7:4b:be:cb:5a:0b:10:83:d2:e5:da:16:
                    a2:84:bf:1c:cc:ec:62:c4:d1:bb:5d:5c:7d:94:16:
                    a7:14:cd:f8:a4:4f:d3:48:8d:48:4c:4e:49:34:38:
                    8a:fb:4c:8f:46:85:4b:ad:b1:19:04:d9:87:da:f6:
                    5a:63:31:f2:3d:05:50:20:1b:98:21:85:9d:7d:5c:
                    c0:18:b5:cd:0c:5c:1c:21:a4:23:26:80:f9:e6:57:
                    46:36:e0:c6:29:71:01:d6:a7:ec:a0:5e:95:68:5f:
                    79:7e:ba:0c:95:e4:10:d9:58:35:b2:e7:5f:05:93:
                    70:2e:b3:42:f6:ce:07:6d:5a:cb:8f:83:94:9e:a4:
                    f3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EA:53:D1:15:E9:15:22:2B:F8:D5:7D:B5:75:28:47:3A:6E:4C:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a6053937-604d-37c0-82bc-da28830eecc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.149.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:08:76:90:32:23:c8:2c:fa:07:06:b5:0c:04:16:7b:48:5a:
         81:33:ae:23:aa:63:6f:61:2a:4b:fc:48:1b:4f:d2:da:ca:a0:
         de:6c:de:c0:12:31:b0:f8:a2:ec:d1:23:43:58:70:84:95:58:
         85:e0:df:f0:95:79:99:35:3c:de:fa:24:85:ab:28:95:7f:e4:
         68:d7:e8:62:bb:4d:9d:1e:7c:59:5b:af:9f:2d:98:db:b7:3f:
         24:e5:a8:b0:90:ec:80:e3:cb:31:27:20:e0:f7:9e:1d:ec:57:
         a2:45:97:54:4e:87:cd:b3:a7:1c:bf:e3:b7:9b:7e:d5:27:70:
         a3:a0:33:36:f6:2b:f9:8d:38:ca:49:81:31:37:38:92:05:ad:
         8f:24:8e:82:68:75:77:ce:25:53:4f:ef:2f:52:65:46:c3:03:
         2b:e4:a6:a6:bd:62:c3:95:b4:9a:79:f6:71:c7:98:b7:5c:d5:
         9f:be:be:3b:5e:ee:34:ab:47:96:fd:2b:8c:7e:46:8a:a5:57:
         63:fa:7e:20:65:3f:37:15:20:b8:d0:37:c0:7a:1c:df:c9:64:
         5f:42:15:fe:f1:25:be:1c:05:e6:55:1e:b2:f4:6b:5b:ef:74:
         6f:42:fd:c9:9c:32:8d:32:38:d5:d4:e0:19:32:f0:e1:d7:82:
         ba:c7:d1:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPvrKlhn9SGRUXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk
YTU0NTlhNzYtMTA1OC00MDQ4LWI5ZmYtMGMxYWQ1ZDkyM2VkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8O5jKTxkFxQ1Al1xilhnwUnsla6Bnu9JmMr
h+H0Zt6PRBS3LP4makgDnCNrMj72u+6D4u6KNxENfr7fTjM36dWGMHMr02qjcu7O
CMzAWcAEEIqGcbRwoNAAaMcH095ONCEb0ohEuz9N8qTndbEbOSTHMnd+l3yN4vTX
S77LWgsQg9Ll2haihL8czOxixNG7XVx9lBanFM34pE/TSI1ITE5JNDiK+0yPRoVL
rbEZBNmH2vZaYzHyPQVQIBuYIYWdfVzAGLXNDFwcIaQjJoD55ldGNuDGKXEB1qfs
oF6VaF95froMleQQ2Vg1sudfBZNwLrNC9s4HbVrLj4OUnqTzpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIbqU9EV6RUiK/jVfbV1KEc6bkyYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvYTYwNTM5MzctNjA0ZC0z
N2MwLTgyYmMtZGEyODgzMGVlY2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqJXwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABMIdpAyI8gs+gcGtQwEFntIWoEzriOqY29hKkv8SBtP0trKoN5s3sAS
MbD4ouzRI0NYcISVWIXg3/CVeZk1PN76JIWrKJV/5GjX6GK7TZ0efFlbr58tmNu3
PyTlqLCQ7IDjyzEnIOD3nh3sV6JFl1ROh82zpxy/47ebftUncKOgMzb2K/mNOMpJ
gTE3OJIFrY8kjoJodXfOJVNP7y9SZUbDAyvkpqa9YsOVtJp59nHHmLdc1Z++vjte
7jSrR5b9K4x+RoqlV2P6fiBlPzcVILjQN8B6HN/JZF9CFf7xJb4cBeZVHrL0a1vv
dG9C/cmcMo0yONXU4Bky8OHXgrrH0eo=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:05:26 2026 by rpki-client