Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c4048593-ac06-3163-8683-37d4e2e71d9f.roa
File:                     c4048593-ac06-3163-8683-37d4e2e71d9f.roa (raw, json)
Hash identifier:          2pR1R6q50Wm146o16fqNq2cmkZTEFuFl4DaA9hT/pPY=
Subject key identifier:   A3:C5:54:3A:6A:44:86:F3:82:C8:07:B7:54:AD:DB:95:36:20:0F:06
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584E02D07ADF86D00F99396083E0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c4048593-ac06-3163-8683-37d4e2e71d9f.roa
Signing time:             Sun 31 May 2026 01:00:10 +0000
ROA not before:           Sun 31 May 2026 01:00:10 +0000
ROA not after:            Sat 29 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        153.72.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:02:d0:7a:df:86:d0:0f:99:39:60:83:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: May 31 01:00:10 2026 GMT
            Not After : Aug 29 01:00:10 2026 GMT
        Subject: CN=06b82a95-453c-4cea-bcb0-6c3cc5bd22db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:20:13:a3:d5:5a:45:3c:1e:ca:79:bf:2a:f8:
                    73:86:e7:f0:ee:8d:6e:5c:5a:25:a3:30:20:97:a8:
                    94:d3:b3:84:f5:4d:2a:6a:2f:7f:92:f9:9d:23:64:
                    15:39:17:45:a3:e4:0a:9e:3c:d7:a6:ec:ce:7a:1b:
                    20:43:2c:0d:40:91:e1:48:0f:e9:7b:08:2d:23:cf:
                    6d:56:48:73:5e:56:a1:e2:55:7e:fd:ab:34:41:59:
                    e9:2a:c7:50:da:d2:67:6a:34:86:6b:16:18:19:88:
                    83:05:d1:43:12:5f:fe:b7:47:9e:00:f0:8e:10:c1:
                    8a:dc:4a:db:f1:b5:8c:d2:8d:63:10:be:23:d3:20:
                    6a:d7:50:73:cf:c3:67:98:00:66:73:3b:88:c6:5e:
                    6a:83:bc:b7:37:31:22:73:be:c5:26:70:49:43:7c:
                    47:69:ac:3e:87:0c:73:4d:57:90:03:00:4f:50:a8:
                    ae:fe:08:7e:7f:1f:c5:31:06:89:86:a8:41:43:a1:
                    33:98:7b:3e:be:71:ec:82:90:2f:c9:35:52:5c:74:
                    18:95:c2:80:f8:4f:1a:57:8d:ec:53:b3:8a:fc:c1:
                    9e:dc:48:01:0e:2a:50:39:d8:1a:cb:85:15:a7:54:
                    52:2b:b4:93:ae:22:9d:98:54:a7:7f:f3:ef:d1:4a:
                    5e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C5:54:3A:6A:44:86:F3:82:C8:07:B7:54:AD:DB:95:36:20:0F:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c4048593-ac06-3163-8683-37d4e2e71d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.72.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:c5:f1:89:be:6c:d0:50:e7:3c:20:70:a3:cf:df:58:a3:48:
         0f:1e:9e:b2:5e:59:11:31:1c:9b:38:a0:c3:67:f7:78:16:48:
         51:8a:b1:9c:df:b0:4a:d0:1e:47:33:fb:f1:99:9f:86:9c:ba:
         d6:01:b1:16:22:92:ff:89:e8:ea:54:9d:71:46:86:29:75:49:
         e5:7b:e7:ff:53:51:bb:0d:1f:f4:d4:24:eb:c9:7a:2d:c9:ed:
         9a:99:99:78:f0:ff:dd:f0:e5:3c:35:77:9f:c0:65:9d:66:db:
         83:cb:cb:3b:af:cf:72:66:21:ff:50:5e:c0:57:43:dc:c1:07:
         15:a6:6b:58:b3:3c:b4:ef:82:3f:f0:28:6f:27:f3:0c:b4:19:
         9b:c2:31:c4:d1:a6:d1:fe:a4:06:3f:6e:94:20:d2:75:b3:cd:
         38:2c:c6:fb:14:08:c4:8a:b7:32:c7:68:f8:90:f2:72:d5:c1:
         0b:17:f1:eb:76:99:99:f1:f1:6c:e1:99:21:8b:95:56:c1:b2:
         f5:2c:8f:87:a6:32:3a:8f:36:f2:45:ce:69:bb:c9:33:b8:6c:
         e6:a0:0d:aa:a5:43:63:cb:83:7c:3e:70:5e:fc:cf:00:d7:b6:
         ea:b8:67:3e:a8:fc:8c:5a:22:54:b4:bb:c8:e3:fe:c9:3c:e3:
         a2:77:83:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:41:29 2026 by rpki-client