Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d957b912-858f-3daa-8f76-e89563def6bb.roa
File:                     d957b912-858f-3daa-8f76-e89563def6bb.roa (raw, json)
Hash identifier:          ErH7WHK6it6m6ENC/Ek58CXwEfymEESDqqIwmhrgMnE=
Subject key identifier:   DD:A2:5A:75:D4:FA:F9:88:61:76:73:C0:AB:8D:48:76:30:98:11:BB
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584F1C0CF3C6D724D0F7E390E490
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d957b912-858f-3daa-8f76-e89563def6bb.roa
Signing time:             Tue 08 Sep 2026 18:44:11 +0000
ROA not before:           Tue 08 Sep 2026 18:44:11 +0000
ROA not after:            Mon 07 Dec 2026 19:44:11 +0000
asID:                     394089
IP address blocks:        144.125.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:0c:f3:c6:d7:24:d0:f7:e3:90:e4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep  8 18:44:11 2026 GMT
            Not After : Dec  7 19:44:11 2026 GMT
        Subject: CN=34ba92ed-3beb-4416-bcb2-18d35be5262b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e6:10:60:fc:ee:24:e4:58:b6:35:91:48:33:
                    40:ca:41:51:86:bf:5b:26:13:0a:d7:c4:d9:cb:3d:
                    c6:56:cc:48:11:c1:56:1c:f0:2c:7f:0a:ff:7b:6f:
                    0b:b5:39:8b:96:bc:53:59:d4:49:87:c5:41:53:6b:
                    db:67:5c:f1:ca:b4:96:3a:30:de:59:a5:98:56:23:
                    94:0e:47:fe:bf:cb:83:2d:f6:02:8d:96:05:7a:88:
                    22:a8:61:6d:07:a4:1a:7d:9b:17:f3:84:3d:76:22:
                    99:49:c3:7a:57:22:14:e1:31:f7:0f:ab:62:2c:ae:
                    46:20:f7:be:f0:03:34:2a:73:56:08:f7:47:97:cd:
                    20:b0:9b:ae:b9:a3:4a:8b:f7:1e:3c:fe:21:d6:6a:
                    38:dc:7a:c9:42:56:3e:43:45:53:e7:bf:91:11:5e:
                    c0:3f:d8:e0:4b:68:c5:94:4c:1e:35:44:02:09:0b:
                    b6:28:f6:a0:0b:9e:b9:96:42:b7:5d:b5:a7:b2:06:
                    61:3f:13:dd:fc:aa:4d:c4:5d:80:77:c0:4b:bd:c4:
                    a1:9e:8c:9b:7f:30:99:c8:8c:36:65:08:0f:48:1f:
                    d7:93:f7:3a:09:da:83:67:6e:70:a1:4c:40:8c:c6:
                    46:e8:40:5d:4b:52:56:e5:9c:35:a0:94:72:6c:db:
                    6c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A2:5A:75:D4:FA:F9:88:61:76:73:C0:AB:8D:48:76:30:98:11:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d957b912-858f-3daa-8f76-e89563def6bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:c4:5c:ed:77:03:43:f3:f1:b5:4a:5e:96:aa:b2:fe:75:f4:
         73:63:ca:55:4d:ae:89:8a:17:37:df:a7:72:0b:fd:67:81:7b:
         3e:64:99:e0:d6:8d:90:6f:82:a1:6b:f1:4a:7a:e7:7e:2e:49:
         59:55:b1:d1:93:22:fb:25:ab:3e:bd:03:c6:ae:a6:98:11:14:
         c7:76:36:6e:89:a5:d2:67:01:49:84:88:af:ac:4c:96:68:2f:
         ab:42:31:ed:a9:10:5e:01:33:05:f0:3c:75:32:aa:a8:74:ea:
         18:68:a9:3c:5a:f9:ec:5b:62:bf:ca:e6:45:93:d2:66:67:6e:
         26:79:f6:ba:ca:7d:8e:8b:a8:7e:8b:f7:ef:7b:57:94:aa:ad:
         30:bc:c7:ba:53:22:40:0a:93:99:0b:31:f7:66:b9:7c:1b:95:
         cd:cb:5e:17:32:97:22:15:e9:ac:7b:20:bf:56:5e:7e:6d:3d:
         d4:a0:0d:55:7d:52:7b:e0:4d:18:74:58:75:91:98:92:9f:6e:
         9a:1e:9c:91:f0:7e:a6:60:d1:51:53:a8:e2:5c:48:29:b2:7a:
         f5:0a:bb:43:ab:b2:8e:06:cf:32:b8:06:1d:89:66:5a:5f:f5:
         4f:e5:28:be:91:e1:09:5a:ab:32:71:88:dc:1c:fb:93:01:d2:
         69:7b:51:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:08:31 2026 by rpki-client