Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e68789f0-a61a-36eb-8b1b-27d3b0056ad6.roa
File:                     e68789f0-a61a-36eb-8b1b-27d3b0056ad6.roa (raw, json)
Hash identifier:          1JxQ/ZOKFP3j/y7/q2dZ90GI3Y5rI0kPk7FGwIp+gmc=
Subject key identifier:   B7:C6:D4:D7:3A:AA:82:7A:E2:DB:FE:41:C4:7C:34:E8:ED:5E:B9:47
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D83CB0B542CE78D40E44703C0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e68789f0-a61a-36eb-8b1b-27d3b0056ad6.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     394089
IP address blocks:        144.125.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:0b:54:2c:e7:8d:40:e4:47:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=fdde5fd9-2a41-43f7-bcfc-77b61d606256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:41:db:bf:c9:ba:46:10:48:8f:67:1b:d7:
                    c9:b0:7a:a6:2b:64:7a:a6:e3:35:87:87:50:da:78:
                    f8:13:73:89:65:30:f7:1d:6b:e7:15:c1:ed:08:da:
                    cf:b4:ba:6f:3a:f6:1a:07:bb:f2:3e:51:2c:28:b9:
                    9c:f4:68:21:a5:ed:91:81:c8:5e:0d:d7:e6:43:05:
                    2d:f8:99:69:bd:55:18:31:81:2f:bc:42:79:de:8b:
                    0a:5c:7a:c0:30:ba:36:39:e2:c0:73:ac:4e:31:cc:
                    ff:cb:1c:d1:14:b1:df:f0:fa:1f:8f:55:13:c0:d7:
                    2e:3d:75:f2:e6:a2:af:f1:ea:86:f7:09:7f:db:39:
                    74:13:50:89:5b:7e:ac:00:8b:d7:a2:e7:a8:5d:bc:
                    06:80:26:96:f4:b1:5a:f2:17:f2:c7:49:85:f0:63:
                    7a:4f:2b:ad:e6:15:44:6f:ef:b9:89:7c:98:30:f9:
                    d9:01:72:72:8f:24:a8:02:39:dd:af:a6:ed:b7:5c:
                    1e:7b:4a:56:f4:f5:83:39:7c:c4:9f:21:8d:41:29:
                    1e:4e:41:9c:4f:aa:3b:1b:3d:70:40:ef:b8:55:bd:
                    65:09:a6:ee:f8:e5:00:9a:69:7e:86:9d:45:2c:82:
                    8f:76:a4:e5:ba:55:aa:2d:14:c5:92:62:16:07:2b:
                    f5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C6:D4:D7:3A:AA:82:7A:E2:DB:FE:41:C4:7C:34:E8:ED:5E:B9:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e68789f0-a61a-36eb-8b1b-27d3b0056ad6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:be:cf:39:4b:cd:1c:85:82:29:97:39:ba:2a:4d:b4:84:7b:
         c5:b3:b0:54:1b:96:cf:f8:6c:9f:ad:e7:99:ab:82:a4:c6:42:
         ef:10:5b:e8:93:12:87:95:07:a6:01:2c:e0:79:5f:86:a5:fa:
         98:8b:51:30:89:bc:e2:aa:6d:54:d6:2d:a2:e8:2c:22:23:ad:
         fe:fe:88:6f:92:f5:80:40:4a:9c:3c:71:8f:cc:59:fb:41:32:
         e3:5a:39:cb:7c:86:f4:d4:39:2e:97:ba:ab:37:be:63:41:95:
         ad:d7:1f:ff:6e:d7:9c:f9:16:92:fc:61:9c:4e:32:ce:f8:0b:
         ed:c1:b4:04:ab:cd:c8:ee:54:42:64:ec:cb:8d:b0:7c:be:04:
         12:89:86:74:b2:8f:de:bf:a8:13:b9:31:18:ba:c6:c7:ea:c6:
         2b:b2:ec:d9:8e:97:e5:3b:14:b3:b7:98:2f:ed:cd:c1:44:1c:
         a1:cd:a4:29:05:9d:0d:bf:03:81:d1:e2:05:8b:8c:17:94:09:
         66:f1:bd:f4:9f:2e:6f:75:f3:e7:f1:51:d4:22:c3:07:28:42:
         7a:89:4c:30:9c:08:45:e6:1e:5d:4d:c7:89:79:35:66:b1:62:
         21:3b:63:36:0a:ab:90:41:08:25:31:ea:59:bf:5c:5d:db:bf:
         94:40:95:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:44 2026 by rpki-client