Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e8b7d53d-a278-38d0-bc7e-6d10b9e247c4.roa
File:                     e8b7d53d-a278-38d0-bc7e-6d10b9e247c4.roa (raw, json)
Hash identifier:          h48VDPJpwKJ5wop93vIP+fvwbV13KqyVUcfcawBP1ss=
Subject key identifier:   D2:BE:C4:99:76:E6:FA:27:56:7D:16:46:E4:DD:41:45:65:56:95:59
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584E1FA9B532BE24D6BA2E213CC0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e8b7d53d-a278-38d0-bc7e-6d10b9e247c4.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     394089
IP address blocks:        144.125.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:b5:32:be:24:d6:ba:2e:21:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=cc6794e5-1a6b-4b72-a330-6e1c451647fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8c:40:60:8f:9f:d8:0a:e0:0c:72:e6:1c:f3:
                    a4:a5:01:f8:c9:0c:4f:91:13:b2:e8:17:1d:b1:8e:
                    31:43:9d:d1:96:40:1b:64:58:ac:ba:61:43:d4:eb:
                    24:e1:f1:1f:b1:c4:cd:7b:9f:21:4e:d5:fc:58:94:
                    5c:70:ed:43:c0:5a:4e:f4:97:72:c9:7b:36:7f:6a:
                    be:8f:4d:88:dc:62:ff:59:58:de:87:8a:22:32:43:
                    7c:5a:16:38:be:cb:52:e3:d1:d3:84:d2:8d:75:66:
                    de:a8:c9:7d:58:52:e7:5d:05:87:91:97:09:e2:68:
                    4b:a4:2b:26:75:7d:6e:5a:b8:f7:22:a4:fd:cd:39:
                    3d:38:bc:29:be:75:bc:9b:45:a4:58:f5:e4:81:c8:
                    60:c0:24:84:06:85:3b:35:fe:10:3a:fa:30:ce:ae:
                    bb:7f:ca:b7:45:ec:51:61:8e:01:5c:74:47:48:5f:
                    0b:b8:07:b8:7f:77:eb:3a:6c:78:7d:3d:bb:f9:9f:
                    ad:9b:3e:dc:89:24:c2:2a:11:10:35:b0:a7:d1:3d:
                    91:c9:b4:83:b1:79:25:f1:2c:b1:19:4e:00:06:49:
                    0a:31:9d:54:db:ef:a9:bc:18:d7:8f:d7:65:0d:22:
                    ae:b3:3e:6f:d1:6d:c8:65:04:87:19:82:17:30:e9:
                    04:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BE:C4:99:76:E6:FA:27:56:7D:16:46:E4:DD:41:45:65:56:95:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e8b7d53d-a278-38d0-bc7e-6d10b9e247c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:72:3a:2c:24:11:fb:c4:f3:41:8a:19:10:03:86:97:27:ca:
         74:3a:cf:83:a4:fa:be:38:fd:40:6f:17:9f:85:4f:92:3c:a0:
         72:8a:5e:4f:f6:e7:ed:5e:b3:61:8d:83:d5:11:c8:42:12:86:
         fb:17:e0:35:8c:6e:fa:f3:fa:7d:41:57:c4:51:e5:51:5e:c1:
         67:df:d8:35:e6:60:15:fd:02:d5:0e:92:dd:10:e8:b0:2d:b8:
         89:14:27:ad:4a:df:78:09:7d:36:b6:79:bc:e6:2e:58:32:4a:
         89:74:38:84:28:ad:a3:e6:3c:d3:fd:bc:51:a0:6f:21:24:92:
         ec:fa:c8:71:71:fa:38:f8:cb:a4:b6:f3:2b:0d:7a:e1:f7:a0:
         c6:9d:5d:35:43:67:c6:57:d6:f4:96:0e:7b:eb:04:38:60:bb:
         6f:72:06:b2:c8:e6:58:6d:69:9d:5c:69:91:fc:ea:38:5b:59:
         76:66:5d:b9:3c:20:84:d2:65:af:dd:5d:2d:54:ac:74:96:54:
         ae:1e:79:54:a1:f4:a5:41:7b:b7:d5:aa:ae:d3:85:3c:4d:32:
         9d:ad:39:50:bc:09:e7:11:bb:76:5c:06:f9:20:8f:8e:f4:ef:
         da:32:35:9e:0f:af:80:96:7f:52:f4:07:73:21:e8:25:7b:94:
         9a:04:89:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:31:41 2026 by rpki-client