Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/eecc6829-e7dd-36d2-9857-c385aed6501a.roa
File:                     eecc6829-e7dd-36d2-9857-c385aed6501a.roa (raw, json)
Hash identifier:          zSabNpCzk80j1vjbfQeY36Ks0k4YeX5MTHJWihFAmKQ=
Subject key identifier:   5F:34:0A:34:B3:6A:63:BD:50:B2:B2:45:E2:E2:CE:A7:B6:00:A7:85
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584EA79BB6CD73572B3DF462EC80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/eecc6829-e7dd-36d2-9857-c385aed6501a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     394089
IP address blocks:        153.72.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:b6:cd:73:57:2b:3d:f4:62:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c6860046-fa0b-4c30-b57f-add97d4b2228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:60:a4:f8:94:83:eb:ba:39:45:39:bd:7a:01:
                    64:d2:47:70:2f:58:87:db:19:cb:54:b2:4c:7d:35:
                    8d:63:de:5b:29:65:23:6b:79:7a:65:18:61:d7:0d:
                    a8:0d:a9:19:36:f8:77:c5:ef:44:3b:fc:25:6d:3b:
                    13:9a:40:cb:d0:15:ae:75:07:fa:a5:26:52:3d:44:
                    3d:43:ba:3d:6a:9c:ab:49:cb:0f:f5:1f:19:1d:6f:
                    27:61:b0:42:8a:84:84:bf:94:b9:36:67:49:13:16:
                    1c:30:b7:10:27:2c:22:aa:06:bc:22:57:7c:0d:96:
                    7a:ea:c2:24:d9:8a:eb:92:26:4f:a3:ab:de:23:e9:
                    44:47:b4:97:87:bd:d1:b4:66:99:96:ce:90:f4:f2:
                    0d:98:af:d6:87:1b:6f:9f:6b:eb:04:e7:0f:33:76:
                    fd:8c:cf:9b:10:91:1f:e5:04:28:5d:eb:ad:86:7c:
                    d5:c9:17:5c:45:42:6f:9f:84:a2:fb:f2:a9:07:5d:
                    5e:00:97:74:f3:3c:d9:ac:5b:36:a1:6b:28:59:7d:
                    b1:6c:2c:b3:93:81:f1:ca:59:07:e4:84:61:06:75:
                    af:74:ca:e3:ba:06:47:fc:47:f3:98:f8:b0:78:05:
                    3e:fa:26:ca:90:ab:0f:39:78:f8:a9:7b:75:ff:cc:
                    0b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:34:0A:34:B3:6A:63:BD:50:B2:B2:45:E2:E2:CE:A7:B6:00:A7:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/eecc6829-e7dd-36d2-9857-c385aed6501a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.72.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:2e:1a:cc:1e:f9:13:33:af:f1:19:ca:e9:a2:dc:c8:e6:e3:
         c5:e6:50:41:a2:76:93:e8:35:aa:5d:d4:0a:ea:71:61:77:1a:
         75:cf:e1:60:81:2b:9d:91:81:9b:44:f0:66:18:a0:76:f2:6d:
         28:21:36:b5:c3:f0:2f:05:09:2a:bc:d9:74:21:0d:2e:4e:ad:
         90:7a:a4:c5:42:af:a1:69:d0:5d:a6:6b:45:40:b2:45:99:f9:
         53:a0:84:a3:61:89:35:a0:de:ba:8f:c7:fc:16:ce:d8:4e:31:
         39:10:aa:bf:0a:09:54:ce:ef:c9:7c:b8:6f:47:02:dd:9f:39:
         64:fb:98:eb:0b:3c:13:69:d0:e8:de:5e:7b:0b:2c:c1:8b:5e:
         f8:49:6e:f3:9c:1c:f8:ea:08:20:bd:6b:c4:d7:fe:ae:f7:b9:
         5e:ad:5f:92:0d:23:6d:6c:23:ee:35:ae:e2:a6:59:50:d1:ed:
         70:63:0f:04:53:a6:bb:9b:f8:b8:67:56:cf:c2:a1:d9:95:bb:
         c1:6c:be:e9:f3:c8:ed:06:9d:87:2e:ab:b1:31:8d:f7:44:7d:
         fc:25:9e:c7:08:bd:84:10:b2:83:83:d8:5b:a1:0d:40:68:f6:
         4b:e8:8e:08:85:ea:b7:a6:6f:78:6f:bb:b8:d0:a7:2a:11:2f:
         fa:3e:15:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:45:53 2026 by rpki-client