Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/90345308-e872-3107-b670-b871b65a840e.roa
File:                     90345308-e872-3107-b670-b871b65a840e.roa (raw, json)
Hash identifier:          DtkSuwqAEHn7CmId60r0FfYDDWKa/nslnXuGfmHMQfo=
Subject key identifier:   2B:8D:88:F9:17:98:0D:7A:82:2B:66:97:AC:4B:22:2F:A9:B5:5D:E4
Certificate issuer:       /CN=f37ae11d-629c-4443-bc37-2c3eebd09453
Certificate serial:       010D0C9F4328584D7CCFD84FDD49C3E15AC3D380
Authority key identifier: 57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/90345308-e872-3107-b670-b871b65a840e.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     7106
IP address blocks:        209.143.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:d8:4f:dd:49:c3:e1:5a:c3:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f37ae11d-629c-4443-bc37-2c3eebd09453
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=a3853e89-1a9d-4f2f-9708-cd0cb96c6e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cf:26:bb:61:5e:c9:c8:d4:36:06:41:6a:52:
                    16:50:77:59:cf:24:cc:8c:c7:7e:d6:89:0a:52:e0:
                    be:1b:89:67:d7:26:74:f4:1a:47:52:1e:d6:d7:3e:
                    6a:f9:de:ab:dd:a2:8b:e1:78:a7:59:0b:58:3a:2a:
                    9e:d5:40:5d:1b:b2:1f:60:00:01:a4:2e:fa:06:a9:
                    42:ba:b3:e4:a7:98:c2:3f:98:43:b1:0d:4f:10:2c:
                    1c:a7:00:83:e5:c6:a7:64:1e:c0:58:7e:39:0e:18:
                    7c:9c:61:b3:56:9c:1c:ee:a6:08:ad:de:ca:17:56:
                    1b:e2:67:9c:ba:6c:6d:c9:03:4b:06:cc:48:27:37:
                    39:d0:ac:94:b0:3c:39:91:bf:f7:29:d6:c6:fb:64:
                    ee:5a:ee:60:d7:47:00:6f:1e:7b:2b:6c:6c:06:a4:
                    1b:39:3c:37:a8:88:e9:1d:91:0b:03:1f:08:b4:63:
                    6b:5d:00:89:7b:3d:10:d2:d9:38:e0:7c:f9:57:99:
                    e9:a8:37:f6:36:cd:91:3b:83:4d:f2:c1:4b:41:81:
                    e5:45:6d:a2:80:b4:44:9d:ab:58:8c:8d:02:d2:de:
                    07:4b:68:f7:1a:2a:93:a7:dd:32:0f:14:0a:5e:af:
                    ec:90:a6:0a:88:6f:85:44:be:fe:13:f8:9c:80:0d:
                    76:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8D:88:F9:17:98:0D:7A:82:2B:66:97:AC:4B:22:2F:A9:B5:5D:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/90345308-e872-3107-b670-b871b65a840e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl

            X509v3 Authority Key Identifier:
                keyid:57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.143.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:01:8b:fa:fc:8c:ca:22:d3:6c:a9:9f:f6:9e:4a:56:bd:4a:
         4b:90:d1:44:29:aa:21:b1:9a:b4:9b:d7:3c:1c:4c:75:8b:26:
         2d:8e:75:7e:61:d7:8e:fa:e2:54:f1:b0:12:42:57:d2:b3:f5:
         7e:77:bf:cf:28:0c:dc:45:e3:d4:0c:40:d4:fe:f7:0f:25:72:
         8f:0a:b4:59:91:2d:14:b9:60:4b:5b:25:4c:31:5b:45:89:fb:
         8b:bc:27:0b:5c:d9:9d:1e:17:7b:77:a4:44:3d:b2:e7:b4:66:
         95:b2:dc:d3:62:c7:e3:6d:1d:28:17:42:ad:2f:d1:39:b3:fb:
         5f:cb:ae:c7:3f:7d:bc:7a:bf:ec:c0:02:60:ef:e8:a7:6c:a1:
         0d:83:e6:e2:2c:ec:3b:61:41:cd:86:5b:09:22:3c:6b:b2:76:
         a8:e5:d9:86:7e:65:6e:db:79:1c:7e:ab:ee:dc:3b:42:3a:43:
         96:7b:45:2b:fc:9c:30:16:ba:16:ac:05:64:3b:ab:2e:7c:ac:
         01:71:d6:d1:79:b7:1b:79:6e:9b:fe:d3:2f:77:8c:fe:7c:df:
         12:a0:50:c8:fb:61:7d:79:5c:31:89:2f:bb:48:3f:07:f7:49:
         52:be:5d:b8:86:d8:80:2b:3f:91:3a:5c:81:91:9a:ea:5a:6c:
         eb:3b:d5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:44:38 2026 by rpki-client