Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/cb349298-228a-30ac-a850-40070fc05646.roa
File:                     cb349298-228a-30ac-a850-40070fc05646.roa (raw, json)
Hash identifier:          PLbmGTihr3s+QgiUJv4dyoLitRPnBmWe8lrDJQ8Ts4Y=
Subject key identifier:   F1:46:7C:CF:FD:E7:B6:B7:A1:02:F5:BE:20:2B:8E:32:06:DE:73:B5
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584CDA26BF4AA7FE7578EBC1B680
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/cb349298-228a-30ac-a850-40070fc05646.roa
Signing time:             Fri 13 Feb 2026 18:38:56 +0000
ROA not before:           Fri 13 Feb 2026 18:38:56 +0000
ROA not after:            Thu 14 May 2026 17:38:56 +0000
asID:                     3738
IP address blocks:        192.250.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:da:26:bf:4a:a7:fe:75:78:eb:c1:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Feb 13 18:38:56 2026 GMT
            Not After : May 14 17:38:56 2026 GMT
        Subject: CN=25331954-41b2-4496-8513-c6a24248ebb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:e3:a1:a6:a1:05:80:de:de:ae:f5:07:6d:
                    28:39:cc:94:79:5d:9c:ed:3f:2a:27:4f:87:80:d9:
                    4e:af:33:c1:f0:8a:fd:e4:bf:03:52:07:6c:d8:6f:
                    c7:11:c2:56:09:c4:61:55:32:b8:2e:5c:7e:de:fc:
                    6f:25:71:72:d1:2b:47:05:d7:3a:34:b4:0c:4e:ed:
                    14:7c:7e:0f:0a:52:4e:f9:50:3b:30:24:be:14:3a:
                    78:6f:d7:a3:38:1f:9d:46:a0:06:a2:b4:df:0f:d8:
                    9f:e8:1e:c2:20:43:a6:d4:e0:69:79:57:b9:d4:9e:
                    a9:81:02:f9:06:4c:0e:0a:b1:28:51:be:4f:aa:68:
                    d5:53:99:dd:dd:35:66:4d:0e:d0:7b:3c:09:e0:26:
                    c2:68:f8:bc:1e:15:1b:b7:a0:a4:db:99:55:34:af:
                    fc:47:c4:39:fc:cc:90:d6:13:f4:cf:f8:a7:90:44:
                    6e:4b:7b:90:e6:fb:80:66:ce:aa:38:2d:bb:a0:48:
                    9a:09:ed:bb:3c:43:e7:f2:94:b9:4a:27:9f:cf:b5:
                    2a:c5:14:35:da:b6:c5:71:51:12:10:f2:f1:ec:3c:
                    fe:64:c7:8e:fe:22:b8:ca:c2:8b:8b:40:06:5d:85:
                    6a:98:2a:4f:f8:e8:d3:71:8f:02:45:e1:db:60:c0:
                    29:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:46:7C:CF:FD:E7:B6:B7:A1:02:F5:BE:20:2B:8E:32:06:DE:73:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/cb349298-228a-30ac-a850-40070fc05646.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:cc:97:0c:9c:db:c5:08:a3:11:14:8a:6e:df:cc:49:c8:7d:
         0e:a4:45:13:a3:97:75:1d:94:38:27:55:09:1d:15:1f:3c:8f:
         9b:89:c9:ee:4e:04:40:86:38:be:cd:ea:28:42:09:5a:99:26:
         bc:e5:a3:3e:e7:1b:7a:9c:6a:55:e4:25:cf:00:32:f8:30:8a:
         4c:10:bc:79:9f:9b:c2:f2:cd:75:ba:9f:93:64:34:a5:0b:82:
         76:b4:a4:af:1f:f9:d2:9a:59:be:2a:ea:a5:f3:51:a4:bb:31:
         2d:60:4f:23:ad:d7:c3:ac:1c:b1:2e:34:78:89:d2:57:e0:66:
         86:e7:df:67:fe:5b:04:22:c7:74:33:c3:30:cd:8b:03:af:41:
         04:ae:16:87:38:cd:67:1a:e6:4e:8b:36:06:ac:82:40:09:ef:
         cd:fe:72:38:cd:af:13:f1:86:37:cc:37:76:a5:cd:55:cc:da:
         b0:57:bc:98:ad:fa:b9:21:ce:46:58:53:b7:46:ea:89:ee:ea:
         b7:f9:cb:00:82:d4:88:78:d6:81:8a:c2:92:e2:4f:5f:7f:ab:
         3e:90:24:62:e1:a9:a1:c8:71:a6:73:3a:1f:b6:77:21:70:5d:
         80:90:95:c4:a6:65:66:6c:ad:ee:38:21:c6:08:ec:49:94:87:
         e5:94:0e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:49:01 2026 by rpki-client