Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/023535a0-65ed-3941-9398-6d7da6b34d96.roa
File:                     023535a0-65ed-3941-9398-6d7da6b34d96.roa (raw, json)
Hash identifier:          9HYcsGUHbx9pa/wOoR9EhNtN+zHa2Em/oEbM3xJYHcU=
Subject key identifier:   D7:A7:7C:B9:6D:D5:15:EF:EC:1C:93:0A:9A:E7:C1:C3:43:A9:4F:F4
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584EBF41B05392FEA35826E8B800
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/023535a0-65ed-3941-9398-6d7da6b34d96.roa
Signing time:             Thu 06 Aug 2026 13:00:12 +0000
ROA not before:           Thu 06 Aug 2026 13:00:12 +0000
ROA not after:            Wed 04 Nov 2026 14:00:12 +0000
asID:                     396982
IP address blocks:        144.125.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:41:b0:53:92:fe:a3:58:26:e8:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Aug  6 13:00:12 2026 GMT
            Not After : Nov  4 14:00:12 2026 GMT
        Subject: CN=315151dd-14bd-4177-80e4-7ff22950b7ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:46:51:3d:32:66:a1:23:9e:93:ca:89:c0:
                    8a:a7:88:af:03:cc:2d:f8:a6:40:7e:e7:8c:ed:eb:
                    22:47:1b:09:f9:7d:5d:8a:12:24:ff:35:23:52:6c:
                    0d:f2:20:91:76:80:32:eb:43:ab:94:c1:40:a8:ac:
                    75:79:df:16:f8:3c:8a:39:d2:5f:10:f7:b2:2d:77:
                    31:bf:4f:bd:e7:98:e0:e5:5d:72:ef:ec:c6:c1:19:
                    27:92:0c:18:a0:37:15:ad:7e:c1:15:aa:fa:19:d3:
                    d3:7f:a3:69:34:b1:c4:a0:e3:14:5d:bf:2b:47:7c:
                    5c:b0:13:3d:44:21:7e:00:9f:9a:06:f2:f4:4b:88:
                    6b:38:e0:d8:ca:94:c0:57:4b:46:62:7a:79:80:31:
                    a1:97:b1:09:55:42:72:d3:0a:99:37:2b:f1:d6:0e:
                    d9:d4:5f:2c:39:59:c9:a5:f8:66:81:0f:19:50:5a:
                    0b:bc:f0:ac:c4:7f:73:b9:70:9f:61:64:67:a0:94:
                    24:7b:33:c0:4b:1c:c4:e1:fe:1d:1b:22:06:4c:58:
                    d0:f6:37:1f:ea:b6:54:da:40:d5:f8:69:ec:6b:ea:
                    06:7a:15:72:ef:ca:d4:24:ba:d2:c7:b4:9e:e0:a4:
                    8c:bd:51:9f:b4:a8:07:e4:bf:5a:5f:93:df:68:a4:
                    d1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A7:7C:B9:6D:D5:15:EF:EC:1C:93:0A:9A:E7:C1:C3:43:A9:4F:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/023535a0-65ed-3941-9398-6d7da6b34d96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:b6:ff:f1:74:a9:5a:c4:6c:cd:45:bc:32:3e:f4:f3:d6:0d:
         2d:6a:2a:7b:db:72:02:44:36:56:82:14:29:85:d0:12:55:1d:
         b9:d4:ff:c0:32:a6:c9:36:4d:51:d3:24:e1:2d:39:07:fc:0b:
         3c:cc:0c:d0:d0:ad:de:21:d0:b6:fc:55:ca:44:79:c4:ab:6f:
         6e:db:25:f0:0f:8a:80:54:ab:a0:84:ad:4e:bc:c3:a9:13:fe:
         0e:ea:3e:11:13:33:dc:f6:13:5e:b9:84:95:b1:dc:3c:e9:e5:
         e7:06:52:10:9d:f9:67:12:ad:ca:a8:99:9b:5a:6d:92:07:db:
         20:fc:1a:e9:fb:29:35:7a:b0:af:e3:4c:2a:82:ba:cc:a2:a8:
         f9:9a:4f:e7:8b:d5:e8:35:d6:5c:9f:a3:dc:b7:c1:4f:4e:0c:
         fb:0f:6f:36:17:03:a7:0c:d0:22:28:1d:5b:54:df:0c:1e:4d:
         8a:fa:d1:19:73:1d:6d:64:ae:11:4c:51:40:10:7a:c8:d6:da:
         ce:45:65:24:5a:be:de:d8:43:0f:b3:d4:44:56:75:5b:14:9e:
         b8:a9:a1:e1:92:7f:db:ec:4e:de:1c:52:22:65:50:25:1d:f6:
         c6:88:09:6b:f0:4a:64:38:7d:d8:1b:50:49:bf:b5:37:8b:d3:
         41:28:71:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 12:46:30 2026 by rpki-client