Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7403d2f1-fdd5-3897-94e7-e40b8959be9b.roa
File:                     7403d2f1-fdd5-3897-94e7-e40b8959be9b.roa (raw, json)
Hash identifier:          c7K9vcMXtA1DTjVrg9r12WbUCk4U+2mzViEi5NHsy2w=
Subject key identifier:   95:DA:57:84:21:18:F1:E2:36:39:9C:78:60:82:75:50:45:70:D6:A8
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584EC7A1CB9EDA41A6A18B226910
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7403d2f1-fdd5-3897-94e7-e40b8959be9b.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        168.149.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:cb:9e:da:41:a6:a1:8b:22:69:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=792f6cb4-0bda-4109-850e-db20b6811d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d5:21:58:b6:80:e0:29:41:36:78:88:26:19:
                    d5:a8:f9:cd:d1:8d:4e:d6:01:26:a0:47:52:6f:9a:
                    b9:d8:38:32:9c:b6:d2:12:7a:70:7b:f2:f3:dc:f1:
                    c1:c0:f1:9d:ab:e8:49:0a:88:88:ab:6b:3a:b3:58:
                    1a:05:a8:63:6e:8c:84:e9:f5:f6:40:78:b9:a7:6e:
                    c5:d7:15:cc:a5:d4:cc:d8:a9:a1:b9:42:83:27:d5:
                    06:70:ba:3a:5b:5c:35:2c:2b:da:d9:61:3d:d4:54:
                    99:17:77:8c:23:94:0b:c5:5e:6a:06:bc:05:e2:c3:
                    2d:a9:db:f7:87:a6:66:57:9d:5d:ad:a1:7e:53:3e:
                    d2:17:58:0b:d6:7f:1f:ca:1d:51:b7:4a:30:f1:0f:
                    82:e6:32:db:b6:45:5e:b8:71:91:49:e0:b5:00:4a:
                    91:a5:2d:11:a2:98:77:9a:f2:95:b6:eb:38:69:ca:
                    42:84:14:e7:fd:ab:de:78:b2:9f:ab:e7:c4:33:47:
                    8e:93:1e:55:4f:4a:82:b0:39:c2:a7:f9:0d:a3:b8:
                    21:56:fa:30:de:95:73:97:7a:21:09:58:a9:1b:5a:
                    2e:34:56:58:21:34:5f:74:b5:11:5e:78:9f:aa:ab:
                    6a:1a:ce:70:1c:43:73:ad:3f:43:08:c1:c2:9f:da:
                    d5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DA:57:84:21:18:F1:E2:36:39:9C:78:60:82:75:50:45:70:D6:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7403d2f1-fdd5-3897-94e7-e40b8959be9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.149.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:c1:d2:89:86:b9:4d:d4:fc:d4:8e:1e:10:0a:a2:c3:19:81:
         de:39:30:34:62:09:f5:60:f9:e3:88:35:aa:6a:b1:41:55:18:
         e4:e1:22:6a:b6:d3:ea:29:e0:fc:26:f7:1a:04:9a:7b:42:c6:
         35:c6:66:f5:80:fc:ce:e0:02:b5:83:31:69:59:09:c4:c5:f4:
         4a:4a:c7:6d:13:3b:85:e6:94:d9:9d:b1:ba:e0:80:38:fe:e7:
         bd:48:00:cc:b8:5c:9e:64:a4:7e:3d:db:72:18:88:22:9f:63:
         c8:f8:e7:2c:8a:06:61:42:b7:69:f3:28:3a:cc:14:3b:2a:ba:
         a5:82:26:65:07:85:55:aa:e2:b7:ef:90:34:63:2c:06:31:7c:
         39:2d:5e:17:cb:d0:06:50:fb:41:0b:bc:3b:b0:f4:73:24:f1:
         38:af:fa:0e:fa:91:4c:fc:41:cc:62:1a:89:a3:f0:10:56:8d:
         ca:16:5a:ce:4c:29:e1:c1:f4:83:d8:21:02:3d:e4:3e:97:aa:
         95:a1:ef:bd:ec:04:fb:78:0a:7c:f8:d9:a7:0e:9a:ec:e3:3b:
         13:b5:b2:af:64:c1:d7:0f:7e:dd:c9:ed:a2:82:cf:2d:2a:87:
         81:5a:6b:19:db:78:6c:65:fe:51:30:3b:5e:aa:f8:f0:ab:62:
         43:89:0c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:10 2026 by rpki-client