Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8f661662-189f-3150-a176-ffadb0f28abf.roa
File:                     8f661662-189f-3150-a176-ffadb0f28abf.roa (raw, json)
Hash identifier:          1CbI4q9qSWwF8ZWC464bdW/E3T52d27CoA5jGVi/7t4=
Subject key identifier:   64:FA:02:73:3B:A3:3A:0D:11:87:66:14:37:E8:1F:8B:5A:B4:DD:91
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584EAE8196ADE865D9E19542C980
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8f661662-189f-3150-a176-ffadb0f28abf.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     54538
IP address blocks:        165.85.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:96:ad:e8:65:d9:e1:95:42:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=123aa4d8-0bea-44bd-a394-596a5073badf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ac:3b:72:cf:bb:c7:a9:b1:30:08:02:44:80:
                    b9:8a:d5:dd:9d:b6:70:1d:6f:40:8c:57:2f:5a:f6:
                    fa:83:4c:45:3a:c0:8b:7a:4d:ce:d7:67:f7:d3:79:
                    16:90:ea:98:0d:46:61:8b:0d:7c:f3:2a:39:9d:9e:
                    75:00:a8:12:fc:cb:0e:e1:b8:ba:74:62:df:66:df:
                    5d:9c:c6:5c:8b:ab:0f:08:ed:a0:f0:67:65:8c:6a:
                    fe:7b:e0:c4:25:84:bf:c3:94:27:07:52:92:fd:56:
                    06:b0:26:5d:9e:67:60:88:c2:6a:50:06:f2:65:ba:
                    3d:d5:c5:23:d0:5c:19:85:cc:76:6c:1c:84:75:c5:
                    86:53:c7:04:21:e2:4f:8c:80:bc:d7:27:83:d9:f3:
                    e4:9e:29:2f:94:5f:ee:1c:d0:10:8e:26:76:af:93:
                    dd:bb:57:14:25:37:72:d5:0e:b0:ba:78:6a:50:48:
                    8c:da:56:b0:03:c2:92:c1:e3:05:f5:8d:ac:59:ed:
                    14:4f:5f:34:e3:16:10:65:18:7f:b5:62:b5:3f:08:
                    1a:db:c6:b0:ca:10:74:eb:ed:15:b4:5a:c5:14:ae:
                    87:b3:64:2a:99:57:de:b9:3d:3d:93:41:e3:15:f7:
                    65:b8:f8:89:54:a1:82:c4:08:07:c9:98:b0:31:05:
                    32:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FA:02:73:3B:A3:3A:0D:11:87:66:14:37:E8:1F:8B:5A:B4:DD:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8f661662-189f-3150-a176-ffadb0f28abf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ff:2e:e2:93:86:67:18:d4:85:eb:ce:f8:d1:2e:1c:29:b7:
         fd:67:dd:95:06:d2:b4:4a:13:00:3a:1e:5f:0a:5d:a8:50:12:
         72:a4:36:34:80:b5:5b:be:c4:05:d5:c5:a1:b5:d0:b4:d3:55:
         a3:b8:e1:22:4f:c4:7e:58:f5:42:e6:0d:43:35:c1:4c:b1:46:
         8c:78:17:99:e3:e8:a6:f2:74:88:53:25:99:cc:83:69:1c:f1:
         0a:89:7f:cb:ff:35:18:0d:5c:ec:9c:ae:1c:21:61:2c:f7:e5:
         b8:ff:16:41:fd:4a:10:41:0f:ae:2f:ba:74:8b:7b:da:88:71:
         8e:67:1e:b0:06:bd:3d:9a:c6:83:63:e8:c8:4b:00:44:08:b6:
         82:bb:63:c0:7b:5c:13:d3:99:4a:b8:7d:ba:b8:12:bd:26:c8:
         75:04:f0:0d:b0:c7:9d:09:f1:45:0e:cc:6e:03:53:bb:6e:72:
         d8:ec:18:c9:fc:8d:e0:41:1b:6b:37:e0:91:d5:07:b0:10:ec:
         59:7a:a5:63:0a:27:4f:0d:a9:f5:32:f5:25:af:06:02:73:f1:
         94:ea:aa:ed:0d:25:43:d8:db:5c:ca:16:da:47:82:b9:25:06:
         1b:84:3c:6c:31:7b:18:f8:c2:11:e2:a0:20:b5:15:7c:72:b1:
         d1:e4:45:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 12:06:19 2026 by rpki-client