Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ee8a790a-c46e-334f-a166-440d0516bad4.roa
File:                     ee8a790a-c46e-334f-a166-440d0516bad4.roa (raw, json)
Hash identifier:          gum2xxf5Ndv10oHwaZOhSIgvtcHT7zLTHfCuC59ocgQ=
Subject key identifier:   9F:46:E8:BF:8D:4C:60:99:12:81:60:90:0D:35:16:23:62:79:78:66
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584EED5209EC22E11726D15AA430
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ee8a790a-c46e-334f-a166-440d0516bad4.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        134.238.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:09:ec:22:e1:17:26:d1:5a:a4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=792157ef-5fde-4bf5-8cdb-91c131a3aa7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:50:0c:11:ed:89:46:2b:e3:dd:28:d8:c7:46:
                    a9:f8:f7:86:b2:6f:25:eb:b5:cb:57:96:49:df:c8:
                    16:16:36:e5:40:e1:86:e1:33:32:a4:3f:1d:ea:4b:
                    68:4c:04:10:cc:85:67:1e:1c:39:f8:e5:17:06:7e:
                    54:bb:4b:7e:8a:98:07:86:6c:9a:9c:21:d5:ce:3b:
                    c3:c3:74:b3:38:7b:f2:ad:9e:09:6b:52:8d:20:fd:
                    46:08:78:97:57:ff:3c:cb:f8:b7:8b:5f:1d:00:2a:
                    a5:a0:60:59:37:77:d7:dd:d4:1e:3f:06:8f:56:7d:
                    8e:3c:d7:9f:a0:47:74:45:aa:18:04:8e:76:15:a5:
                    72:58:34:5e:fc:68:12:5d:b1:20:c0:3a:87:43:ae:
                    39:81:50:98:4f:90:03:bc:97:54:87:3c:28:67:29:
                    0c:c1:e8:b7:e9:f0:97:7d:7c:6a:50:93:ea:b2:4c:
                    32:9f:48:e9:5c:32:3d:39:8c:9a:6e:93:b7:69:1c:
                    50:57:a7:4b:35:45:db:74:c3:91:c2:0d:43:c2:9c:
                    c2:cd:01:1e:46:a6:54:7f:e0:25:ce:98:aa:17:ff:
                    2b:5b:3b:5d:92:fb:63:c4:fa:47:e2:c0:1c:cd:82:
                    32:a2:ed:fb:ac:9c:68:58:d4:3a:3b:3e:8a:1f:50:
                    2f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:46:E8:BF:8D:4C:60:99:12:81:60:90:0D:35:16:23:62:79:78:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ee8a790a-c46e-334f-a166-440d0516bad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.238.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:06:b8:ec:4a:80:d2:80:f0:66:69:19:38:ab:81:31:80:95:
         b4:a5:c8:e8:7b:bf:ee:67:bd:d8:7d:84:7b:cd:d8:69:d2:dc:
         c1:72:5c:76:d5:71:44:b9:6d:9a:2f:1c:ab:0f:73:ea:cc:ec:
         b3:3c:2b:79:c2:51:d4:49:2c:a4:da:fd:06:27:fb:d2:e2:47:
         85:d5:86:6e:95:76:ce:5d:7a:dc:42:ed:25:aa:0c:7c:c3:0a:
         2d:13:ca:73:95:51:bc:5f:dd:39:59:0c:0c:8e:b8:2c:fb:7c:
         8c:63:fa:9d:15:93:47:ed:17:14:21:72:2d:72:09:1f:bb:61:
         24:b5:fa:3f:60:65:58:bf:3c:d7:2f:97:c1:00:0d:c5:91:33:
         0c:1e:de:d0:f9:80:4b:6b:16:5d:4b:ae:46:34:eb:d7:4b:ea:
         aa:62:7a:ec:af:2c:c3:c4:6c:49:90:a1:cb:6d:ea:0f:6d:ef:
         ab:d4:04:63:00:9f:ad:4f:2f:7f:06:ea:37:0f:ab:3d:14:f1:
         62:b0:bd:f7:01:72:f3:fa:59:5a:6a:bb:bb:58:68:94:13:23:
         22:0b:1e:73:33:bc:a9:da:04:9e:1e:a1:f8:02:79:77:14:0e:
         9f:eb:b8:f5:45:4c:54:ac:e7:c6:80:8c:d9:0f:b2:ff:52:32:
         e9:3b:f3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:15:12 2026 by rpki-client