Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/8b4b90c9-5903-3d07-af20-7fd0306f47c1.roa
File:                     8b4b90c9-5903-3d07-af20-7fd0306f47c1.roa (raw, json)
Hash identifier:          yL9MTw5LlwdULmaxe2kQf2ncmvour5H13wHzzuriYTQ=
Subject key identifier:   F5:A2:97:DB:74:B9:A7:39:BE:BC:C9:C5:8C:3E:DF:20:FA:DA:14:28
Certificate issuer:       /CN=b89f752a-b36c-4af5-938d-969edb017937
Certificate serial:       010D0C9F4328584F1CC79F8777D00A0F536ED100
Authority key identifier: BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/8b4b90c9-5903-3d07-af20-7fd0306f47c1.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     9025
IP address blocks:        153.46.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:9f:87:77:d0:0a:0f:53:6e:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b89f752a-b36c-4af5-938d-969edb017937
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=f353823b-b890-4569-a15e-9fa5af2d4e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a9:94:27:f1:26:7c:be:0b:c1:cc:d7:fc:e8:
                    90:fb:5e:00:75:46:d0:fc:44:a3:2a:c1:97:89:10:
                    37:bd:28:87:f3:09:3b:8a:96:b0:65:cf:a0:cc:61:
                    0e:61:4a:5c:a0:5e:f8:aa:e3:02:80:f7:31:38:bf:
                    26:55:b3:d6:24:c8:9d:93:c0:54:25:43:bd:8e:2f:
                    c0:4b:f2:3a:c5:9b:ec:05:41:38:79:99:19:75:ee:
                    9d:bb:18:14:97:c2:de:44:8e:d9:ff:a5:13:1d:cb:
                    56:21:8b:32:98:77:b2:97:d2:15:ff:5a:46:cf:2c:
                    c3:c7:17:d2:d7:00:d4:f9:ac:fd:37:d1:5a:01:6f:
                    f6:35:f3:1d:17:31:f8:6d:09:3c:93:d9:1c:74:da:
                    59:bd:02:54:1e:8c:3c:19:b7:93:ee:27:8d:04:b4:
                    1e:78:40:13:eb:09:4e:42:b3:e2:c2:9f:6d:d5:11:
                    bb:3e:c1:dc:38:28:ea:63:90:06:3e:0c:66:f1:e0:
                    a7:b4:80:ce:e3:af:b3:48:03:07:36:71:ba:a7:5f:
                    34:5e:50:80:11:8f:a8:fb:0b:d6:36:5d:eb:ab:8c:
                    29:1f:7a:d6:84:c1:86:31:64:3c:b6:34:27:cb:00:
                    20:39:9d:5e:70:e8:fd:7f:d1:a3:d6:6b:b1:61:4f:
                    04:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A2:97:DB:74:B9:A7:39:BE:BC:C9:C5:8C:3E:DF:20:FA:DA:14:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/8b4b90c9-5903-3d07-af20-7fd0306f47c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl

            X509v3 Authority Key Identifier:
                keyid:BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.46.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:d6:35:83:0d:59:ed:07:2a:0b:4c:a8:77:86:e6:f6:7f:6f:
         12:4f:c6:a2:58:f0:1d:19:b8:e8:f7:70:81:0c:c1:53:da:90:
         8e:cb:6c:31:cc:50:c0:70:d9:4f:69:34:77:3a:21:24:c5:2c:
         ba:51:7e:52:18:49:d6:04:8c:ed:69:c3:a5:7a:2e:1b:c0:c0:
         93:0e:b6:15:7a:25:53:5a:72:9d:e1:d1:94:5f:2e:45:ca:32:
         10:7e:1d:c5:84:28:30:0c:aa:9f:ad:87:f4:f7:fe:50:04:61:
         4c:35:bf:73:97:6c:1c:6f:0f:db:00:05:aa:76:93:b1:d3:1e:
         2c:89:49:95:01:4d:5a:04:bd:4e:9f:3e:4a:88:55:c3:fe:55:
         2a:b3:28:28:7a:e9:a0:59:9b:19:79:15:4b:69:dc:7b:1b:c6:
         43:0e:78:e0:42:05:82:c9:61:de:73:63:e9:ab:23:da:e4:47:
         e4:36:09:51:5c:1b:e5:a4:6c:76:5e:36:a7:4d:e4:8f:bc:de:
         b1:c6:ba:1c:6f:c6:69:69:bc:cb:30:93:4d:31:ba:a7:6f:1b:
         52:29:77:ba:3d:87:7a:fa:ec:77:c4:16:fa:c2:f9:2e:12:35:
         11:03:4b:c4:1a:4e:1f:ce:1d:62:6f:bb:60:a5:af:36:9f:48:
         68:20:be:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:57:51 2026 by rpki-client