Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0631ab6f-ebed-3f82-b0a7-2d804f867d28.roa
File:                     0631ab6f-ebed-3f82-b0a7-2d804f867d28.roa (raw, json)
Hash identifier:          XBKw75kWP8sQanHxLXvbKmCgwnwj28jLYVw5mlgFdG8=
Subject key identifier:   10:6E:6D:21:62:FF:4D:6A:F6:10:01:00:A0:ED:39:36:F9:05:A3:77
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584E76FB974BAA639752AF1D7D00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0631ab6f-ebed-3f82-b0a7-2d804f867d28.roa
Signing time:             Sat 11 Jul 2026 15:40:49 +0000
ROA not before:           Sat 11 Jul 2026 15:40:49 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     394089
IP address blocks:        66.159.192.0/19 maxlen: 19
                          130.41.252.0/24 maxlen: 24
                          134.238.0.0/16 maxlen: 16
                          165.1.128.0/19 maxlen: 19
                          165.85.96.0/19 maxlen: 19
                          208.127.128.0/18 maxlen: 18
                          208.127.192.0/21 maxlen: 21
                          208.127.208.0/20 maxlen: 20
                          208.127.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:fb:97:4b:aa:63:97:52:af:1d:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jul 11 15:40:49 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=d6251df5-0f16-46f0-b90a-4c40ba893253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:66:c6:1e:61:8c:af:e3:fc:1e:49:78:b2:7e:
                    cd:51:51:60:74:bf:b3:8a:f0:61:e2:e6:50:44:ba:
                    dd:10:b0:ad:d0:4f:0d:6b:b0:95:70:83:23:13:cd:
                    fe:cf:df:d8:5d:97:ca:66:da:09:9f:f2:8f:7b:56:
                    c4:cb:da:aa:28:cd:8e:eb:3d:8b:9d:b9:a1:0a:6a:
                    05:81:da:a0:10:9a:c0:00:38:b5:be:a7:a7:f0:ab:
                    d1:ff:5a:72:d3:fa:a5:3e:68:ac:f7:39:41:e9:98:
                    0d:9a:36:27:3b:fa:c0:21:21:72:cf:4d:ea:b4:5e:
                    29:4d:ec:e9:85:c4:58:ed:e8:93:40:70:c6:eb:a7:
                    8d:5a:c8:eb:67:6b:88:07:63:25:d5:93:40:e4:e7:
                    22:45:74:15:6b:ff:4d:61:a9:a7:4c:51:bb:68:94:
                    d2:e7:31:de:4e:72:92:ea:7b:0a:12:da:56:3d:36:
                    08:db:c9:61:ae:55:bf:34:0f:9e:b4:8c:b6:33:ec:
                    1e:f6:18:7c:9e:39:d6:37:53:84:b8:a5:c9:c1:4b:
                    61:94:83:e9:e4:26:cb:1b:be:cb:fe:fc:f8:7f:c6:
                    8f:46:2d:fb:c5:70:35:d7:f6:56:cf:80:e2:65:37:
                    d0:72:ed:77:76:1a:9e:01:68:a5:ff:04:38:97:0e:
                    f5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6E:6D:21:62:FF:4D:6A:F6:10:01:00:A0:ED:39:36:F9:05:A3:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0631ab6f-ebed-3f82-b0a7-2d804f867d28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.192.0/19
                  130.41.252.0/24
                  134.238.0.0/16
                  165.1.128.0/19
                  165.85.96.0/19
                  208.127.128.0-208.127.199.255
                  208.127.208.0/20
                  208.127.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ff:41:39:9d:78:2c:eb:d9:cf:b1:4c:2b:54:0c:c6:21:9b:
         10:82:63:7f:b1:74:ce:60:22:b7:fb:bc:93:4a:8d:af:2a:6f:
         55:68:3f:0f:fa:e4:f0:e3:55:68:48:3c:85:f9:d1:cd:0d:4e:
         e7:49:f8:cc:0b:cd:b2:d0:2d:1e:51:47:45:c6:07:f6:f4:c5:
         c2:e4:fb:93:54:e9:92:d3:f8:d4:9c:e7:aa:a5:b0:89:1c:72:
         3b:76:6f:c8:7b:1d:67:1d:32:17:a5:19:5f:c9:63:47:ef:00:
         db:f8:a4:69:85:ad:08:31:83:cf:c0:7b:c4:07:75:fc:a1:e1:
         fa:39:da:bc:a5:4d:34:ba:d3:ce:46:45:02:0f:fe:f2:44:fa:
         66:58:d7:9b:82:e6:32:2c:66:21:d2:2c:c2:b1:8a:0e:96:8b:
         59:d3:03:68:bd:15:b3:d1:21:7a:29:9b:51:db:d2:9f:5b:73:
         45:2b:03:1c:6c:b0:d8:55:76:f6:eb:d1:e0:dc:7b:b8:40:62:
         f9:0b:95:73:21:d9:16:77:8a:03:17:cc:21:fc:dd:8d:eb:c6:
         97:c6:06:35:ee:10:75:59:c5:14:68:98:df:f1:01:7d:b1:d6:
         94:e0:b1:54:97:23:e1:9b:0d:0c:79:31:57:53:55:51:95:38:
         25:c2:4e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:55:04 2026 by rpki-client