Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/07c05704-41cc-3f84-bf9b-7a84aaa2a9bb.roa
File:                     07c05704-41cc-3f84-bf9b-7a84aaa2a9bb.roa (raw, json)
Hash identifier:          Ypsds1J9vBohFx2dzDC9B8XAG5hQBiriYH+StxS0BT8=
Subject key identifier:   56:61:AD:7E:E2:74:E8:04:42:4D:27:10:30:4B:84:03:F8:9A:0E:1B
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584E4129D9471A1265B7D0B0CC90
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/07c05704-41cc-3f84-bf9b-7a84aaa2a9bb.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     396982
IP address blocks:        165.85.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:d9:47:1a:12:65:b7:d0:b0:cc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=aa3093df-8cea-491f-911b-44c2f115b7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:37:3e:1e:42:ef:89:16:ee:46:8f:70:dd:
                    bf:3a:a8:69:1e:8b:85:5e:9a:5c:14:5a:b1:a3:85:
                    31:ea:df:f6:7d:f6:84:2e:d6:28:c2:27:79:9a:fa:
                    2c:a5:73:54:c7:63:ab:b1:6e:4a:22:34:bf:89:4a:
                    9c:6e:f4:6c:5b:f6:3e:82:44:e5:b6:1f:a3:52:a7:
                    de:7d:dd:17:ed:75:58:8c:91:78:08:82:11:d0:71:
                    ef:86:d3:37:40:79:65:a1:ed:7e:78:9d:94:9f:68:
                    d4:50:5b:e8:13:de:89:7e:a8:a3:a9:ac:3a:14:d0:
                    63:b7:ac:be:29:16:99:8d:4f:b7:e2:73:56:0b:e3:
                    5e:09:bf:94:e9:60:68:77:27:01:1d:4b:9d:fd:35:
                    b6:35:ac:74:4e:d1:be:f6:b5:17:a4:47:f9:12:18:
                    a7:81:cd:38:d8:f0:1a:a5:cb:ed:3c:44:cb:cf:bf:
                    a5:7b:57:22:ea:61:cd:a9:df:a3:c7:f7:31:f5:46:
                    6f:cf:ca:57:e9:5f:1f:34:b0:77:43:8d:3f:93:77:
                    9a:df:cf:41:67:62:12:98:f7:dd:7c:41:a9:03:6f:
                    db:57:75:5e:33:85:1c:77:cf:33:d2:0c:4f:8f:fc:
                    6d:9d:16:31:99:18:df:14:82:1f:e1:a3:cf:29:45:
                    52:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:61:AD:7E:E2:74:E8:04:42:4D:27:10:30:4B:84:03:F8:9A:0E:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/07c05704-41cc-3f84-bf9b-7a84aaa2a9bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:92:5b:ca:25:ee:56:4d:35:85:5a:c4:6a:91:28:ef:de:7a:
         76:7d:78:53:7b:e9:8a:59:6a:f7:19:ee:1e:fd:82:b7:eb:d3:
         c4:ac:14:eb:9f:79:a5:af:b9:f4:c2:d5:24:c0:6a:eb:9a:d5:
         8d:6d:0f:ef:ee:cd:dc:1e:a2:8a:9b:13:20:af:db:25:f0:cd:
         b8:9d:62:f4:bf:4b:b7:9e:06:27:8a:f2:09:36:e9:96:f3:e1:
         90:55:e7:38:41:26:36:22:1f:1e:78:f7:cf:8a:49:5f:0e:72:
         36:01:39:1b:4f:3a:6e:fb:ca:c9:3d:4f:cf:8f:f7:68:8c:c7:
         fc:c0:f0:08:76:51:a7:00:4c:b1:35:d4:de:76:31:67:77:9d:
         f3:66:11:41:6a:ce:3a:f0:ac:a3:4b:3c:69:ae:35:a9:49:3d:
         6b:8c:00:aa:1c:19:93:ac:de:d9:13:fd:e4:ec:ba:fd:8c:9a:
         09:71:29:71:45:fe:4f:a2:9a:c8:d5:4e:36:e9:5c:f7:69:ec:
         8e:b0:58:6f:d0:d6:67:c9:0f:42:ea:8f:2c:98:23:44:db:a2:
         79:db:3f:84:06:ed:e2:d6:99:e7:09:0c:dc:a8:0d:cc:87:4c:
         2c:07:00:dd:50:6d:14:1d:39:d7:30:55:68:84:bd:53:42:6b:
         99:a1:01:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:54:29 2026 by rpki-client