Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/088ee300-5336-35ea-9c77-90c9913e99a4.roa
File:                     088ee300-5336-35ea-9c77-90c9913e99a4.roa (raw, json)
Hash identifier:          wKlON+LDsvc5d3vUV2FCazh3V92IcSP06Hxam9tx9Hs=
Subject key identifier:   3B:4C:82:0E:BE:BE:CB:E9:D4:D7:D2:F2:0B:EC:4E:F6:A2:17:2D:74
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584E428F2B3E559522D92B90C5F0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/088ee300-5336-35ea-9c77-90c9913e99a4.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        153.72.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:2b:3e:55:95:22:d9:2b:90:c5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=f9f8e5c5-0135-4d56-bce2-b9bd71a60de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:85:26:5a:87:74:a2:4d:87:ce:08:22:87:b5:
                    ad:2b:0f:6a:a0:a1:29:60:a5:f8:dc:e6:20:df:25:
                    24:b3:5c:11:62:b4:7a:44:88:64:a4:ba:01:5b:2e:
                    86:e4:c9:bb:f9:f9:06:1c:44:d6:23:5f:06:f0:8e:
                    e1:40:e1:6b:38:58:ec:9a:15:c9:ca:58:06:24:ae:
                    ef:79:5a:1b:ec:db:c5:ca:ee:d6:30:12:25:4e:f7:
                    01:ed:7d:82:8f:53:d9:f4:92:b1:b3:86:eb:01:b3:
                    07:06:a9:0a:ce:85:42:d1:70:62:05:66:d1:81:8e:
                    63:56:ae:83:c9:5e:19:59:22:8d:5a:e4:93:40:90:
                    83:33:2c:43:00:61:8b:72:58:3f:76:76:18:c0:35:
                    14:99:8a:f6:2a:fe:e9:57:96:41:dc:78:c6:ff:a0:
                    1f:3b:fb:72:aa:2a:5a:dd:b3:fe:c8:91:0d:7d:02:
                    05:e8:50:79:27:b9:b8:49:59:6a:fe:e9:3b:38:49:
                    12:83:eb:a6:fa:3f:e1:5f:05:63:3a:71:1c:25:59:
                    2a:c9:ad:23:87:dc:9d:32:a3:2e:ab:91:79:7b:8c:
                    c5:10:d9:b0:d9:14:0b:bc:88:4e:7c:a0:6a:02:31:
                    84:5c:46:f1:cc:f7:e7:96:8b:e5:ba:81:a5:d6:18:
                    1f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4C:82:0E:BE:BE:CB:E9:D4:D7:D2:F2:0B:EC:4E:F6:A2:17:2D:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/088ee300-5336-35ea-9c77-90c9913e99a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.72.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:5d:11:dc:e0:b3:2c:b1:23:b6:6f:73:d9:27:8e:b1:c4:7a:
         3e:fd:1a:4d:9f:31:18:50:b5:af:da:4b:3e:ce:16:c6:99:a9:
         34:43:03:e9:31:7e:9e:b9:52:6b:76:c9:8f:74:7f:41:3a:7d:
         00:21:2c:bf:6d:07:95:8d:53:2a:3f:d0:f0:75:de:84:bb:ca:
         f0:f1:a6:03:a0:56:c0:ce:e4:a1:f1:54:38:ae:93:0f:8a:0b:
         84:80:7e:57:fb:80:42:71:38:de:96:82:3e:ce:46:3c:b7:9d:
         88:4c:28:eb:d9:6f:1c:ec:f8:e3:ea:a7:3d:c2:a3:b0:e2:ed:
         81:64:6f:98:83:dc:fe:72:e6:7f:de:b2:81:7b:af:f7:fd:1b:
         11:75:fe:6e:35:76:37:70:0c:11:b0:3d:c9:fc:b1:5f:78:82:
         80:ac:f6:25:e6:28:2c:89:76:55:96:2f:ce:b8:6b:60:c8:12:
         33:7b:15:bf:d2:0b:71:7d:df:68:7b:88:ad:c9:d5:a2:c9:05:
         34:8d:db:e0:a3:56:57:de:a3:e8:09:15:ad:a3:6a:ca:3c:19:
         e4:a0:8c:9d:a3:64:01:98:7f:14:4e:a3:6a:0e:4f:a7:9e:ee:
         22:9f:35:1e:c1:6a:88:4b:07:8b:77:bd:fd:f5:bd:ab:15:ec:
         80:13:21:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:22:19 2026 by rpki-client