Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0953ab88-0d2b-371e-be5f-8d9985c68ef3.roa
File:                     0953ab88-0d2b-371e-be5f-8d9985c68ef3.roa (raw, json)
Hash identifier:          3F+L+MWIBB8pzIsaFkK03YVTNPM9YerUb+UIxjFpP0I=
Subject key identifier:   C2:A8:22:56:6F:8C:08:48:29:B9:DC:A1:0A:C9:DA:97:3C:62:50:79
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584E104EF1082D17259BE4CE6320
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0953ab88-0d2b-371e-be5f-8d9985c68ef3.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     51964
IP address blocks:        140.209.240.0/21 maxlen: 24
                          140.209.249.0/24 maxlen: 24
                          140.209.250.0/24 maxlen: 24
                          140.209.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:f1:08:2d:17:25:9b:e4:ce:63:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=32086ccf-b0a3-4346-9776-df49e975b514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:f2:ae:9b:3c:76:73:27:7c:75:8d:18:58:
                    5c:89:81:09:ee:9b:3d:ae:3d:2e:8a:bd:90:cf:c5:
                    b7:1f:f7:96:cc:ca:72:af:da:45:ab:bc:58:1d:48:
                    e1:ef:e6:5c:2b:87:2e:da:8f:51:4d:1c:80:92:1e:
                    13:e3:bf:a8:d3:6f:8b:cc:9a:88:fb:a0:d9:67:8a:
                    09:e8:34:27:d7:11:9c:7d:ce:19:f3:1c:17:70:1d:
                    9b:38:5d:be:59:df:f5:e0:2b:08:f9:fc:14:48:d8:
                    ec:1e:71:98:bf:d3:85:ac:35:e9:f2:5c:80:6d:c1:
                    88:64:d8:12:6c:1f:03:20:b4:eb:2e:66:e1:3b:c5:
                    28:a0:e8:92:92:59:61:78:c3:79:06:53:7f:9c:78:
                    31:f1:06:85:02:b8:d9:93:d0:e2:13:ce:1e:c5:1e:
                    37:38:51:59:0c:95:d1:26:b9:8f:98:e8:24:47:57:
                    05:2a:ab:c8:d0:31:83:94:f8:0e:96:40:5d:73:bd:
                    bf:86:df:77:64:bc:85:cd:8d:ff:1a:6c:d0:95:25:
                    8f:98:2b:73:e0:f4:45:2d:dc:34:60:44:47:0a:9b:
                    3b:c8:1f:f5:ba:e7:3d:2b:ca:2c:19:f1:b7:12:62:
                    cb:05:72:e0:c7:4f:4b:17:08:72:4d:76:f4:0e:86:
                    71:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A8:22:56:6F:8C:08:48:29:B9:DC:A1:0A:C9:DA:97:3C:62:50:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0953ab88-0d2b-371e-be5f-8d9985c68ef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.209.240.0/21
                  140.209.249.0-140.209.251.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:83:b8:52:bf:ad:fc:33:30:8e:20:09:f4:96:af:d8:2e:8d:
         5a:9e:39:05:5d:8e:24:a8:a3:1e:98:6f:65:59:fe:c4:7c:3b:
         18:bb:6c:af:bb:ac:8e:2b:31:ee:49:e5:35:9f:e0:21:8b:21:
         a9:d8:ee:13:77:51:80:93:2c:5a:6e:25:6d:cd:a9:96:02:74:
         a5:f9:2f:c4:fb:24:eb:3f:3c:88:03:c2:6b:df:91:31:9f:04:
         60:d2:41:c2:cd:93:24:92:a1:00:cd:21:fe:dc:a5:a9:cb:45:
         3c:d0:8b:57:38:80:0d:0e:63:d3:62:bf:3f:c5:7c:5f:e8:db:
         a8:29:c1:49:95:ff:a7:10:cb:51:3b:c5:35:ab:60:0e:be:2e:
         e8:85:22:6b:93:48:11:0e:09:d2:60:0b:db:88:ea:4a:40:04:
         e4:d2:07:f0:29:2b:c0:c9:11:1e:b1:6d:f7:e2:eb:64:31:b5:
         57:32:50:80:4f:d6:34:e3:9d:18:a6:93:b9:32:8c:b6:91:38:
         9f:96:ee:07:fb:f1:6c:af:87:57:27:ee:1d:be:f9:79:e4:9c:
         28:15:5b:a2:2a:d8:3c:87:eb:0b:a3:5c:15:b3:d0:7c:d2:3d:
         c2:87:70:75:68:9d:9e:01:59:d5:57:b6:d5:83:c6:22:fe:91:
         00:39:21:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:26:43 2026 by rpki-client