Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/1f285f6c-d687-3140-8ca1-f1ce785e0d48.roa
File:                     1f285f6c-d687-3140-8ca1-f1ce785e0d48.roa (raw, json)
Hash identifier:          JXMl4+6EWkiqGA3q3GIkm5kP9FC+GMGVPkU12/D5F20=
Subject key identifier:   DE:63:07:A3:B2:0A:9D:6A:44:FE:FD:87:3F:94:FD:CD:87:86:A5:78
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584F89A87D02AB133A11564B7C00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/1f285f6c-d687-3140-8ca1-f1ce785e0d48.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     394089
IP address blocks:        74.221.128.0/24 maxlen: 24
                          130.41.132.0/23 maxlen: 23
                          165.85.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:7d:02:ab:13:3a:11:56:4b:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=a4ad02c2-4342-489e-8da1-97c0b6202c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:73:90:0a:27:15:0b:cc:35:69:48:b1:b1:d1:
                    b8:2f:39:0b:0a:fe:28:9d:18:42:6f:ad:db:2d:af:
                    b7:d1:5c:87:ff:12:70:f1:8a:49:85:53:6f:2c:f9:
                    26:eb:d9:60:87:52:e3:2c:39:d1:b4:86:81:a7:15:
                    16:19:03:19:6e:c2:67:35:71:dc:38:e8:a5:e8:d4:
                    9f:9e:50:3b:db:97:70:24:e1:e7:7b:6b:cd:33:82:
                    22:b7:b9:3f:03:ae:61:4d:3f:b0:52:eb:b8:ce:b1:
                    e7:81:79:ef:af:c8:ca:cb:55:37:0c:45:30:2a:d8:
                    2e:11:ba:74:72:2f:6e:22:ae:00:10:cc:53:b8:d2:
                    2d:d8:4b:4b:95:5e:5d:55:36:69:7c:40:77:85:21:
                    40:ec:67:35:57:2c:81:24:af:07:71:0b:0a:5d:f4:
                    a8:46:62:a8:16:0c:7d:60:15:9b:9e:bd:6e:c0:02:
                    6c:0e:39:0a:83:21:ca:1c:6a:c0:d8:90:d8:b3:97:
                    b0:ef:84:b9:4c:ea:5d:cb:36:78:19:62:33:16:07:
                    5f:17:de:15:c7:bf:17:73:10:ef:7e:f1:bc:28:cc:
                    97:d8:1d:f1:03:d1:21:34:a6:b4:2e:03:5a:87:f1:
                    c7:84:ff:30:cc:17:cd:2a:89:9f:6a:4b:f8:97:f7:
                    4f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:63:07:A3:B2:0A:9D:6A:44:FE:FD:87:3F:94:FD:CD:87:86:A5:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/1f285f6c-d687-3140-8ca1-f1ce785e0d48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.221.128.0/24
                  130.41.132.0/23
                  165.85.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:71:bc:1f:5d:2d:a3:7a:f2:bf:f6:35:25:f2:43:2c:4a:3d:
         5f:eb:4e:e9:47:ea:15:ce:be:f3:f0:ed:3a:02:02:81:e7:86:
         7c:ba:14:a9:26:2a:95:d0:b3:d9:58:7b:60:7f:96:3e:20:a1:
         53:64:48:73:21:a7:5c:39:8a:e4:d4:e9:cb:07:a2:0a:ce:50:
         7e:a0:c4:8c:78:3f:7c:10:bb:e4:9e:52:b9:72:49:71:18:09:
         39:f9:08:bd:88:e6:86:3d:22:37:66:3a:1c:6a:68:64:08:5a:
         fe:c2:40:23:3e:b9:7a:95:78:33:68:9a:9c:b9:82:3d:86:07:
         21:0a:34:fa:ee:5c:ca:af:54:61:59:b8:c7:ba:26:c3:61:11:
         6b:ff:7e:69:d6:ee:06:78:68:2e:70:4e:6f:bd:e6:6f:88:ed:
         1e:cb:a0:33:25:26:05:ce:e9:c1:86:51:25:5a:b3:09:30:69:
         b6:86:d9:6a:c5:7a:5b:b8:75:2e:aa:ce:2d:84:91:61:a0:63:
         9f:05:d2:d5:48:8b:34:d9:a7:d5:d8:7d:7b:5c:ac:37:8c:ac:
         ce:3a:1e:2d:95:46:60:be:1e:e6:71:90:0c:b0:4c:76:4d:73:
         cd:6b:41:11:3f:50:54:05:76:36:09:3a:93:ff:3a:1c:d4:03:
         8d:5c:82:32
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE+JqH0CqxM6EVZLfAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk
YTRhZDAyYzItNDM0Mi00ODllLThkYTEtOTdjMGI2MjAyYzdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHOQCicVC8w1aUixsdG4LzkLCv4onRhCb63b
La+30VyH/xJw8YpJhVNvLPkm69lgh1LjLDnRtIaBpxUWGQMZbsJnNXHcOOil6NSf
nlA725dwJOHne2vNM4Iit7k/A65hTT+wUuu4zrHngXnvr8jKy1U3DEUwKtguEbp0
ci9uIq4AEMxTuNIt2EtLlV5dVTZpfEB3hSFA7Gc1VyyBJK8HcQsKXfSoRmKoFgx9
YBWbnr1uwAJsDjkKgyHKHGrA2JDYs5ew74S5TOpdyzZ4GWIzFgdfF94Vx78XcxDv
fvG8KMyX2B3xA9EhNKa0LgNah/HHhP8wzBfNKomfakv4l/dP3wIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFN5jB6OyCp1qRP79hz+U/c2HhqV4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMWYyODVmNmMtZDY4Ny0z
MTQwLThjYTEtZjFjZTc4NWUwZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQASt2AAwQB
gimEAwQBpVWUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAK5xvB9dLaN68r/2NSXyQyxKPV/rTulH6hXOvvPw
7ToCAoHnhny6FKkmKpXQs9lYe2B/lj4goVNkSHMhp1w5iuTU6csHogrOUH6gxIx4
P3wQu+SeUrlySXEYCTn5CL2I5oY9IjdmOhxqaGQIWv7CQCM+uXqVeDNompy5gj2G
ByEKNPruXMqvVGFZuMe6JsNhEWv/fmnW7gZ4aC5wTm+95m+I7R7LoDMlJgXO6cGG
USVaswkwabaG2WrFelu4dS6qzi2EkWGgY58F0tVIizTZp9XYfXtcrDeMrM46Hi2V
RmC+HuZxkAywTHZNc81rQRE/UFQFdjYJOpP/OhzUA41cgjI=
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:06:56 2026 by rpki-client