Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/20d83c39-4fad-3f6e-bd0f-dc85a9b1fda9.roa
File:                     20d83c39-4fad-3f6e-bd0f-dc85a9b1fda9.roa (raw, json)
Hash identifier:          fp7mo9JH/sfXqTkePWZxIBvWzGk86yYNzTLMKXoLOWU=
Subject key identifier:   B4:E2:26:6C:55:E8:C1:7F:BF:18:92:5D:30:36:43:BE:C3:7C:63:05
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584F6292C68C46E31277FFF40000
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/20d83c39-4fad-3f6e-bd0f-dc85a9b1fda9.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     394089
IP address blocks:        144.125.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:c6:8c:46:e3:12:77:ff:f4:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=60a24b2f-1e26-4d4e-8f16-4bace6438fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9d:12:75:c0:3d:40:2f:94:26:04:74:39:8b:
                    5e:e7:e4:1d:e4:bd:3e:48:b8:91:c6:bc:46:b1:da:
                    b3:2b:8e:f4:71:7b:ac:3e:18:b9:45:f6:e0:d3:46:
                    a4:e3:23:de:d0:ad:6c:e6:4d:cd:8b:30:ef:19:84:
                    5f:1a:c1:2f:61:91:04:f4:ad:22:82:18:fa:e7:fd:
                    05:d5:68:1b:88:7c:bb:5c:fd:d8:4b:ac:64:bf:e9:
                    b0:42:ca:bf:24:0b:7a:f5:36:2c:83:4d:1b:f7:f6:
                    d9:23:86:28:f9:1a:a7:8d:1c:74:53:14:1f:26:af:
                    68:cc:47:19:f9:00:51:d0:ec:68:5a:81:6d:d5:f3:
                    c4:56:6e:cb:65:d4:56:27:85:55:27:5d:e4:da:f4:
                    84:9a:6c:f1:9e:19:95:34:85:52:bc:20:49:19:47:
                    33:09:54:fe:60:b5:27:e0:8c:bb:1c:67:0b:58:99:
                    ec:17:b9:5c:5c:18:a4:be:7b:97:6b:e3:43:da:cd:
                    96:8f:73:fc:ad:e4:0d:36:ca:d8:1b:38:f6:d4:67:
                    d4:dc:59:bc:d7:5f:5a:29:f6:9e:b6:b5:01:3e:03:
                    77:c8:4f:12:25:45:fb:9a:c4:9e:63:0b:f8:f9:df:
                    91:40:61:2f:b0:bb:40:f7:ab:6f:b4:1d:91:33:4e:
                    97:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E2:26:6C:55:E8:C1:7F:BF:18:92:5D:30:36:43:BE:C3:7C:63:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/20d83c39-4fad-3f6e-bd0f-dc85a9b1fda9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:ad:e7:d2:d7:92:7a:c4:0f:1d:a6:7e:58:f2:10:f6:95:a6:
         91:ae:66:2b:d6:e3:3b:55:03:28:83:89:db:05:95:d9:68:cc:
         25:0b:a0:49:8a:c1:50:72:e5:1f:56:92:7f:db:f5:01:ab:d6:
         c1:5f:a0:ab:73:b4:22:91:c6:2d:52:1a:88:6d:90:dc:3a:e5:
         94:dc:a3:77:26:4d:0a:f6:3a:a5:42:95:8c:1a:5a:4a:82:66:
         38:fe:ae:68:da:36:34:7c:ac:5b:af:ea:50:26:fe:66:36:7a:
         e2:8e:a2:83:c5:bb:56:64:98:d9:d6:a1:bf:d8:6b:8b:88:f7:
         10:1f:75:4f:9d:af:da:1b:12:4a:79:81:c5:35:11:2f:c1:47:
         44:2b:ba:84:ee:74:f0:a3:56:20:86:45:b2:f6:60:98:fe:9d:
         6d:fc:f0:0b:93:4d:a4:31:7a:02:2a:19:2d:b6:43:1f:08:91:
         09:fe:b0:95:25:4d:87:11:0f:dc:76:c7:6f:ce:1d:d8:c2:3b:
         65:b4:ad:89:25:c1:45:3d:4b:2c:41:fe:55:dc:d4:44:bc:af:
         f2:36:08:89:7b:e0:64:2f:17:08:ee:83:4f:5c:d5:b8:0d:8e:
         5e:11:9f:76:a1:dd:06:dd:0b:91:23:e2:b5:d1:aa:8b:64:52:
         59:3c:bc:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iksaMRuMSd//0AAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
NjBhMjRiMmYtMWUyNi00ZDRlLThmMTYtNGJhY2U2NDM4ZmU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp0SdcA9QC+UJgR0OYte5+Qd5L0+SLiRxrxG
sdqzK470cXusPhi5Rfbg00ak4yPe0K1s5k3NizDvGYRfGsEvYZEE9K0ighj65/0F
1WgbiHy7XP3YS6xkv+mwQsq/JAt69TYsg00b9/bZI4Yo+RqnjRx0UxQfJq9ozEcZ
+QBR0OxoWoFt1fPEVm7LZdRWJ4VVJ13k2vSEmmzxnhmVNIVSvCBJGUczCVT+YLUn
4Iy7HGcLWJnsF7lcXBikvnuXa+ND2s2Wj3P8reQNNsrYGzj21GfU3Fm8119aKfae
trUBPgN3yE8SJUX7msSeYwv4+d+RQGEvsLtA96tvtB2RM06XLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLTiJmxV6MF/vxiSXTA2Q77DfGMFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMjBkODNjMzktNGZhZC0z
ZjZlLWJkMGYtZGM4NWE5YjFmZGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFkH2AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALqt59LXknrEDx2mfljyEPaVppGuZivW4ztVAyiDidsFldlozCULoEmK
wVBy5R9Wkn/b9QGr1sFfoKtztCKRxi1SGohtkNw65ZTco3cmTQr2OqVClYwaWkqC
Zjj+rmjaNjR8rFuv6lAm/mY2euKOooPFu1ZkmNnWob/Ya4uI9xAfdU+dr9obEkp5
gcU1ES/BR0QruoTudPCjViCGRbL2YJj+nW388AuTTaQxegIqGS22Qx8IkQn+sJUl
TYcRD9x2x2/OHdjCO2W0rYklwUU9SyxB/lXc1ES8r/I2CIl74GQvFwjug09c1bgN
jl4Rn3ah3QbdC5Ej4rXRqotkUlk8vKU=
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:49:14 2026 by rpki-client