Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3216a6cf-7a55-3c3b-a655-0ffb26947896.roa
File:                     3216a6cf-7a55-3c3b-a655-0ffb26947896.roa (raw, json)
Hash identifier:          0a6YHNgOry1ywB1z4sohyg5fV3pB2/lkvlPRp5o64CQ=
Subject key identifier:   3A:57:12:C0:C2:C7:68:DB:D5:45:04:11:BB:B8:93:D4:E9:1E:C9:9D
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584F77835A2FEF98AA9E8CA07F00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3216a6cf-7a55-3c3b-a655-0ffb26947896.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     394089
IP address blocks:        153.72.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:83:5a:2f:ef:98:aa:9e:8c:a0:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=c58bf17b-5412-4daa-984e-228ec614821d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fc:19:be:24:71:e7:56:9b:a4:45:f1:97:ab:
                    1e:d5:3b:b2:04:30:93:b6:f3:d3:c6:c7:66:78:91:
                    9b:b8:92:45:97:2d:32:d6:bc:58:03:c8:ef:f5:0f:
                    68:b6:07:9e:e4:b9:e8:3b:cb:9f:25:b4:1f:8f:ee:
                    fe:f5:51:41:3c:3a:99:2a:c8:94:1a:0a:98:94:c4:
                    43:a1:61:4e:ca:2e:a5:64:6c:76:5b:49:c2:60:cc:
                    b4:ef:0b:83:9c:24:a3:e8:90:24:9b:c9:57:4e:8c:
                    3c:76:28:7c:bd:e0:1d:04:b6:52:84:e5:95:d3:19:
                    c9:5b:a6:38:ec:d3:2e:96:80:db:e3:14:c9:2c:f0:
                    1c:f0:12:65:7f:89:81:6d:12:31:a2:11:8a:fa:2c:
                    da:9b:9c:1e:58:16:39:30:19:21:ac:1f:bc:3f:48:
                    72:0f:09:cc:3e:96:43:54:99:1d:94:83:95:dc:20:
                    2e:64:19:3f:9b:17:7d:db:e8:f3:0c:d8:76:6f:49:
                    21:1f:1e:ce:46:d3:ba:e2:5d:e2:35:2f:4a:ae:9e:
                    00:7b:04:5c:ae:ba:46:0a:7b:b9:c8:00:11:b3:f1:
                    9e:a7:88:2a:8b:5e:23:92:90:01:f2:28:54:f2:ed:
                    83:33:39:e7:5e:7a:66:cb:24:e7:63:de:e4:13:e5:
                    ae:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:57:12:C0:C2:C7:68:DB:D5:45:04:11:BB:B8:93:D4:E9:1E:C9:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3216a6cf-7a55-3c3b-a655-0ffb26947896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.72.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e8:78:d2:94:d9:88:65:80:69:3f:9f:8b:08:52:72:27:6a:4e:
         45:5e:3a:c0:17:f9:5e:25:66:5f:21:b1:85:3b:99:52:31:c5:
         56:98:9c:38:47:d9:06:3b:4b:7a:1b:f1:f9:36:23:86:35:41:
         83:0d:86:37:1a:7d:5e:3b:23:98:0f:b6:ac:d1:f3:0a:05:9d:
         ff:7d:77:67:11:90:6c:e4:a7:95:f9:2d:30:20:ef:4e:04:11:
         0b:37:7d:56:9c:fd:3f:d3:20:87:27:4a:9e:35:2c:82:52:39:
         85:bc:81:54:14:5e:39:1f:ba:bc:34:75:2d:57:8f:17:e8:ef:
         c3:3c:fe:6c:2c:10:a8:50:88:b9:5a:dd:1f:80:3f:2d:83:73:
         cf:cc:fe:00:52:b2:72:3a:41:9b:c9:1e:89:fc:e2:2a:75:22:
         4c:57:55:d6:f9:c0:f0:ce:05:61:ba:94:03:2f:e7:45:55:6f:
         08:bb:07:1d:3f:8d:ab:fb:cb:db:b7:4f:56:68:12:e8:d3:d4:
         48:f4:5d:7f:fe:ee:27:2c:be:72:e3:1c:d3:a3:17:a0:79:d8:
         cf:9e:90:3b:47:e1:b7:33:2c:3c:8b:d0:1d:ef:4d:4a:d8:a3:
         b0:a5:e1:58:20:8e:8e:19:76:78:ef:dd:ff:ba:9e:d4:7c:21:
         cb:f5:78:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:34:12 2026 by rpki-client