Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/5686fe2e-ed37-3926-a65d-91d386293e00.roa
File:                     5686fe2e-ed37-3926-a65d-91d386293e00.roa (raw, json)
Hash identifier:          W2PxSxNXX6m+vxJG6YUTpOjee6Pl/Oh3J3qDnSnHzpY=
Subject key identifier:   DE:D5:60:B8:71:A5:DA:98:72:57:3A:52:54:2A:32:F0:5C:2E:C6:00
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584E6F3A4B1FD8DE715DE1145D80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/5686fe2e-ed37-3926-a65d-91d386293e00.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     51964
IP address blocks:        140.209.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:4b:1f:d8:de:71:5d:e1:14:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=f06a962c-0c25-4b19-909f-b24a17720073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:55:b3:a1:1a:e3:a3:2c:14:60:cc:4e:59:
                    64:88:36:2a:99:22:26:a0:ff:dd:5f:34:ac:58:b8:
                    ce:c0:0c:ec:f4:4c:41:90:19:64:9b:c7:88:f8:c0:
                    ce:ee:01:33:ad:a6:99:27:84:1f:9f:61:9d:2e:b0:
                    17:e7:db:95:23:08:8d:0a:92:48:36:26:c1:e3:16:
                    69:78:d4:1a:57:05:8c:c4:76:cb:56:78:86:b1:61:
                    82:58:69:41:1c:ec:0a:16:ed:7a:f3:b6:52:67:fb:
                    fb:79:d1:de:f0:7a:16:51:96:f3:b4:a4:09:83:f4:
                    86:0b:db:27:a4:e2:30:a2:cd:a9:d6:de:16:5c:02:
                    d4:ba:79:5e:93:9d:b6:4f:25:b2:67:ef:b4:83:13:
                    15:bd:6b:6e:43:2a:f3:b3:14:b3:54:a8:9b:2f:d5:
                    66:f4:a7:14:57:95:47:ba:e5:bd:f0:69:3b:37:75:
                    e0:30:48:5e:b7:3b:ca:fe:c4:07:6d:7d:d5:e8:f9:
                    11:79:c0:3f:c0:9f:60:77:ad:1c:86:2f:92:0f:eb:
                    28:d0:3c:cf:d3:c6:c1:d4:eb:a7:db:e4:29:24:31:
                    fe:79:6c:4d:59:42:5f:29:4b:a8:0d:9f:59:ca:ae:
                    92:e8:bd:25:6d:0d:46:8a:a8:26:44:4b:bc:64:b3:
                    19:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D5:60:B8:71:A5:DA:98:72:57:3A:52:54:2A:32:F0:5C:2E:C6:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/5686fe2e-ed37-3926-a65d-91d386293e00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.209.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:8e:ad:a2:6f:39:ac:3f:9e:bb:f7:cc:6b:36:63:c1:b2:e2:
         d0:48:17:9c:56:df:37:eb:27:7c:67:0d:56:c3:59:8f:62:57:
         7d:53:02:7d:99:18:19:e2:dd:12:de:21:53:b7:e7:ae:9f:02:
         0a:3b:04:5b:7f:91:aa:ef:fd:83:a5:ec:50:bb:bb:fb:30:62:
         3d:3d:4b:8f:b7:be:83:2e:0e:4a:9b:6d:d7:4c:40:b7:a0:ed:
         76:4d:f8:5a:7b:5d:e5:9b:00:e9:8d:8e:a9:88:fc:e4:d8:d0:
         e1:30:12:c0:e2:31:c2:55:1e:05:29:19:6d:27:24:42:66:7d:
         3f:b9:8d:45:96:39:2d:31:ff:88:2e:c8:79:95:ac:c9:37:4e:
         78:96:be:2f:db:49:de:78:24:c7:8b:b9:c9:23:0d:77:ab:ef:
         3e:ca:80:e0:08:47:a4:9e:5a:1b:1e:72:2a:1f:40:95:14:00:
         01:9f:20:8e:5d:f1:e2:22:cb:9b:43:89:04:c5:cd:13:46:2a:
         21:c1:86:50:a7:94:a0:16:52:ec:4a:38:6a:ed:1f:83:3b:d1:
         bc:72:5e:20:6b:22:75:8f:3a:58:5f:96:c6:ed:1a:a6:aa:88:
         31:93:53:37:35:02:73:fe:26:c8:6a:47:0a:4d:49:8c:4c:8d:
         70:13:ae:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:58:04 2026 by rpki-client