Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7e20aedc-cecf-313d-b417-d44a44035c5e.roa
File:                     7e20aedc-cecf-313d-b417-d44a44035c5e.roa (raw, json)
Hash identifier:          uPR+x23ho44OtmbB/MZt7z6QCj9fkOonuIJ2RchQxHE=
Subject key identifier:   E7:27:40:8A:C7:A1:4E:91:3B:55:BF:C2:45:59:9B:AB:38:33:7F:34
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584F7E7DBE4B8DAC0ED526E82840
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7e20aedc-cecf-313d-b417-d44a44035c5e.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     394089
IP address blocks:        165.85.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:be:4b:8d:ac:0e:d5:26:e8:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=3044cf5e-4345-42d8-8a60-ef3a2ae66588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f9:00:f7:35:2c:6b:45:18:49:b6:19:86:44:
                    73:84:20:ee:41:db:91:b4:0d:cf:9f:84:ec:ea:bd:
                    21:cc:95:aa:37:28:d6:c9:d5:67:b5:c6:bb:88:13:
                    82:12:8d:d4:31:c7:f7:cd:07:99:0e:71:9f:ba:ed:
                    98:1d:61:da:4b:69:9c:ff:12:ee:58:13:1a:96:49:
                    b9:50:7b:22:db:4d:dd:08:58:3c:ff:eb:15:13:e1:
                    67:b2:e4:cc:2c:92:de:7f:78:22:fd:4e:fc:c0:45:
                    5e:d7:2d:3d:c4:ec:6c:51:b4:b2:c3:17:18:f7:86:
                    49:07:ad:ec:25:96:ae:ca:a4:04:e2:7b:09:cd:21:
                    a1:3a:9d:0a:61:b5:c7:d2:43:ca:97:ec:87:60:23:
                    32:4b:a7:9f:4f:23:48:3a:97:fa:bb:1f:15:1c:b0:
                    c1:a9:61:02:2e:53:5a:3a:db:04:eb:08:23:eb:1d:
                    71:88:1e:5b:b9:c0:c4:cf:b6:57:b3:12:62:9f:a7:
                    2e:f3:1d:91:25:6b:2d:68:95:27:d3:39:a8:9d:d2:
                    c3:de:d0:d8:5e:5f:b9:31:2b:d9:23:dc:a6:da:ab:
                    ca:03:37:46:56:5c:ec:6b:99:f0:36:17:d9:7c:9b:
                    ee:ee:08:d3:0d:30:c9:d2:7c:83:e8:4a:50:04:8d:
                    48:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:27:40:8A:C7:A1:4E:91:3B:55:BF:C2:45:59:9B:AB:38:33:7F:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7e20aedc-cecf-313d-b417-d44a44035c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:da:34:18:4a:f8:1a:c6:a5:d5:b4:13:4d:61:ed:5d:c0:92:
         7b:7d:97:04:07:78:ae:28:23:c2:5b:ca:0c:ac:c8:f5:86:91:
         1a:54:8e:57:cd:fb:22:75:ed:34:98:53:7e:d3:c7:c3:b2:ff:
         39:aa:30:e1:74:84:e3:fc:69:79:6b:6c:b2:14:42:fe:d9:25:
         a9:06:6b:2b:55:b6:cd:98:8c:df:59:4a:f7:55:82:d4:37:7d:
         81:7e:72:b5:10:9c:1a:4d:74:15:59:68:02:b3:55:a2:bc:31:
         38:1b:fc:da:5b:e8:ad:f4:d1:f5:de:dc:56:57:f2:3a:31:be:
         ed:50:0c:66:cb:ba:d7:df:7f:07:0e:b8:26:76:70:0e:31:04:
         75:e7:a9:c2:1a:4b:83:5c:9b:06:97:37:84:c7:85:63:d5:52:
         ee:78:0e:b5:24:44:c1:56:9d:ea:8a:65:2f:81:0d:8d:8d:10:
         2f:45:a7:df:1d:52:b2:62:b2:ec:02:87:21:93:64:c6:bf:73:
         50:f0:26:52:9c:af:02:d1:b8:a0:87:23:2c:d5:24:e8:10:46:
         84:ee:77:79:a2:9d:fa:57:39:c7:b0:59:1e:9d:4f:8b:c3:d6:
         44:95:61:b1:40:62:4a:9e:9b:19:16:4e:fc:00:8b:7c:3a:b9:
         50:2c:d9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:26:49 2026 by rpki-client