Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8a96644c-6522-3c8e-aaae-dc2979bc7c9f.roa
File:                     8a96644c-6522-3c8e-aaae-dc2979bc7c9f.roa (raw, json)
Hash identifier:          7hIEdgq2wpIxP1a9Nqt5UcTZfzNyO/oMAWT4hF3ks44=
Subject key identifier:   30:3B:F6:E3:62:CC:2E:1B:0C:36:86:85:9D:17:C3:33:E4:B5:D5:B1
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584F549D6583BBD958541A5D5378
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8a96644c-6522-3c8e-aaae-dc2979bc7c9f.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        147.185.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:65:83:bb:d9:58:54:1a:5d:53:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=debf732e-d6b0-4998-be99-243485f248dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c1:9c:79:d5:e5:e8:2f:f1:e0:0d:f0:8b:5c:
                    41:45:93:d9:e5:7a:a3:74:80:26:7c:13:3f:99:0f:
                    a2:af:84:c6:7a:6b:96:fd:2f:3a:9a:e2:47:7a:80:
                    0c:7e:6f:b1:01:c1:98:ca:f0:b5:24:a0:8b:2f:d9:
                    50:be:dc:32:1b:33:72:c8:31:0a:32:60:7c:06:3c:
                    5a:f8:e4:b1:02:6a:bf:bc:f0:a6:c0:4d:b1:af:32:
                    1e:98:95:5a:75:b6:12:3f:a5:c3:26:60:a4:6f:65:
                    f7:f2:b9:16:47:81:76:4f:8b:08:75:45:15:39:e8:
                    cb:10:c9:ae:b6:d2:1c:3c:2b:b5:ac:85:2d:9f:ab:
                    95:aa:50:a8:0f:be:7d:21:59:d5:0c:f5:1c:af:52:
                    49:c7:9a:d5:29:98:3c:d2:72:ee:ff:c0:74:14:0a:
                    b5:6d:8c:8d:59:1a:12:ba:b8:ec:7f:a7:aa:59:66:
                    21:fe:cb:49:4b:b1:16:b1:d7:17:1a:cf:e6:d5:66:
                    23:e4:21:e1:98:de:ae:89:96:8a:65:cd:4f:8b:c3:
                    a3:a5:df:03:ed:07:c3:b6:66:d0:57:42:cf:db:c0:
                    bf:57:ba:be:3f:25:21:70:a1:f7:57:5d:d4:8d:24:
                    10:6e:d3:4f:b3:e8:6b:a7:08:6e:cb:66:86:12:41:
                    2f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3B:F6:E3:62:CC:2E:1B:0C:36:86:85:9D:17:C3:33:E4:B5:D5:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8a96644c-6522-3c8e-aaae-dc2979bc7c9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:eb:c2:24:b9:53:46:be:7e:ef:e2:b5:56:b7:8f:fc:13:24:
         17:4b:d3:88:70:a4:59:18:5d:c0:69:c5:93:a1:5f:58:35:3d:
         b8:d0:08:a5:a8:fc:81:80:57:b7:21:70:d3:7f:6e:d9:b0:57:
         a7:0b:73:d9:8a:44:b8:16:e0:c2:2b:a0:51:b9:c6:3a:6c:9e:
         c0:4a:a5:b5:da:58:51:9e:a8:46:72:29:76:5f:e2:c4:81:2f:
         d0:50:ba:7c:2f:51:1c:92:40:de:83:cd:1d:ed:bd:9a:8a:e9:
         d3:08:34:06:84:7a:13:e7:b3:a8:aa:84:79:25:7f:c5:29:ed:
         eb:e0:cb:0a:1e:6b:77:e7:00:3c:98:7d:3c:7e:f7:b4:cd:f8:
         4a:af:d2:92:dd:0c:6e:89:3d:05:18:de:53:91:f8:bf:a8:10:
         ed:b0:63:4b:ac:ad:11:47:0f:54:ec:e3:38:7b:c1:ad:ba:73:
         af:9d:97:20:16:99:cc:6e:88:07:06:d7:94:f7:15:29:9e:d8:
         86:16:2c:7b:ff:34:75:19:ea:66:42:16:4e:a4:20:dd:79:f6:
         88:94:e5:0b:76:0c:dd:ec:79:51:58:f4:1e:5b:74:a5:e4:2d:
         99:c9:c9:9e:ad:a0:16:56:34:30:ae:7e:ba:e6:53:f0:5c:fc:
         13:6e:93:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:45:27 2026 by rpki-client