Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8c420754-b958-3810-aaf6-ad7773c12be9.roa
File:                     8c420754-b958-3810-aaf6-ad7773c12be9.roa (raw, json)
Hash identifier:          vm4bjtg19QwNN53GApdYFsFcDBo6hR6As8KcdyfsSQI=
Subject key identifier:   94:0A:E1:02:98:9F:E1:82:39:BA:BC:E8:92:9F:8C:26:BD:5E:25:E1
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584DE41B6393C75F6DF9C10B7680
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8c420754-b958-3810-aaf6-ad7773c12be9.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     2763
IP address blocks:        144.125.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:63:93:c7:5f:6d:f9:c1:0b:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=277249bb-1647-4eeb-9614-a649c90097bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1b:14:b5:5e:04:70:34:4f:a0:24:90:ff:d7:
                    ed:54:ef:e1:23:7d:8e:d5:e4:66:ca:40:99:ba:56:
                    9c:d5:bf:b7:75:98:63:43:0c:84:4b:ad:f2:e6:af:
                    c9:2e:72:1b:9f:20:10:fe:b6:25:3d:e3:94:3d:80:
                    d3:05:e3:75:af:9b:df:8b:4e:66:10:69:cf:c3:d4:
                    19:6d:45:b5:4a:32:38:03:4b:c7:e1:95:02:64:30:
                    53:50:6a:71:18:9a:df:d1:b3:d8:10:9e:ef:d2:6e:
                    45:57:89:ec:c5:85:3d:c7:2c:50:ee:08:02:0d:8b:
                    6a:2b:0e:0a:76:0c:ec:2c:a2:37:e8:8e:e0:86:ce:
                    83:d2:35:e0:f4:f4:55:5a:c7:d7:20:c8:1a:e6:3c:
                    d5:18:97:71:55:02:f5:3e:aa:a3:48:a2:69:72:89:
                    cd:26:11:2f:fa:99:6b:f9:93:5d:ad:58:71:02:46:
                    8d:17:5b:90:14:3c:63:dd:1e:da:53:cc:0d:b2:9b:
                    f1:3b:a4:2d:2c:a7:6c:42:24:7d:7b:cd:39:ea:25:
                    4c:36:13:f4:65:32:e4:af:2f:b1:73:ba:a3:29:6e:
                    27:86:a8:a7:ab:f8:36:09:94:62:6a:8a:64:a3:a4:
                    66:f7:fd:95:39:b0:ed:9e:c9:b1:bc:b5:83:c0:e6:
                    e3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0A:E1:02:98:9F:E1:82:39:BA:BC:E8:92:9F:8C:26:BD:5E:25:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8c420754-b958-3810-aaf6-ad7773c12be9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e2:20:c8:f9:8d:e5:77:2b:9f:75:e6:34:9b:b7:94:8e:6f:b5:
         af:ab:5b:90:4b:86:a3:d9:a9:af:0a:ea:18:32:70:9d:f7:31:
         43:fd:bc:b4:a7:e7:f7:9a:b4:50:b8:30:38:33:57:93:c8:c9:
         a9:76:e3:29:4d:46:85:0f:dc:77:b6:a6:89:aa:f9:e6:ef:db:
         84:20:7b:a3:55:46:31:e2:8b:ee:40:95:57:ec:32:3c:f3:4d:
         3c:b8:a7:fc:e0:ed:73:cb:77:41:e4:1e:1d:c6:87:85:6a:ac:
         9d:7f:c0:4d:0e:2c:62:9e:d9:c1:48:fd:43:b3:45:aa:c0:c9:
         2b:5d:2b:ef:ee:4f:fc:a7:01:0c:60:ba:03:44:b7:4c:fe:c7:
         ef:69:50:7b:cb:a8:c3:7c:4e:f8:ea:e9:30:64:e0:26:bb:bd:
         9f:58:ef:88:fd:95:b6:04:d8:6f:c0:03:fd:f4:57:e0:1c:6b:
         ad:21:9a:f7:5f:30:a8:04:6c:b0:75:70:64:c7:ab:41:59:d1:
         16:37:08:c7:2e:c9:62:6b:c4:49:60:f7:0f:75:82:5e:84:f3:
         00:3c:73:af:4c:5a:63:2a:16:0e:a6:a4:89:c9:9a:34:f9:03:
         30:e2:bc:e2:78:4f:33:d3:1b:88:d1:d3:98:0e:60:d1:ea:85:
         8d:5e:aa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:32:07 2026 by rpki-client