Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/94e428d0-e008-38b0-9d79-303d40351d87.roa
File:                     94e428d0-e008-38b0-9d79-303d40351d87.roa (raw, json)
Hash identifier:          RlIuY4MB9y9doiCXd14RCptEWuuQFh6WCNJtI/LRJhk=
Subject key identifier:   BB:EA:70:DB:FB:03:93:9D:1A:4E:7B:BE:4B:78:1D:F1:67:C0:FD:CA
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D83CB12919E141D99EE1B4B40
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/94e428d0-e008-38b0-9d79-303d40351d87.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396982
IP address blocks:        144.125.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:12:91:9e:14:1d:99:ee:1b:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=964fe078-13a6-404e-9be4-dc1daaaab463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b9:2b:46:2b:58:29:b2:34:5e:a0:d5:e8:2d:
                    62:c3:f0:bd:d2:4d:13:38:f6:92:0a:f2:14:29:8e:
                    10:08:b3:14:d6:7c:c7:dc:07:df:e6:ef:f2:f3:a7:
                    c0:ce:b5:c9:56:a0:9d:60:da:7c:3d:ed:8c:95:2b:
                    f4:93:b5:5d:4a:06:7f:f3:84:2c:b0:ce:09:f7:73:
                    e1:42:e1:30:0e:b8:57:8a:3e:8d:a7:3a:21:56:a9:
                    9e:9d:04:2c:83:37:96:f4:87:02:fd:bc:39:b9:d6:
                    c1:6d:9b:8a:88:59:eb:82:1f:6a:fd:99:e4:9e:62:
                    b8:35:7f:37:f6:5b:fc:e5:f6:99:29:64:4e:3a:2c:
                    c6:9b:e5:07:1d:ed:69:67:e6:32:42:e6:2e:07:36:
                    4d:7d:14:63:c8:f2:1d:9a:79:45:0b:21:bd:35:a4:
                    0f:ba:bb:53:62:9a:c8:aa:45:1c:57:63:1c:ee:be:
                    6c:d4:3c:f9:64:06:4f:a2:4c:d8:1f:dc:53:b3:25:
                    0a:47:e2:ab:b7:f1:ce:a9:3f:a9:5c:b9:d4:c6:10:
                    69:49:03:d7:07:13:57:a6:db:ac:2b:0d:b0:f8:d3:
                    9a:a7:82:33:b4:2b:d6:69:f5:3b:83:60:16:56:3e:
                    cf:02:85:8a:6d:eb:01:82:c4:3a:d7:df:34:9e:5b:
                    5f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:EA:70:DB:FB:03:93:9D:1A:4E:7B:BE:4B:78:1D:F1:67:C0:FD:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/94e428d0-e008-38b0-9d79-303d40351d87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:7b:15:5d:18:eb:46:5e:e7:f0:0f:08:58:d6:a9:86:6c:39:
         20:a5:95:ee:70:eb:f8:2e:aa:83:53:79:db:56:81:a6:61:de:
         b0:2f:09:5c:56:05:0f:3c:ec:98:31:67:40:6c:d3:5b:05:9d:
         06:f7:c3:3c:5d:fc:df:36:8e:65:7b:89:fa:04:c3:69:60:be:
         5e:9f:a9:e3:0f:57:22:29:d0:36:bd:9d:cb:51:22:42:46:71:
         a6:0a:d0:9c:ac:ea:28:95:d3:85:83:b9:34:f0:73:56:31:f7:
         90:f1:78:13:ed:eb:6c:1b:56:d3:43:fc:70:f3:81:a4:c1:84:
         52:7c:b0:31:28:91:d0:5d:ff:8c:18:ed:69:07:43:11:b3:b8:
         5d:05:bc:d3:1f:50:86:52:3e:48:bc:ff:7f:34:cd:54:4e:46:
         7b:25:f3:d3:53:1a:67:a1:e9:5d:7a:be:09:64:54:4a:74:bc:
         ee:92:5f:14:23:74:cb:e3:44:c9:08:85:8c:33:e9:5d:ef:18:
         5d:0a:8d:0c:58:a4:74:dd:90:52:03:6f:d9:5b:6b:ae:57:f0:
         36:82:91:99:1e:8a:23:ff:96:88:aa:da:13:26:71:dc:e0:19:
         35:4b:d8:1b:95:44:a0:63:ec:e9:b9:da:5d:5f:a0:22:10:b0:
         74:43:60:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:25:20 2026 by rpki-client