Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b0e3a31c-20b1-3659-b551-cfc92a5f53ba.roa
File:                     b0e3a31c-20b1-3659-b551-cfc92a5f53ba.roa (raw, json)
Hash identifier:          Iak0wYNa7UcGV78Wtej6EU7xUOzdmnL/nTHa5sdezCU=
Subject key identifier:   60:5E:87:E3:6E:C1:46:C1:CB:6D:97:7A:73:97:CD:F4:ED:93:D5:9F
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584EEA87458CAF2900755BF2FB80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b0e3a31c-20b1-3659-b551-cfc92a5f53ba.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        159.234.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:45:8c:af:29:00:75:5b:f2:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=19817dae-f0bd-4b89-8c4c-8676508d56f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:95:3c:6b:f6:96:c8:f5:d7:9a:d4:43:56:a0:
                    cd:30:f8:04:61:f8:8d:7e:55:92:f0:3e:b2:23:2a:
                    9f:70:f0:a3:4f:89:29:06:38:21:5f:bc:b1:6f:21:
                    cd:81:c2:17:74:d0:e5:dd:6e:95:5d:e6:7c:81:fa:
                    81:9d:5a:8b:4b:c2:80:23:96:5e:64:f5:84:6d:0e:
                    62:63:fe:8d:f7:3f:83:a4:8f:82:90:55:5e:15:dc:
                    03:9c:b5:c7:1d:b7:3b:5e:c4:51:1d:28:2d:ff:e3:
                    26:57:5c:3c:69:ea:29:d7:f4:ee:84:a1:b8:4b:57:
                    4c:85:71:7d:86:d1:99:32:86:73:6f:4e:f1:96:9f:
                    f9:b1:32:02:af:c9:55:4e:11:f0:b9:e0:4b:ac:37:
                    7a:cc:f6:b4:fb:d3:58:7c:6c:46:d2:b9:20:c7:e8:
                    61:6c:af:81:95:79:02:e0:b5:d1:f4:49:22:44:ae:
                    c4:de:e5:91:7b:9a:8d:a3:61:4a:8e:1e:8d:75:86:
                    f4:40:a3:82:2d:6b:8e:b9:4d:60:ce:e6:69:9e:5f:
                    dc:67:41:e8:64:67:0d:8f:37:6a:99:04:88:55:25:
                    29:35:08:01:66:d5:b7:85:27:ad:4b:3f:63:ee:1b:
                    f7:74:4e:1c:e5:f7:b2:8a:89:20:4e:f8:be:02:be:
                    cb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5E:87:E3:6E:C1:46:C1:CB:6D:97:7A:73:97:CD:F4:ED:93:D5:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b0e3a31c-20b1-3659-b551-cfc92a5f53ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.234.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:7d:70:4a:77:4a:bb:2e:61:fc:35:38:e4:fb:43:b3:fe:e7:
         e0:aa:6c:78:f5:88:b2:93:44:8c:05:cd:b1:b8:33:af:3e:be:
         66:1a:37:2d:32:9b:d7:cd:c2:09:e1:64:b0:e1:43:93:90:58:
         54:8f:c9:83:35:21:24:f5:17:36:e9:72:11:80:9e:93:a9:d9:
         78:8c:f1:f7:de:00:aa:a6:6c:72:8f:30:92:6f:90:6e:50:4e:
         6f:b2:b6:9e:d5:f1:2e:d3:68:ff:cd:d9:ef:83:05:79:52:08:
         63:e9:e1:fd:c8:49:0b:5e:38:5f:38:84:b9:43:04:f5:a6:de:
         37:b9:4f:9c:fd:cc:89:8e:da:65:0b:27:17:40:f4:50:77:e6:
         61:20:b1:d2:74:fb:b7:af:14:dc:44:8f:aa:f0:54:6b:d5:41:
         be:b0:e2:70:e3:a6:81:c6:f7:d8:05:da:a1:eb:4d:e0:02:27:
         5d:3f:0d:29:2b:b5:40:f0:da:f8:1f:db:9c:d6:5b:ae:b4:26:
         d1:53:78:b8:4b:7e:97:99:c8:92:44:bb:43:7c:9d:4e:ef:cb:
         73:ec:49:4d:77:86:ff:0e:f3:4d:a1:33:ac:a7:c5:c0:23:a2:
         13:77:33:70:11:8e:48:b1:58:93:60:f2:65:00:b1:f9:db:15:
         eb:3b:57:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:33:30 2026 by rpki-client