Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e258da3b-a4b0-3935-a341-bc7a4df92a99.roa
File:                     e258da3b-a4b0-3935-a341-bc7a4df92a99.roa (raw, json)
Hash identifier:          2+v++pO36XkFdIIlGQecSPcJ91H+OMtFMt7H1DVG3dw=
Subject key identifier:   20:F6:F5:52:EA:E5:FE:84:87:C5:D3:77:41:E5:91:05:DB:6E:1C:43
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584E4129C9BF599D12032271AB80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e258da3b-a4b0-3935-a341-bc7a4df92a99.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     396982
IP address blocks:        165.1.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:c9:bf:59:9d:12:03:22:71:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=7e3e35b6-1d67-40c3-ac0b-00a9bcaab061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cb:ff:6d:4d:44:0c:c0:11:75:4d:41:31:13:
                    79:f7:79:7f:c5:a3:0e:00:1a:a2:51:5e:b9:14:3f:
                    28:40:94:2e:90:ae:98:5e:43:00:97:9d:cc:90:57:
                    4c:57:c9:f1:41:87:54:9e:e9:27:a9:10:ce:88:b4:
                    88:ba:4f:7b:56:42:d2:87:16:74:2a:3b:87:7f:07:
                    48:e7:83:78:8c:2a:98:9b:17:48:41:cc:ed:2e:8c:
                    e1:3f:f8:28:50:ed:d1:67:80:f0:07:b2:a3:46:51:
                    c0:c5:16:5a:ae:3e:5a:9d:0a:69:2a:23:3d:e9:9a:
                    87:57:6f:98:47:95:78:9a:f6:e9:45:00:a4:98:38:
                    00:33:4c:58:17:f8:58:52:01:f7:74:c7:fe:df:14:
                    de:13:df:2b:88:71:e4:e7:75:3d:66:94:4f:0a:44:
                    83:ce:bf:02:9e:4e:3c:25:01:02:1d:c4:4f:4f:75:
                    7f:b4:eb:44:6c:c5:fc:1f:8e:82:18:3e:c5:29:cb:
                    99:b2:bf:09:47:b2:a4:78:7a:7a:72:9f:f4:92:78:
                    07:be:ec:37:a8:f6:d4:b1:71:fb:00:df:fb:8e:61:
                    20:7e:ab:33:eb:34:d8:a1:bc:0d:02:0c:88:c3:ba:
                    72:aa:df:1a:f1:0a:f5:4c:23:c3:5b:86:c4:74:43:
                    64:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F6:F5:52:EA:E5:FE:84:87:C5:D3:77:41:E5:91:05:DB:6E:1C:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e258da3b-a4b0-3935-a341-bc7a4df92a99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.1.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:7c:50:e1:67:19:1a:70:84:0e:62:a2:99:ca:26:67:2b:ee:
         0c:a1:d4:ef:f0:1f:a4:bd:e4:bf:cf:21:7c:cd:a3:d3:69:e8:
         04:06:66:29:9b:62:f3:67:ef:b7:32:fe:26:c7:ef:a5:5c:82:
         c7:1a:1a:ca:5d:94:ad:33:6c:ae:af:07:cb:4b:7a:1c:ee:0c:
         bc:8d:cb:f1:6c:8f:91:aa:b8:49:68:60:e8:8f:58:1f:b0:24:
         fb:72:bf:2a:27:f1:be:5a:1b:4a:76:12:1b:8e:c1:69:ec:c2:
         87:bc:c7:b2:ca:f1:d4:9d:b4:0e:0b:4b:16:95:a9:42:96:bf:
         81:4d:df:dc:2a:74:39:73:4d:ef:03:b4:49:1c:b7:82:ce:84:
         5a:b7:00:11:ea:6b:50:d9:94:d8:45:b7:20:02:f5:fa:0d:0d:
         e7:b5:dd:9d:01:d1:fa:b1:41:47:75:4d:79:eb:bc:13:83:2f:
         da:fa:2a:7e:db:5a:33:d7:19:08:b8:54:81:7a:e8:e1:f7:25:
         07:67:7d:16:d3:33:25:4a:48:d5:2c:c8:11:3d:67:2d:e7:45:
         a7:62:73:6e:51:9a:62:4b:60:60:3d:88:fe:3a:2c:3f:e8:07:
         d3:61:7f:97:f2:74:06:aa:88:27:ad:bb:bc:7e:ce:10:27:af:
         f6:70:cf:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKcm/WZ0SAyJxq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk
N2UzZTM1YjYtMWQ2Ny00MGMzLWFjMGItMDBhOWJjYWFiMDYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsv/bU1EDMARdU1BMRN593l/xaMOABqiUV65
FD8oQJQukK6YXkMAl53MkFdMV8nxQYdUnuknqRDOiLSIuk97VkLShxZ0KjuHfwdI
54N4jCqYmxdIQcztLozhP/goUO3RZ4DwB7KjRlHAxRZarj5anQppKiM96ZqHV2+Y
R5V4mvbpRQCkmDgAM0xYF/hYUgH3dMf+3xTeE98riHHk53U9ZpRPCkSDzr8Cnk48
JQECHcRPT3V/tOtEbMX8H46CGD7FKcuZsr8JR7KkeHp6cp/0kngHvuw3qPbUsXH7
AN/7jmEgfqsz6zTYobwNAgyIw7pyqt8a8Qr1TCPDW4bEdENkDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCD29VLq5f6Eh8XTd0HlkQXbbhxDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvZTI1OGRhM2ItYTRiMC0z
OTM1LWEzNDEtYmM3YTRkZjkyYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGpQHAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEx8UOFnGRpwhA5iopnKJmcr7gyh1O/wH6S95L/PIXzNo9Np6AQGZimb
YvNn77cy/ibH76VcgscaGspdlK0zbK6vB8tLehzuDLyNy/Fsj5GquEloYOiPWB+w
JPtyvyon8b5aG0p2EhuOwWnswoe8x7LK8dSdtA4LSxaVqUKWv4FN39wqdDlzTe8D
tEkct4LOhFq3ABHqa1DZlNhFtyAC9foNDee13Z0B0fqxQUd1TXnrvBODL9r6Kn7b
WjPXGQi4VIF66OH3JQdnfRbTMyVKSNUsyBE9Zy3nRadic25RmmJLYGA9iP46LD/o
B9Nhf5fydAaqiCetu7x+zhAnr/Zwz0s=
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:54:28 2026 by rpki-client