Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e8b7d53d-a278-38d0-bc7e-6d10b9e247c4.roa
File:                     e8b7d53d-a278-38d0-bc7e-6d10b9e247c4.roa (raw, json)
Hash identifier:          m4KDnt/54/pen9dRfgVCrHNj0WQn/XzcYq6oQ5u9th4=
Subject key identifier:   84:E9:FB:C6:4C:DC:1A:13:13:42:C1:DF:38:46:04:91:5E:77:57:4C
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584F63F82F38FBCBA5248B5A6300
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e8b7d53d-a278-38d0-bc7e-6d10b9e247c4.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     394089
IP address blocks:        144.125.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:2f:38:fb:cb:a5:24:8b:5a:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=73bf2a99-c4fb-4eac-bad6-ecdd7ab22f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7f:ef:50:c9:a1:0b:e0:b5:01:56:ef:7c:c8:
                    b3:d7:be:4f:97:fc:0c:d2:25:20:f2:9a:56:c9:23:
                    f3:9c:57:be:83:2a:2b:63:4a:3e:e8:fc:f9:a8:a3:
                    4f:0a:bd:aa:2d:46:27:7e:42:df:e0:aa:a2:0e:d7:
                    3b:8b:f7:a4:08:4a:b5:95:e5:c1:22:89:63:5a:e5:
                    fc:51:e7:37:9b:42:d1:80:27:f6:c8:91:32:a2:32:
                    0b:8a:e6:7e:ca:61:49:88:03:de:3e:54:9f:aa:e0:
                    ea:1b:67:43:d7:b2:c1:c6:c5:c6:2c:dd:9f:3e:af:
                    18:55:c8:77:bf:5d:32:80:39:6e:19:a3:90:3f:c6:
                    43:ed:db:2c:d1:be:64:86:63:e0:66:b9:21:12:34:
                    c7:5a:8d:be:62:81:e3:af:b2:b7:48:60:a3:47:ff:
                    63:2c:b5:78:0b:9d:43:03:31:8e:c2:ff:f0:9b:de:
                    cb:b1:90:df:4d:a5:32:31:7b:e2:f1:8d:0b:38:17:
                    cb:95:01:89:af:19:51:b5:6d:89:ce:a6:7c:1e:37:
                    7e:18:4d:eb:ba:57:8a:17:71:3b:ca:c7:95:3f:aa:
                    45:3d:12:19:3e:3e:81:29:9e:83:60:8b:7b:cf:e2:
                    18:b7:3f:61:9a:22:0d:96:53:ff:39:99:b1:4f:46:
                    dd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E9:FB:C6:4C:DC:1A:13:13:42:C1:DF:38:46:04:91:5E:77:57:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/e8b7d53d-a278-38d0-bc7e-6d10b9e247c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:0a:a9:df:86:f7:18:18:79:2b:c8:5c:3f:aa:7c:23:c7:9d:
         c3:34:fc:71:27:f8:36:d6:18:4c:f8:0c:95:f0:68:a9:e9:ec:
         48:8b:74:0f:34:dc:f8:e6:e2:d8:bc:25:ae:dc:6e:70:29:b0:
         8c:16:2b:8c:de:92:cd:ba:0a:cf:4a:a5:00:39:ad:4b:8e:cf:
         94:82:69:9c:e0:c6:b2:9d:be:52:36:52:25:5e:a8:be:ba:58:
         19:1f:a7:78:d7:16:ea:af:18:1f:eb:b4:70:d7:97:83:b9:be:
         b5:af:92:cd:d3:cc:61:95:f6:a8:36:96:cf:2f:fa:b7:06:1e:
         92:72:17:f2:e7:d0:2c:d9:9e:3a:72:9b:1e:f4:be:9d:53:eb:
         97:3c:07:ca:a4:ff:00:f4:ba:cf:65:c0:e5:72:52:e6:aa:59:
         20:31:3c:e3:51:f4:18:b6:ba:b8:85:2e:00:7c:aa:57:9c:b8:
         3a:3a:c6:dc:6f:a7:fa:14:5f:24:19:8a:f6:0d:8b:fd:29:82:
         8c:e3:c7:52:0a:eb:a3:77:44:d6:f1:0e:a5:98:cb:ca:32:5f:
         81:3e:18:21:6b:86:e7:b5:6c:69:48:65:fd:fc:e6:d9:95:fc:
         b2:00:51:b8:c6:a4:0e:6f:6a:a9:70:1e:06:cf:4c:24:c3:ed:
         b4:72:44:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+C84+8ulJItaYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk
NzNiZjJhOTktYzRmYi00ZWFjLWJhZDYtZWNkZDdhYjIyZjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3H/vUMmhC+C1AVbvfMiz175Pl/wM0iUg8ppW
ySPznFe+gyorY0o+6Pz5qKNPCr2qLUYnfkLf4KqiDtc7i/ekCEq1leXBIoljWuX8
Uec3m0LRgCf2yJEyojILiuZ+ymFJiAPePlSfquDqG2dD17LBxsXGLN2fPq8YVch3
v10ygDluGaOQP8ZD7dss0b5khmPgZrkhEjTHWo2+YoHjr7K3SGCjR/9jLLV4C51D
AzGOwv/wm97LsZDfTaUyMXvi8Y0LOBfLlQGJrxlRtW2JzqZ8Hjd+GE3ruleKF3E7
yseVP6pFPRIZPj6BKZ6DYIt7z+IYtz9hmiINllP/OZmxT0bdJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFITp+8ZM3BoTE0LB3zhGBJFed1dMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvZThiN2Q1M2QtYTI3OC0z
OGQwLWJjN2UtNmQxMGI5ZTI0N2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkH3cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG0Kqd+G9xgYeSvIXD+qfCPHncM0/HEn+DbWGEz4DJXwaKnp7EiLdA80
3Pjm4ti8Ja7cbnApsIwWK4zeks26Cs9KpQA5rUuOz5SCaZzgxrKdvlI2UiVeqL66
WBkfp3jXFuqvGB/rtHDXl4O5vrWvks3TzGGV9qg2ls8v+rcGHpJyF/Ln0CzZnjpy
mx70vp1T65c8B8qk/wD0us9lwOVyUuaqWSAxPONR9Bi2uriFLgB8qlecuDo6xtxv
p/oUXyQZivYNi/0pgozjx1IK66N3RNbxDqWYy8oyX4E+GCFrhue1bGlIZf385tmV
/LIAUbjGpA5vaqlwHgbPTCTD7bRyRHE=
-----END CERTIFICATE-----
Generated at Mon Oct 26 11:18:49 2026 by rpki-client