Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa
File:                     8b83c5d7-df69-3e4e-8d87-019ffe414958.roa (raw, json)
Hash identifier:          72gw5dtC16cpY46GPj7ypRmeknJ5PaCZKh4sceoFG+A=
Subject key identifier:   14:62:5B:EC:DA:05:D1:E5:13:6C:39:3E:60:7B:97:5D:58:9A:76:70
Certificate issuer:       /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Certificate serial:       010D0C9F4328584D89E0A76D164CA5906A6ED400
Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa
Signing time:             Fri 17 Apr 2026 17:19:58 +0000
ROA not before:           Fri 17 Apr 2026 17:19:58 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     64123
IP address blocks:        128.254.188.0/22 maxlen: 32
                          155.103.128.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:89:e0:a7:6d:16:4c:a5:90:6a:6e:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
        Validity
            Not Before: Apr 17 17:19:58 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=6ae02f67-5673-4c7b-8175-2e1c2b7ad16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4b:6b:48:c0:c9:85:83:ef:2d:65:6e:98:70:
                    81:12:86:93:b5:93:5e:72:c3:10:e9:35:2a:26:a7:
                    3b:70:c8:44:8f:ae:45:d2:c3:1b:e6:c6:a1:cc:46:
                    03:a4:bf:cd:ec:e2:e8:93:11:45:ee:3c:45:50:de:
                    5b:64:a7:87:ca:3a:d4:42:e0:a5:c3:42:5f:5f:53:
                    66:f1:e6:39:23:d3:1e:f3:7d:b1:10:7b:52:6b:88:
                    c0:8b:60:70:0c:88:43:2b:00:46:21:1c:1b:65:6d:
                    f3:ad:58:4a:65:f7:df:a5:a7:1c:3b:ad:0f:86:d9:
                    f1:b2:96:b6:51:4b:93:d4:c4:60:09:1a:3d:75:25:
                    25:b3:38:ed:e5:82:80:ef:ff:1e:a7:3a:56:17:e0:
                    8b:cc:a2:6a:f5:f0:1d:2e:b5:12:17:68:9b:12:99:
                    6c:d8:3c:fc:42:ed:2f:16:2b:74:51:85:85:5c:c2:
                    83:e3:e2:02:3e:3b:4e:c1:c0:11:14:01:6a:05:e6:
                    9c:bf:db:2f:ee:65:2e:a6:7d:90:1a:da:70:e3:d7:
                    49:af:54:54:23:7b:e9:ad:a0:26:aa:db:39:ed:57:
                    69:9b:1d:6f:c9:5e:82:89:c7:2b:44:cb:6e:42:85:
                    71:f6:79:cb:65:74:ac:4e:bc:e0:ef:e6:4a:8e:47:
                    15:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:62:5B:EC:DA:05:D1:E5:13:6C:39:3E:60:7B:97:5D:58:9A:76:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl

            X509v3 Authority Key Identifier:
                keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.188.0/22
                  155.103.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e6:a7:0a:c6:f0:0f:a4:39:a8:f5:9f:9c:a3:2a:c8:c4:9f:
         f7:7e:ca:44:d1:f3:9e:f9:f8:6c:4b:7a:bd:7d:56:83:46:2e:
         ec:b3:23:86:a6:6d:f8:f4:e5:96:72:1a:6f:d7:2c:38:91:48:
         16:98:99:5b:3c:86:a2:f6:7e:a0:77:3f:39:fd:72:be:3c:ed:
         b6:52:f5:74:2f:6b:a1:89:7c:07:54:56:0a:40:c8:8b:25:9a:
         33:45:04:7d:3a:56:93:93:f5:69:28:f2:26:cf:76:3f:f1:7b:
         4a:cc:80:e0:3b:3d:bb:a7:07:1f:03:73:5c:d3:0d:44:71:8c:
         a9:52:c8:69:2f:ca:e1:dc:8b:dc:54:a7:69:fb:3f:95:b9:2c:
         12:69:0b:76:27:d5:89:ef:e9:77:4b:3e:0a:bd:ad:36:90:6e:
         d6:46:3d:7d:fc:c8:e9:47:ff:6f:09:58:62:f2:02:21:9f:a6:
         11:24:e1:4e:73:c4:75:09:90:1f:7a:22:76:bd:4f:c6:3b:f2:
         6d:3b:70:2a:ab:84:7e:81:55:56:d2:4b:ad:8e:e7:ad:c7:e6:
         d8:1a:76:76:c3:85:15:81:5b:13:b7:76:68:27:00:39:a1:db:
         66:16:f3:c4:b3:08:c6:e4:96:b2:1d:c1:a2:a7:5e:29:a2:6f:
         90:33:8c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 18:37:57 2026 by rpki-client