Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/9380f4d9-f9a2-3a54-b179-24219aaf0f86.roa
File:                     9380f4d9-f9a2-3a54-b179-24219aaf0f86.roa (raw, json)
Hash identifier:          aTRRmpRNHYrv8aETJaGbHakfNQIOES6prenhXu02im4=
Subject key identifier:   AB:D2:1D:84:62:F5:9F:21:E9:5A:AF:5D:9F:EF:B6:6F:30:ED:C7:67
Certificate issuer:       /CN=53672676-56d0-4921-8e86-0b820202ef6c
Certificate serial:       010D0C9F4328584D2BDA1CF1BB0DEC55C6CFA5E0
Authority key identifier: 7E:1A:39:BE:17:56:D6:2C:72:4D:1E:4C:41:C3:9C:00:0C:0F:4A:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/9380f4d9-f9a2-3a54-b179-24219aaf0f86.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     399082
IP address blocks:        207.90.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/53672676-56d0-4921-8e86-0b820202ef6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/53672676-56d0-4921-8e86-0b820202ef6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:1c:f1:bb:0d:ec:55:c6:cf:a5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53672676-56d0-4921-8e86-0b820202ef6c
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=4b8ca684-dad6-4221-868f-1b087e5b38be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:8b:51:6d:ec:76:70:53:d5:af:1e:0b:e1:
                    e7:8c:91:6d:28:b7:aa:f7:de:3f:f5:36:c9:c1:4b:
                    38:79:99:18:f1:1e:c5:45:e0:af:0e:5b:8f:c6:f5:
                    08:e5:45:2c:89:46:72:6e:67:84:b5:9d:c1:52:04:
                    bd:fe:7a:54:bb:33:3a:fa:d2:26:2f:8c:3f:22:f1:
                    83:39:ef:c8:c2:12:a7:98:03:52:32:36:a2:b0:5e:
                    01:74:6c:12:28:8c:20:60:3e:4f:42:0a:06:bd:3d:
                    af:06:db:5a:32:4f:de:e5:97:6f:d8:2f:ba:3d:26:
                    fd:51:49:49:c8:95:c4:21:c9:72:54:26:5b:d9:95:
                    c5:8a:9f:9e:db:01:1b:e8:13:2b:d1:c4:9a:68:8f:
                    12:c5:78:b7:af:c8:bb:75:e0:0e:59:72:27:53:24:
                    97:8c:a0:f3:62:d8:75:0c:b8:e8:4e:d8:95:3e:07:
                    98:8d:7e:fd:9c:f5:7f:22:02:cd:10:14:16:8f:84:
                    47:c6:99:a7:32:2c:15:42:3e:7f:c6:3c:68:45:76:
                    c1:ab:ad:da:41:51:8b:94:88:3d:36:22:5d:b1:7b:
                    9e:e3:7e:4c:ab:00:51:4d:87:d6:60:a8:6e:16:4d:
                    f4:ae:2c:3f:65:9e:4e:a4:f4:ed:f6:d8:f4:98:70:
                    04:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D2:1D:84:62:F5:9F:21:E9:5A:AF:5D:9F:EF:B6:6F:30:ED:C7:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/9380f4d9-f9a2-3a54-b179-24219aaf0f86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/53672676-56d0-4921-8e86-0b820202ef6c.crl

            X509v3 Authority Key Identifier:
                keyid:7E:1A:39:BE:17:56:D6:2C:72:4D:1E:4C:41:C3:9C:00:0C:0F:4A:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:5a:a8:d7:e9:ea:62:04:fb:54:9e:b9:5e:56:1c:fd:c1:93:
         99:11:ce:be:14:11:3f:6f:d0:d1:17:1d:e9:05:46:81:54:a7:
         e7:82:e0:ec:da:ba:e1:96:1c:a1:cb:8c:c5:4f:36:7a:df:46:
         ca:3d:83:ee:01:57:39:2b:0e:6a:f8:32:d9:1c:7d:39:a3:a9:
         2c:3a:e5:7f:71:a6:e8:54:c6:55:07:c8:08:19:c6:aa:fb:44:
         cf:0f:b6:cc:9f:e4:2c:21:8c:8a:af:fc:ed:62:53:c7:46:7e:
         b5:c5:27:ff:4a:72:8c:32:66:1e:46:93:c8:1f:c3:c8:7a:f3:
         e5:45:60:25:a1:1f:48:49:e6:dd:a4:f6:99:56:9e:81:aa:a3:
         90:1e:86:f6:00:14:fe:5e:bc:72:07:3d:5e:0a:e3:60:90:76:
         92:7a:1f:1f:47:99:59:ec:19:ab:52:f9:bb:72:a4:92:9d:87:
         8d:77:0a:8a:95:5e:6d:94:b8:f8:01:2f:05:dc:c2:b6:31:97:
         cc:3c:12:a9:71:e3:22:55:d7:26:4f:d4:05:8b:fc:c1:8f:78:
         ac:a6:8b:a0:00:38:4c:a3:14:46:1a:94:2a:5d:c8:62:87:a2:
         7d:78:54:14:5f:48:b1:f9:f9:e2:af:7d:11:5d:27:86:c8:73:
         1c:a7:23:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:57:08 2026 by rpki-client