Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/4b8c3108-d854-3e08-96c0-7de06a39cafc.roa
File:                     4b8c3108-d854-3e08-96c0-7de06a39cafc.roa (raw, json)
Hash identifier:          WzrZAu7vTcwiGpLM2XlxQF4ksIFBPlBZvCynztLKPL0=
Subject key identifier:   67:06:C8:4A:80:70:AA:32:15:9B:B1:93:B3:2F:24:52:13:C4:63:16
Certificate issuer:       /CN=090cf75b-f998-45e2-a8ea-c4d882201d24
Certificate serial:       010D0C9F4328584D4FC13D99940BA0986D9D8880
Authority key identifier: 14:9C:C7:07:9A:90:D7:69:1D:47:04:E9:AD:6D:E7:D7:CE:2C:7D:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/4b8c3108-d854-3e08-96c0-7de06a39cafc.roa
Signing time:             Fri 27 Mar 2026 21:39:47 +0000
ROA not before:           Fri 27 Mar 2026 21:39:47 +0000
ROA not after:            Thu 25 Jun 2026 21:39:47 +0000
asID:                     11805
IP address blocks:        192.163.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/090cf75b-f998-45e2-a8ea-c4d882201d24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/090cf75b-f998-45e2-a8ea-c4d882201d24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4f:c1:3d:99:94:0b:a0:98:6d:9d:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090cf75b-f998-45e2-a8ea-c4d882201d24
        Validity
            Not Before: Mar 27 21:39:47 2026 GMT
            Not After : Jun 25 21:39:47 2026 GMT
        Subject: CN=24fee6f3-92b5-4e76-a54d-41528e83d285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e5:9e:0a:13:b0:0a:29:34:96:c3:32:5b:47:
                    b4:9a:60:79:25:f2:42:d4:6c:58:ab:7b:7f:a8:33:
                    92:76:d5:61:bf:83:62:c7:29:3c:ca:5d:99:90:e5:
                    11:e7:6a:c1:8b:09:89:ee:21:e3:38:81:17:94:bb:
                    35:32:97:a0:db:11:a9:d6:78:6a:f3:f1:87:93:1b:
                    de:0c:23:16:1e:90:e4:f2:85:80:75:18:f7:bb:65:
                    fe:65:99:ca:a0:fa:68:f1:e0:68:c3:e0:46:42:f5:
                    47:df:8f:3a:f2:4e:64:5c:95:aa:f7:1c:90:17:ee:
                    d7:2c:8f:47:f2:15:6f:30:47:aa:3c:12:cc:8a:f2:
                    7f:00:c4:3c:ef:e5:16:1b:95:1d:ff:a7:d7:cd:24:
                    ca:d0:cb:b4:f2:16:aa:84:a5:a4:33:3f:33:fb:af:
                    3a:ea:21:03:b3:20:f1:2e:a6:cd:0d:72:98:e8:4e:
                    73:1d:3a:ea:43:3a:42:cf:67:ff:37:5b:da:c2:0f:
                    d1:2d:b6:19:c3:b7:26:ad:fd:e9:35:79:7e:9a:3e:
                    07:75:21:68:dd:06:5c:72:81:4c:89:b2:ff:f6:36:
                    32:a6:3d:7d:4b:e8:ef:19:90:a6:ea:88:ff:b2:55:
                    0c:bd:03:21:05:4a:40:5f:2b:96:e3:10:9d:c5:b7:
                    fe:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:06:C8:4A:80:70:AA:32:15:9B:B1:93:B3:2F:24:52:13:C4:63:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/4b8c3108-d854-3e08-96c0-7de06a39cafc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/090cf75b-f998-45e2-a8ea-c4d882201d24.crl

            X509v3 Authority Key Identifier:
                keyid:14:9C:C7:07:9A:90:D7:69:1D:47:04:E9:AD:6D:E7:D7:CE:2C:7D:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.163.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:44:87:d9:b1:ba:ce:e7:38:f9:02:ed:74:14:dd:fe:43:e2:
         45:0e:ef:90:94:56:fb:ea:7a:b3:49:ff:cb:fc:66:de:1b:ca:
         fd:98:af:18:d2:15:53:b5:54:3a:25:a6:e7:55:e0:a8:34:07:
         a6:87:50:9a:40:c6:ea:13:d0:ea:70:12:e7:34:b7:df:a2:c7:
         94:10:22:ce:1f:63:be:79:d9:ae:a8:d4:e3:c5:ce:4e:00:a2:
         f2:4e:90:49:97:23:18:29:d1:6d:2a:00:b5:a0:e0:aa:07:dc:
         a3:74:24:dc:af:84:c4:a3:1e:aa:80:91:44:98:92:0d:63:b3:
         91:cd:d0:c7:64:40:de:86:30:06:8c:d5:59:e2:06:2d:17:91:
         b4:30:b9:65:f4:1a:f8:d4:9d:93:58:15:5b:e1:48:1e:80:06:
         5f:82:e4:38:b9:9c:54:fe:8e:97:07:d8:d5:ad:6f:af:9c:84:
         65:1e:d3:96:43:b1:e3:08:bd:09:55:e3:c3:9e:62:dd:01:b6:
         e9:3e:8b:73:39:ce:65:15:d7:a5:95:ec:80:79:f9:3d:e1:8a:
         48:ab:05:a1:6a:ec:3a:a1:df:d9:fe:0f:cf:ed:38:46:7c:e2:
         52:20:0a:b4:36:5d:e0:32:6c:22:d6:e5:b5:c7:c8:aa:0b:54:
         5e:e3:f6:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1PwT2ZlAugmG2diIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDkwY2Y3NWItZjk5OC00NWUyLWE4ZWEtYzRkODgyMjAx
ZDI0MB4XDTI2MDMyNzIxMzk0N1oXDTI2MDYyNTIxMzk0N1owLzEtMCsGA1UEAxMk
MjRmZWU2ZjMtOTJiNS00ZTc2LWE1NGQtNDE1MjhlODNkMjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOWeChOwCik0lsMyW0e0mmB5JfJC1GxYq3t/
qDOSdtVhv4Nixyk8yl2ZkOUR52rBiwmJ7iHjOIEXlLs1Mpeg2xGp1nhq8/GHkxve
DCMWHpDk8oWAdRj3u2X+ZZnKoPpo8eBow+BGQvVH34868k5kXJWq9xyQF+7XLI9H
8hVvMEeqPBLMivJ/AMQ87+UWG5Ud/6fXzSTK0Mu08haqhKWkMz8z+6866iEDsyDx
LqbNDXKY6E5zHTrqQzpCz2f/N1vawg/RLbYZw7cmrf3pNXl+mj4HdSFo3QZccoFM
ibL/9jYypj19S+jvGZCm6oj/slUMvQMhBUpAXyuW4xCdxbf+1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGcGyEqAcKoyFZuxk7MvJFITxGMWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wOTBj
Zjc1Yi1mOTk4LTQ1ZTItYThlYS1jNGQ4ODIyMDFkMjQvNGI4YzMxMDgtZDg1NC0z
ZTA4LTk2YzAtN2RlMDZhMzljYWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDkwY2Y3NWItZjk5OC00NWUyLWE4
ZWEtYzRkODgyMjAxZDI0LzA5MGNmNzViLWY5OTgtNDVlMi1hOGVhLWM0ZDg4MjIw
MWQyNC5jcmwwHwYDVR0jBBgwFoAUFJzHB5qQ12kdRwTprW3n184sfQEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wOTBjZjc1Yi1mOTk4LTQ1ZTItYThlYS1jNGQ4
ODIyMDFkMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwKMcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADlEh9mxus7nOPkC7XQU3f5D4kUO75CUVvvqerNJ/8v8Zt4byv2YrxjS
FVO1VDolpudV4Kg0B6aHUJpAxuoT0OpwEuc0t9+ix5QQIs4fY7552a6o1OPFzk4A
ovJOkEmXIxgp0W0qALWg4KoH3KN0JNyvhMSjHqqAkUSYkg1js5HN0MdkQN6GMAaM
1VniBi0XkbQwuWX0GvjUnZNYFVvhSB6ABl+C5Di5nFT+jpcH2NWtb6+chGUe05ZD
seMIvQlV48OeYt0Btuk+i3M5zmUV16WV7IB5+T3hikirBaFq7Dqh39n+D8/tOEZ8
4lIgCrQ2XeAybCLW5bXHyKoLVF7j9n0=
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:04:20 2026 by rpki-client