Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9e17d291-7008-32a7-a71d-af24fb2e27a1.roa
File:                     9e17d291-7008-32a7-a71d-af24fb2e27a1.roa (raw, json)
Hash identifier:          +tLdg0vQc+yQu3A1Diz/ykCG0z0+2ZdaTV9KA+mhrqI=
Subject key identifier:   DA:C3:4F:C4:CD:19:52:7E:DD:9F:F9:D6:2B:70:A5:36:76:1F:03:A8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D6DE54105ECD9EF357969ADF0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9e17d291-7008-32a7-a71d-af24fb2e27a1.roa
Signing time:             Tue 07 Apr 2026 16:46:36 +0000
ROA not before:           Tue 07 Apr 2026 16:46:36 +0000
ROA not after:            Mon 06 Jul 2026 16:46:36 +0000
asID:                     40352
IP address blocks:        168.93.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:e5:41:05:ec:d9:ef:35:79:69:ad:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr  7 16:46:36 2026 GMT
            Not After : Jul  6 16:46:36 2026 GMT
        Subject: CN=9fce0467-ec55-4881-82c6-8a3f60d36cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:83:a4:ec:31:de:0d:9f:4d:b7:84:10:3a:
                    fe:7e:31:59:e5:19:97:d9:10:ac:ee:28:94:2a:4b:
                    7a:71:37:96:18:00:02:66:2f:8c:63:9a:ae:79:41:
                    d8:64:9f:bd:b2:a0:d7:3f:c8:90:83:ca:b5:95:1c:
                    b9:c2:96:8e:23:8e:95:5a:3c:20:ab:70:f6:c2:a9:
                    fc:3d:46:dc:fd:80:f7:83:92:56:ae:99:95:52:5e:
                    d8:f3:7e:4f:35:bd:89:74:5c:23:d7:f9:bf:ed:6d:
                    24:cf:38:bb:6d:f9:0b:a8:65:5f:39:4e:b2:c7:5f:
                    33:84:bc:77:4a:0a:36:3a:a7:ff:ef:40:8c:e4:c0:
                    40:75:ac:7f:a2:f9:64:99:77:2c:f2:c0:d2:8c:aa:
                    25:d0:82:50:6b:04:11:87:2a:00:c8:74:31:70:67:
                    d0:fb:94:7f:f3:af:1c:d5:a0:5b:13:ab:c7:87:c7:
                    10:aa:90:06:3d:33:a9:3b:f4:f7:4a:08:95:61:27:
                    91:77:02:5d:5f:36:90:10:b3:79:e1:8b:b9:83:f5:
                    b1:88:a8:ec:99:8a:db:4d:64:1f:8f:07:e4:9a:4e:
                    67:0c:2c:96:84:72:c0:3c:c0:9d:59:47:02:cf:d6:
                    12:dd:40:d0:a0:90:c9:a8:89:63:85:85:fe:9a:c9:
                    42:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C3:4F:C4:CD:19:52:7E:DD:9F:F9:D6:2B:70:A5:36:76:1F:03:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9e17d291-7008-32a7-a71d-af24fb2e27a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:7b:8a:2e:86:66:4b:5d:73:18:b4:93:3f:24:e7:21:2e:e5:
         06:d4:67:ea:f1:33:cb:b0:16:90:ca:14:39:86:5a:b7:33:99:
         4b:83:f6:ec:f7:7b:4d:a4:17:1e:5e:a6:10:a9:38:f7:d5:99:
         9e:53:2a:7a:da:35:e0:7d:24:d4:41:e5:16:27:c6:81:d4:d3:
         a5:fe:36:6e:9b:55:85:13:1f:07:ef:07:dc:0e:4f:76:96:62:
         1f:e8:32:47:50:89:ad:20:74:14:26:61:30:79:b8:0e:b6:cb:
         59:0f:3b:49:6f:a7:4a:06:90:50:73:51:df:e9:4d:c3:9f:37:
         f9:a7:33:94:c7:a7:b8:01:dd:b1:c6:28:10:89:96:1a:9f:40:
         84:6f:8a:19:58:18:93:db:05:3e:d0:76:69:be:81:fa:47:a9:
         c0:4a:2c:34:06:70:7f:9f:33:ed:a1:e7:36:c2:62:ab:f1:45:
         c1:07:2e:06:d3:e0:d9:bb:f2:c3:2d:b0:75:ed:7f:7f:b6:76:
         01:85:00:b2:a5:b1:5f:12:a8:ea:c5:23:86:28:bc:4a:36:8e:
         76:41:e9:f4:c8:be:e3:c5:af:10:d1:96:ee:28:43:c1:c1:bc:
         54:c9:51:01:c6:51:65:a1:51:6c:50:af:4c:45:7e:69:5f:13:
         39:7e:f1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 01:28:57 2026 by rpki-client