Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0f0d7e2b-20a5-32d2-ada9-742e888f9605.roa
File:                     0f0d7e2b-20a5-32d2-ada9-742e888f9605.roa (raw, json)
Hash identifier:          etN/IvNc2uqg39mb6pA5B22V0qOPk2qzzMduvoMUko4=
Subject key identifier:   76:DF:F2:AD:CE:E4:34:EB:AE:CD:8C:05:E4:6F:BB:DC:34:0C:F7:8F
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584EA7872429CC2575EC7F8CCF90
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0f0d7e2b-20a5-32d2-ada9-742e888f9605.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15290
IP address blocks:        209.146.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:24:29:cc:25:75:ec:7f:8c:cf:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=48d1bbb8-378c-45f6-9ab1-79e47c5709ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7a:94:d1:3f:e0:7b:06:72:bb:7c:5a:6f:42:
                    4a:51:9b:7b:d5:6f:b6:ab:3a:4f:52:05:c5:34:5d:
                    76:d7:fd:8a:01:03:fb:88:cf:61:7d:8a:e3:1b:cf:
                    67:f3:4a:89:78:b4:04:42:1e:ea:a7:55:cb:7d:70:
                    fe:80:77:8c:66:0e:08:20:90:e2:35:05:67:94:4a:
                    c5:01:55:81:4f:a7:61:e0:a6:c9:ed:3e:ca:4d:84:
                    74:e7:08:f7:a3:a9:96:f7:1c:a1:86:4c:37:b3:30:
                    46:6e:e9:9d:d8:cd:0c:ec:30:c4:49:44:93:d9:6e:
                    74:79:8f:e9:54:b5:b1:fb:16:44:a0:5e:b9:9a:c6:
                    bf:f4:71:85:58:2f:86:22:96:c2:48:3b:ab:9b:f3:
                    36:06:12:45:7f:4b:16:91:0e:71:fe:65:8e:3b:4c:
                    3d:69:70:5d:08:23:f2:ab:2a:6c:f5:60:94:10:32:
                    6e:02:b6:ae:c5:20:65:5d:b1:7b:4b:97:aa:b5:cd:
                    ac:41:03:42:cc:38:60:53:5a:29:51:f9:74:42:fc:
                    3e:8c:32:8e:fd:51:e7:de:02:7d:94:79:bd:15:00:
                    9f:bc:5f:cd:9f:0c:ff:f3:30:92:79:2d:0a:71:41:
                    6b:2a:6f:66:66:b7:16:87:a0:db:21:00:23:55:40:
                    db:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DF:F2:AD:CE:E4:34:EB:AE:CD:8C:05:E4:6F:BB:DC:34:0C:F7:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0f0d7e2b-20a5-32d2-ada9-742e888f9605.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.146.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:cd:c9:e0:a5:dc:3a:9b:37:c7:a8:e2:5d:fd:b5:67:63:c5:
         c2:ba:06:be:cd:62:af:66:5d:a9:98:05:48:e3:80:64:89:d3:
         fe:eb:f2:ae:88:04:49:b9:f3:00:d2:22:ca:93:2b:17:b8:6b:
         29:8a:be:f1:33:95:8e:e9:cd:d6:26:03:80:67:7e:6b:a6:1e:
         6b:0f:56:84:77:29:2e:d5:48:78:4e:a5:61:de:35:2b:12:63:
         63:6b:59:ae:fb:5a:af:bc:64:d0:45:d2:e8:96:d9:3c:9a:08:
         d6:c0:d8:03:d9:ce:32:35:44:09:01:ef:e6:06:87:82:97:88:
         1f:7a:5f:67:36:81:ea:4f:f4:e1:07:0f:31:33:bf:63:90:4a:
         8c:3f:1f:70:02:69:17:89:fe:70:bd:f6:42:a9:ae:ea:77:8e:
         dc:49:97:80:24:4c:22:0a:f9:be:6d:1f:0c:37:32:01:72:02:
         14:7b:f7:7f:9a:c5:d1:11:bc:54:84:f2:e4:73:ad:79:b8:50:
         9e:f8:92:34:6b:97:4b:03:e5:10:bc:a3:78:c4:12:b8:46:80:
         3a:62:35:77:27:da:a8:ce:a7:0f:c9:a7:5f:2d:cc:c2:1e:6c:
         d8:eb:bc:1b:45:a2:05:02:61:79:62:8d:fc:a9:2e:67:05:b5:
         e4:88:25:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 12:29:06 2026 by rpki-client