Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/216fd957-6175-3384-9de3-6c2a6f22ea3a.roa
File:                     216fd957-6175-3384-9de3-6c2a6f22ea3a.roa (raw, json)
Hash identifier:          YxCZ44hFff9Ibi9DzCQJvZD3ah5vDu+ouZxE4NFF96M=
Subject key identifier:   CF:3A:18:95:E3:ED:87:86:E6:DD:8C:42:93:B6:67:CE:C6:72:86:45
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D59EA68A3F5EC315DBA49DE00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/216fd957-6175-3384-9de3-6c2a6f22ea3a.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     4997
IP address blocks:        208.39.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:68:a3:f5:ec:31:5d:ba:49:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=022b671d-2bbb-4812-b327-dfb7bdc0abdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:3b:31:16:d9:49:dd:6a:fc:9a:73:ed:8a:
                    9c:20:89:db:63:fc:ae:94:6e:cc:f0:74:2d:23:48:
                    3f:f4:b9:15:70:8d:2b:8e:7d:30:52:a8:5e:9a:59:
                    23:ec:6b:f7:f1:f0:48:f2:a9:69:1b:b4:28:ea:f3:
                    37:79:81:14:a9:f9:5c:89:c1:a5:e7:ba:ee:82:5b:
                    b8:ff:10:c5:24:3b:ea:34:d2:ca:ca:59:a9:cd:c4:
                    32:15:71:c1:f5:f4:c2:f2:59:f9:1b:9e:83:93:2f:
                    8c:98:1f:fd:62:f4:80:50:3a:1a:7c:d4:4f:ba:35:
                    cc:7b:44:db:4a:0d:47:3e:ba:69:c7:d0:d6:06:be:
                    00:d2:74:3b:b7:c2:d0:05:c8:bb:46:85:a0:c8:b9:
                    17:43:e2:bd:9f:5f:5a:e9:99:90:d7:ef:60:fa:d7:
                    a6:2e:3f:03:41:4b:84:8c:b4:26:63:d3:f1:0d:41:
                    29:a9:59:a8:3f:7e:31:36:e5:2c:3e:81:a3:97:25:
                    48:f6:0a:c1:a8:a9:8a:0b:d5:96:33:7e:60:e3:4f:
                    0f:71:10:ba:1a:ef:d1:69:11:08:dd:97:a3:53:6a:
                    4a:9e:8c:4c:be:6f:5c:01:2b:16:18:70:49:57:ca:
                    7b:3c:0e:2a:3c:b8:c0:cf:f9:e4:c6:7c:22:a5:cb:
                    4b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3A:18:95:E3:ED:87:86:E6:DD:8C:42:93:B6:67:CE:C6:72:86:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/216fd957-6175-3384-9de3-6c2a6f22ea3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.39.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:24:32:e7:2a:3c:ad:49:1b:87:12:90:b1:7a:8b:bd:b2:f1:
         75:41:80:a5:9b:3e:33:4c:a9:7d:f2:b4:bb:b9:ba:21:5a:c2:
         f7:ea:97:0f:e9:ee:6b:95:b6:5b:cb:c9:62:e4:69:c4:4e:3f:
         94:c2:97:50:5b:5a:13:09:41:0d:e0:83:f7:33:93:1e:09:d8:
         29:e0:0a:a6:7d:8b:f1:e9:1e:59:45:98:1e:8b:24:f3:8d:72:
         15:c8:6f:52:3c:a6:f7:9a:a5:d5:b0:7f:36:58:46:9e:af:2f:
         a7:45:08:52:ef:f4:e4:b0:22:94:ef:82:d1:47:4b:21:32:fe:
         01:92:e0:62:2f:39:eb:cf:2c:69:92:a1:52:16:10:74:58:50:
         93:5e:18:65:4c:f4:b9:ef:c5:3b:c4:c6:f8:d6:4c:f3:76:98:
         74:55:28:24:1f:05:f9:49:f0:53:ff:3b:2e:b7:18:bb:95:56:
         f5:b0:fb:99:19:f1:36:7a:d7:2b:47:cf:6f:56:04:2f:36:af:
         66:57:dc:ad:6e:aa:9a:d2:82:7a:b3:cc:fb:22:0b:7e:e8:a9:
         be:3b:6a:f6:8f:89:3d:17:25:39:21:a5:50:90:7d:6c:4a:18:
         84:67:ea:87:76:ba:90:5b:37:87:4a:74:48:65:2c:0a:9f:9a:
         6d:bb:fb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 14:24:40 2026 by rpki-client