Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/398e4597-792f-325b-a18d-1bf902c2c773.roa
File:                     398e4597-792f-325b-a18d-1bf902c2c773.roa (raw, json)
Hash identifier:          fEL5xidsJdY9kthjeA+6xx5A/WKM8eokiQF+ltfhiCo=
Subject key identifier:   40:DE:35:9F:8E:1E:6A:F7:4A:76:74:7C:2D:16:AF:22:0F:9D:B3:DD
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584CEA5D08F8F53B97DA5D30A9C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/398e4597-792f-325b-a18d-1bf902c2c773.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     15290
IP address blocks:        184.94.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5d:08:f8:f5:3b:97:da:5d:30:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=f29acb53-0bda-483d-815c-3a3fc338f2b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c5:9e:d3:7e:94:ae:22:60:aa:c5:ee:27:ed:
                    57:84:2c:48:4c:2d:13:5f:b8:7f:4a:60:c0:46:77:
                    d8:f5:57:57:18:68:11:f6:c3:59:7b:47:05:cb:03:
                    50:67:b2:29:9e:76:a3:87:0f:cf:4f:c9:72:b4:fc:
                    df:fa:2b:e8:41:ef:ad:c4:95:3f:81:c3:67:cb:42:
                    de:dd:6d:6b:39:fa:5c:c6:0e:37:ac:55:2f:c0:e8:
                    68:37:a1:90:a7:79:22:d7:a1:55:71:f4:96:bd:a8:
                    d2:f0:73:e3:50:4b:6e:93:fe:24:ff:ed:34:22:b0:
                    cf:78:c4:19:85:df:89:88:72:8a:be:c8:63:37:31:
                    2b:18:28:93:44:f7:fb:b6:29:4f:2a:6b:3a:73:48:
                    50:07:31:45:8b:4b:2e:59:e4:a4:4d:c6:90:46:b9:
                    45:3f:f2:db:35:c5:8e:89:16:57:a4:38:d9:dd:9e:
                    66:89:c8:67:17:68:ac:2f:a7:ab:b9:9d:89:c0:ce:
                    2f:3e:76:78:04:1a:49:e0:f5:2e:db:1c:5b:bb:8b:
                    1b:c0:9c:cd:6e:70:e2:11:41:46:48:99:fe:52:34:
                    42:3d:f8:8d:ee:c0:aa:aa:a7:c0:57:65:78:1b:9b:
                    59:65:8e:05:ee:08:fc:af:1e:34:1d:5a:a4:4e:9e:
                    02:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DE:35:9F:8E:1E:6A:F7:4A:76:74:7C:2D:16:AF:22:0F:9D:B3:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/398e4597-792f-325b-a18d-1bf902c2c773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.94.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:05:bb:e4:65:58:7e:2d:b3:7d:33:17:27:6e:a2:00:d8:61:
         08:2e:52:87:1e:eb:89:d0:27:27:e0:c2:e4:1d:a8:d2:1c:15:
         0b:97:99:ad:72:46:c1:6d:c9:93:2f:e5:c1:85:d5:e0:e5:54:
         60:ff:5e:ed:a1:d2:dd:09:de:f7:30:b3:08:eb:28:10:88:52:
         89:79:1c:16:1e:6b:b3:b2:a3:d0:81:56:7f:9f:ce:9a:79:2c:
         a5:9d:e6:21:55:b9:93:6e:7d:9f:60:f3:b3:49:03:f2:0b:7f:
         65:5b:5f:dd:2c:87:66:a4:b8:11:cb:12:78:26:30:5c:d6:39:
         ee:a0:02:44:d0:3a:d8:4d:4f:dd:9b:97:b3:ed:a5:d6:b4:20:
         62:54:20:1e:54:73:d3:f8:89:cb:93:be:00:fb:09:d1:50:bd:
         42:02:c8:ab:d1:99:53:38:4e:c7:d1:c4:ec:f4:fc:f0:2e:22:
         4b:f7:96:ad:08:05:41:47:78:e4:7e:1a:92:4b:89:31:2b:2a:
         c1:5e:ea:6d:3e:a8:71:90:7a:83:a4:00:e0:e5:24:4e:15:4c:
         fc:23:39:b9:32:45:96:93:eb:04:33:b6:93:f6:3e:4a:17:57:
         ce:b6:52:78:d9:af:1f:8b:2b:24:25:96:15:6d:d4:d1:27:31:
         99:07:38:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 07:31:22 2026 by rpki-client