Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/584374a1-56bb-3541-b268-476cfa717b68.roa
File:                     584374a1-56bb-3541-b268-476cfa717b68.roa (raw, json)
Hash identifier:          vf+7MLTxFsWG1QYG0DLFl2ztb+TWWLh3p6YLgRU4RxI=
Subject key identifier:   51:16:FB:DC:F5:32:EA:05:D1:4B:4A:FE:7C:62:2E:32:D9:98:3D:71
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584EEA8760A67F8A13BA5960A940
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/584374a1-56bb-3541-b268-476cfa717b68.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     63199
IP address blocks:        209.249.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:60:a6:7f:8a:13:ba:59:60:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=b8c0505f-b965-48cd-a194-333f06a026c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c2:44:50:fa:94:79:9a:99:45:a9:fc:78:9d:
                    62:7b:69:97:6f:98:84:1c:09:7e:a4:ae:80:63:60:
                    52:13:aa:41:1f:d7:3f:84:49:f9:b9:fc:f7:a8:ae:
                    fa:6a:94:69:93:e0:7c:02:ae:92:aa:45:7f:50:0c:
                    67:df:02:73:99:ad:7d:f6:16:67:00:be:7d:a1:88:
                    58:03:c6:fa:95:3b:1a:76:3e:95:b0:cf:f3:38:a5:
                    c3:c0:f7:eb:8a:e1:65:1f:d9:d9:bf:3f:98:e4:73:
                    27:cc:8d:34:53:4a:ad:74:09:ec:95:3a:20:33:d8:
                    a2:55:56:6a:8d:a9:28:d3:97:0d:aa:3b:39:7e:31:
                    ed:0d:d7:25:8f:17:b5:d5:71:5e:35:11:f3:3c:0f:
                    0f:75:26:9f:04:f1:e8:bf:e7:12:ec:9c:5a:70:36:
                    1e:94:cb:8d:04:22:ae:a7:f5:c7:32:1b:eb:6a:94:
                    4f:ba:c2:d3:81:b5:c2:9c:d3:f4:94:91:69:47:fb:
                    c4:03:68:81:b0:cc:07:5e:7f:30:12:78:10:d7:52:
                    4e:d5:3b:51:0b:11:92:6e:0d:7d:d0:fd:c3:cf:8c:
                    26:26:8d:84:89:b6:b3:f7:fe:be:32:d7:4c:78:ea:
                    e5:96:f9:6c:19:f0:c7:06:83:88:1b:0d:ff:ee:c5:
                    0b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:16:FB:DC:F5:32:EA:05:D1:4B:4A:FE:7C:62:2E:32:D9:98:3D:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/584374a1-56bb-3541-b268-476cfa717b68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:0f:d1:39:64:c0:52:79:0c:4a:20:21:44:05:5c:d5:bf:ee:
         33:f0:98:d0:e3:6a:3c:cb:7e:77:1d:29:d1:be:14:79:c8:37:
         85:9e:40:ec:49:ea:7d:88:4d:78:38:23:0e:3c:e6:ab:5a:b4:
         04:0a:c9:30:4b:b4:97:fb:8c:41:57:bc:a7:e4:d8:9a:d3:3c:
         f6:55:1e:bb:25:84:56:80:5b:55:7e:00:47:9d:5a:4d:48:d5:
         44:92:2d:45:c1:cc:7e:7b:c8:39:0d:c3:a9:0f:ec:ca:92:0f:
         a8:87:b5:31:5c:3f:0e:59:00:c9:0b:d5:9a:c3:74:96:05:c3:
         9a:22:ce:e0:6f:0d:24:b4:79:2e:d7:05:56:ab:5f:fa:bf:6d:
         d0:e2:01:89:c5:4a:b5:34:f5:ec:50:4f:d6:65:2d:0b:3a:d0:
         10:c0:2f:d4:2d:f4:66:1e:da:e3:60:ec:09:c9:fc:49:b9:4a:
         cd:38:d4:33:a5:d7:9a:03:e3:dc:8a:2f:29:1c:02:99:55:bb:
         a0:fe:58:14:89:fa:95:a7:6d:fa:91:78:2c:b1:8f:ae:f4:8f:
         4e:35:5d:72:c8:28:df:67:fc:a6:ab:bd:7c:86:a6:8c:94:92:
         1d:53:24:e5:20:47:0b:a5:8b:a9:24:d9:5c:f3:3c:09:07:52:
         57:88:b1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:02:57 2026 by rpki-client