Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/59434c4f-2cc1-3fa8-9230-c20bd80e37d4.roa
File:                     59434c4f-2cc1-3fa8-9230-c20bd80e37d4.roa (raw, json)
Hash identifier:          b4v7ZV5exl6yz9HuAcjyv7FgwPx+b07vpp9+/m0bbog=
Subject key identifier:   BA:DD:18:D1:34:D0:BC:E2:29:D8:2E:F6:C7:C9:49:01:C7:EA:17:97
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D67DFC33573CBDA7778B5AE80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/59434c4f-2cc1-3fa8-9230-c20bd80e37d4.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     394976
IP address blocks:        209.66.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:c3:35:73:cb:da:77:78:b5:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=1c12d32e-2e26-482a-a208-a6e7e90154bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:15:75:e1:d0:e9:ce:79:48:ad:82:0f:d9:b7:
                    e1:e3:17:f1:16:1e:30:9c:4f:ac:af:f1:e8:b4:b7:
                    c1:d8:c3:27:fb:e6:56:5f:1c:df:05:95:09:10:e8:
                    e1:e3:70:80:d5:de:44:8d:21:f5:cc:19:ff:7b:b1:
                    ac:10:f2:a2:96:3e:ca:34:66:1a:fb:a4:5c:60:f1:
                    ab:4e:48:a1:e2:dc:49:18:7e:22:5d:7a:86:4c:8d:
                    95:39:a1:db:1b:9c:10:72:a9:76:64:e6:d8:9f:20:
                    6e:f7:b8:9c:ff:cc:95:d5:fb:d3:85:48:14:7c:af:
                    c5:77:f8:37:2f:6a:6e:ff:8e:3c:95:9e:0c:39:03:
                    d1:6d:f0:91:b0:b3:47:9e:5b:ec:cb:5c:9b:6d:d6:
                    68:0c:a0:e2:4a:64:22:2d:72:4a:62:87:fa:26:c5:
                    e7:e0:02:04:33:bd:4b:3d:e5:a8:d3:bd:fd:b2:38:
                    d8:0d:22:2e:b6:f7:9d:ff:7b:ca:20:49:c5:93:d3:
                    12:b9:a7:2b:3b:35:26:a7:cd:37:f9:26:a7:ad:b9:
                    aa:ab:9e:63:f0:c0:ac:90:7d:75:a5:12:07:b1:9d:
                    3e:51:57:f9:dc:85:f9:f6:f6:19:fb:a4:3e:60:f6:
                    8f:33:7f:d7:aa:a3:50:20:6c:f9:b0:9f:d6:cf:03:
                    79:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DD:18:D1:34:D0:BC:E2:29:D8:2E:F6:C7:C9:49:01:C7:EA:17:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/59434c4f-2cc1-3fa8-9230-c20bd80e37d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.66.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b4:a0:ce:63:f1:9f:f8:6f:7e:b2:4f:b7:0f:dd:e1:8d:2d:
         f8:89:77:80:a5:98:cd:ac:7b:c0:bb:83:37:2c:22:f3:47:f3:
         94:56:d5:bf:e7:e7:42:9e:fd:d7:b0:a5:6f:d6:e7:21:76:9d:
         6e:e3:d6:ee:f1:24:cf:6d:8b:8b:a4:09:f4:c6:d3:c3:5f:3f:
         14:bc:15:fe:c7:5b:4e:49:19:7e:08:7e:86:c0:31:f2:a3:7d:
         8e:94:08:da:4e:46:3a:35:de:01:77:ba:c9:fb:2b:42:b9:ac:
         41:f9:68:49:ca:54:42:e0:ef:67:5d:b9:46:8a:7e:f9:b2:95:
         1e:d4:32:5a:da:60:ca:c8:95:34:42:e8:c8:bf:07:50:2d:64:
         56:f2:89:1e:c8:12:ad:2e:32:45:0d:21:87:c1:7f:4c:d1:af:
         36:f4:26:2e:45:fc:94:9b:ed:23:0d:cb:9a:ca:c6:0a:1e:97:
         d3:13:7b:d1:23:c0:18:cc:58:56:0b:c6:ff:77:98:6f:51:4f:
         da:33:b0:be:ad:d4:68:f5:04:70:ea:7c:1d:3b:71:be:5f:94:
         ac:7c:d8:bb:0b:ee:13:77:ee:b7:07:a3:ac:6a:e5:25:de:19:
         73:b8:08:a1:13:a7:6e:4d:56:ef:99:c6:25:a1:15:58:62:5e:
         21:55:a7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 14:23:03 2026 by rpki-client