Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5ded8209-cfe6-3e60-882c-93eb6cf9a98e.roa
File:                     5ded8209-cfe6-3e60-882c-93eb6cf9a98e.roa (raw, json)
Hash identifier:          DzSFqoVk4sd6pwEhYlj6MxH/tcYrwwotBUjFGm4eZr0=
Subject key identifier:   0E:50:BC:99:EF:4A:E6:DC:2D:F9:3F:22:62:59:AC:4B:6D:84:FF:66
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D59EA749226378160DB363BF0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5ded8209-cfe6-3e60-882c-93eb6cf9a98e.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     63442
IP address blocks:        207.126.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:74:92:26:37:81:60:db:36:3b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=613ecaf4-6453-41f4-9020-55f10f98b644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ea:da:f3:10:38:8e:4c:3c:05:b6:ed:a0:1e:
                    af:05:a1:02:95:77:5f:e0:b5:e7:69:5b:9f:ff:84:
                    03:65:62:3c:04:03:6a:b0:51:63:3e:f2:0b:32:80:
                    d7:e5:93:e2:0b:4f:0c:9c:4e:aa:ac:88:75:f8:9f:
                    ee:e8:6e:e7:29:94:71:b2:0d:30:bb:d7:15:44:e1:
                    e6:bc:0f:b3:f1:ef:5e:50:2a:b9:96:58:95:22:97:
                    b1:ec:ac:67:59:eb:c3:7a:b1:20:4b:52:c1:12:6b:
                    b1:f3:f8:1a:5d:2f:88:c7:68:00:3b:41:95:07:ef:
                    e1:1e:0d:63:0b:08:fb:03:df:a3:8f:7b:d4:80:b8:
                    8f:dd:d0:55:89:1c:3b:80:db:5e:e6:35:19:17:e2:
                    c7:20:d2:47:18:cc:b6:38:8d:09:c0:32:0b:b4:f9:
                    39:ba:41:07:33:37:b4:a8:0c:37:c9:bc:60:6b:12:
                    b6:c6:6b:2f:f3:41:aa:1b:c5:31:3b:49:c3:0d:82:
                    e8:c3:16:d5:f6:f5:15:35:c9:ef:4d:d7:62:3b:1c:
                    48:0a:0f:14:06:d1:41:1d:6a:93:2c:34:86:40:4a:
                    51:50:ee:7d:ec:56:56:24:f8:35:9c:16:0e:db:95:
                    6b:a6:aa:3d:f0:c2:fd:ed:65:26:68:82:88:04:e1:
                    0f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:50:BC:99:EF:4A:E6:DC:2D:F9:3F:22:62:59:AC:4B:6D:84:FF:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5ded8209-cfe6-3e60-882c-93eb6cf9a98e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:45:10:e1:71:82:ff:dc:47:7c:22:b0:33:ab:f9:7c:56:b1:
         53:a4:77:90:75:ba:44:ea:bd:7d:81:ba:2b:00:d9:c3:21:d3:
         06:6a:64:2f:41:c9:6b:04:3a:9a:53:74:94:6e:76:e5:2a:9d:
         37:1a:a6:15:c0:5e:67:6a:3d:9f:a0:b9:34:f3:d6:2e:62:6b:
         5d:dd:4d:0f:ba:42:9d:e0:6d:a0:3f:00:2d:41:78:0d:60:79:
         b4:14:c5:a3:70:38:bf:53:54:20:24:8c:c3:58:74:de:0f:3f:
         b0:fe:93:56:40:e1:80:65:46:fe:85:dd:49:d2:51:2a:92:cb:
         8e:b3:8a:a9:20:9e:a6:5d:67:9f:aa:8c:df:0b:9c:2a:39:f8:
         89:d3:72:21:08:71:29:3e:ed:e1:d8:ea:f1:3a:9d:bd:38:7b:
         79:84:a3:f9:9e:b0:98:11:c5:c2:f1:af:92:a4:cf:47:28:87:
         a5:16:c0:3d:4d:90:ba:db:8f:16:cf:3c:d6:b2:9b:6c:1a:40:
         2e:25:23:e0:b3:ee:77:f7:49:d5:db:44:56:52:fe:a6:56:28:
         0c:22:2c:19:6a:17:d7:1a:ed:7c:6a:8d:cc:13:56:a4:6c:7e:
         93:b7:e3:4a:fb:2e:ee:d6:92:80:8b:f1:8f:fe:ef:f3:99:15:
         e7:16:8a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 14:21:57 2026 by rpki-client