Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8b07d857-2a8f-3bde-8e1d-dc44694a6d1a.roa
File:                     8b07d857-2a8f-3bde-8e1d-dc44694a6d1a.roa (raw, json)
Hash identifier:          l/JEYwH21vxvCS8pMUV1qBiwSlAFMq7U+ybHfxh2S/U=
Subject key identifier:   ED:5C:7D:82:13:A0:BD:6E:F1:06:2F:C0:93:B9:08:7F:CB:8B:60:ED
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584F49737B75AC2A9364AA7549A0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8b07d857-2a8f-3bde-8e1d-dc44694a6d1a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15290
IP address blocks:        209.146.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:7b:75:ac:2a:93:64:aa:75:49:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bcca2690-1c17-42bb-839b-d4513c10197a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7f:eb:f1:8f:c7:63:cb:06:f9:86:5f:bd:90:
                    b7:c1:e5:0e:7e:4f:05:31:bf:f4:0d:6c:dd:ab:d6:
                    2f:a9:5a:f5:51:01:46:75:b6:b6:f3:db:fc:02:d9:
                    36:82:80:d7:bc:d1:0e:cc:f6:b8:03:c5:ab:af:fb:
                    5f:e2:14:ee:c5:18:95:6e:d1:c5:10:57:9c:96:b2:
                    4d:6e:58:b3:63:ce:fc:44:8a:56:52:44:b5:25:29:
                    2b:ab:3c:09:9f:97:ac:63:3f:46:3b:b8:d5:70:8b:
                    6b:54:25:21:63:23:2d:18:d7:48:a1:16:00:23:47:
                    6a:d4:c5:35:b7:01:27:f9:bc:ed:6a:04:66:d0:e1:
                    65:9c:af:21:87:cf:02:35:aa:a5:fa:64:9f:41:1c:
                    f3:21:46:ea:80:ae:6f:03:51:e0:3c:b4:56:51:c2:
                    06:72:18:c7:53:a4:ee:32:dd:e0:51:27:10:49:1a:
                    fd:55:9f:69:18:ff:93:b5:57:f2:9f:cf:fb:19:6c:
                    c2:38:e8:d3:d7:2c:75:be:0a:11:1c:69:cc:9a:6c:
                    f7:28:5b:b6:49:fb:cf:a2:af:27:17:03:65:25:17:
                    7a:fe:a5:a8:08:b8:e3:13:b6:6a:16:33:3f:ad:52:
                    fd:3c:6a:96:64:6f:22:fc:b4:46:01:9f:0b:a0:d4:
                    92:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5C:7D:82:13:A0:BD:6E:F1:06:2F:C0:93:B9:08:7F:CB:8B:60:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8b07d857-2a8f-3bde-8e1d-dc44694a6d1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.146.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:26:84:96:e1:ab:06:9b:4a:66:26:82:84:16:6c:48:39:c8:
         82:83:b2:91:01:c5:f0:3b:cc:17:96:e1:d6:b2:c3:5e:f5:03:
         0d:ee:87:d5:a4:18:d6:48:09:25:13:cd:7d:c9:9d:55:f7:5c:
         e4:70:20:d4:76:15:74:30:13:37:76:6d:4e:12:bf:24:2b:e0:
         80:41:63:cb:21:c0:af:3a:2e:56:96:ea:19:e1:1a:9b:96:e1:
         87:7b:28:e6:f3:04:8b:3b:80:00:11:73:23:90:a8:62:10:1d:
         ca:53:8a:27:5b:ba:8d:c7:2b:25:0d:f0:ef:47:ce:de:d1:52:
         6f:e0:1c:df:0e:b5:60:85:dd:9a:c6:45:64:70:f8:09:84:8b:
         ab:4c:90:7c:8e:bb:d1:5a:0f:19:94:d8:71:33:be:db:5a:a5:
         c3:77:d0:fc:cf:74:2d:e6:ed:fd:e2:f2:1b:5f:66:13:a6:34:
         79:4e:01:03:c8:47:7c:83:a8:a8:e2:82:db:76:7f:58:69:16:
         ad:4f:9f:af:d6:18:5c:5a:e1:89:85:67:d3:1e:eb:40:97:b9:
         2d:b6:d4:c6:74:97:5b:b6:04:13:13:4c:52:97:cd:e9:49:bc:
         24:e9:0f:16:f7:dd:4a:6c:7b:d4:94:46:fa:1e:dc:31:8b:cc:
         22:9b:2c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:42:22 2026 by rpki-client