Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9e0896f3-1c53-3199-9ebb-396e15fd0337.roa
File:                     9e0896f3-1c53-3199-9ebb-396e15fd0337.roa (raw, json)
Hash identifier:          +GI7doPqdb0S3ZPzGMwICw31NtYQsL/E8nzL/htdv84=
Subject key identifier:   E8:91:0C:88:7C:0D:F0:13:0F:22:7B:E2:7F:C9:E7:E1:E3:C8:1E:EE
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D67DFCCF6605E67E90878C080
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9e0896f3-1c53-3199-9ebb-396e15fd0337.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     22866
IP address blocks:        209.249.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:cc:f6:60:5e:67:e9:08:78:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=3cf1edcc-7adb-4a82-8911-2c054efad639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8a:62:58:26:02:b6:1e:04:c6:f3:4a:c9:7b:
                    23:00:20:ac:de:12:8e:21:ff:3a:5d:02:a8:8f:36:
                    90:91:71:d1:16:5e:1c:f0:20:69:1a:65:a1:8d:1e:
                    69:2b:54:19:6c:c1:ad:a3:27:20:36:e9:5d:14:48:
                    f3:43:29:be:4c:a9:7f:1f:5d:d6:36:04:e4:92:89:
                    f2:d2:07:05:ab:29:a1:9d:e3:56:e0:63:3b:ef:64:
                    e3:b5:4c:db:ce:69:7b:e9:d4:e3:d7:46:ce:81:90:
                    3b:bb:9e:ab:dc:8f:5a:d9:47:87:d5:60:ec:da:6f:
                    6e:ab:f7:4b:2f:04:15:52:50:f1:89:56:2a:a4:41:
                    f1:5e:a0:92:d5:f3:07:b7:3c:b5:0a:00:ff:bf:88:
                    af:b0:f0:71:5a:14:2e:24:1e:a6:92:ff:3e:0b:cd:
                    e5:69:d0:db:1c:11:ce:fc:f0:a1:66:37:06:70:1c:
                    e8:b8:98:86:00:99:b4:16:39:b6:2e:e8:ac:5b:ac:
                    d4:59:9c:01:8c:c9:ef:11:75:1f:26:f5:32:ba:72:
                    92:de:81:f8:7e:17:ea:ea:8c:be:aa:e7:61:2b:2c:
                    11:44:fc:f3:61:55:27:98:0d:58:d4:b7:cf:94:cf:
                    c7:0f:7d:22:8c:99:aa:1c:4a:8c:ee:46:c1:50:38:
                    21:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:91:0C:88:7C:0D:F0:13:0F:22:7B:E2:7F:C9:E7:E1:E3:C8:1E:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9e0896f3-1c53-3199-9ebb-396e15fd0337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:8e:96:3f:fc:50:83:94:5a:99:27:3f:54:fb:b9:1e:97:8e:
         07:5c:01:f6:bc:73:23:e6:55:ae:4f:9d:3b:ea:80:84:32:ee:
         99:d0:0b:23:81:57:ac:47:45:6f:22:47:a7:4b:79:3d:67:41:
         7d:d5:00:d5:06:fc:e2:47:2b:d0:e9:cb:2c:c3:bd:b1:32:e8:
         7b:a5:ea:99:d9:00:8d:85:d2:4f:f3:f3:54:b0:e4:ee:d1:54:
         d8:08:ff:7f:7c:60:5d:52:5b:a6:03:8e:3a:f2:28:f4:4b:09:
         1f:95:e1:8a:89:6b:d6:2f:20:ab:30:ce:2f:c6:cd:8e:23:d7:
         cb:7d:fb:34:f4:4e:2a:63:a9:c5:fd:96:45:4f:4a:41:ae:cb:
         82:c2:f5:21:25:66:e8:54:f1:8d:7b:ee:a1:62:12:84:a3:6f:
         75:5c:37:fa:d5:ea:e5:0e:4e:1f:d4:f6:85:26:c3:2a:56:de:
         80:6b:f4:ac:f6:01:25:76:a7:63:0b:df:da:9a:20:ba:53:6f:
         17:79:0d:d9:78:d2:b6:ae:d3:58:0a:ef:d5:57:09:cb:18:b4:
         ed:a2:de:97:10:91:fd:a6:25:78:ad:ec:38:46:e6:dd:c4:4f:
         5c:b2:bf:1f:32:67:dd:20:72:15:bf:69:56:0a:60:31:19:66:
         51:36:25:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 14:24:39 2026 by rpki-client