Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c294e747-976c-3cd0-a78e-8cabab826be3.roa
File:                     c294e747-976c-3cd0-a78e-8cabab826be3.roa (raw, json)
Hash identifier:          PrdHGTPa9TKt1X9Uaw4poAQrxHCXyzWWyrpyEB/WWrY=
Subject key identifier:   9D:4E:FB:E3:39:42:CE:4F:89:3D:93:CC:F5:22:C0:A3:11:9F:1C:0A
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584EDC920FB11532E8B4E8C7CAC0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c294e747-976c-3cd0-a78e-8cabab826be3.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     22311
IP address blocks:        208.185.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:0f:b1:15:32:e8:b4:e8:c7:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=4b1855e3-cc72-4ece-8a68-f4ac04bfbbbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:48:ec:d6:9c:07:70:1b:7d:5e:98:72:5a:50:
                    95:e7:76:e6:e1:90:81:24:a4:04:20:5c:45:7f:35:
                    85:a6:a1:b9:3b:89:70:90:a6:04:dd:d8:58:ad:03:
                    19:6e:6f:0b:f3:72:9e:19:63:c0:e4:85:e3:2d:b6:
                    e8:95:ff:ee:31:98:b8:6e:df:75:14:ea:f0:06:91:
                    b4:7a:39:60:b2:6b:0d:88:fc:b7:c9:15:49:76:a8:
                    7f:bd:2c:dc:91:80:4c:2c:48:f5:35:ff:92:86:1e:
                    03:c3:4b:fe:3a:b4:0a:df:20:83:22:bb:55:2b:48:
                    1a:dd:af:e2:cb:9b:73:91:92:6d:1a:42:8e:f7:bd:
                    e6:96:eb:da:83:65:e3:6e:2c:9e:c4:f1:04:03:b3:
                    bd:31:ed:6c:83:b7:5a:f3:bf:df:a1:d3:53:db:97:
                    ba:44:23:d1:5f:a7:c8:59:02:81:d7:ae:af:ce:0d:
                    54:d8:53:11:87:88:6b:5f:7d:df:cb:05:23:dc:c6:
                    34:20:6d:9d:a2:a1:91:80:a4:a2:32:af:52:db:8f:
                    da:20:db:75:c0:b2:cb:a8:aa:b3:2f:ea:55:fa:7e:
                    99:97:40:63:c0:67:c5:80:42:4b:73:41:b8:65:6f:
                    2c:ba:df:ac:f6:d1:40:0e:7c:ea:16:d8:69:47:17:
                    8d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4E:FB:E3:39:42:CE:4F:89:3D:93:CC:F5:22:C0:A3:11:9F:1C:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c294e747-976c-3cd0-a78e-8cabab826be3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f5:61:b8:26:b1:63:ab:a1:f8:3b:69:83:a7:01:8c:21:b9:
         49:d7:50:36:1c:38:66:d3:a5:8e:33:84:75:1d:a3:8a:bb:8d:
         d0:9c:d8:29:90:b2:bb:60:59:56:a4:aa:90:15:8f:a0:14:e8:
         e0:d4:24:e5:30:d1:54:54:f5:65:0f:0b:08:2a:bb:b6:bc:48:
         36:e3:d0:92:8e:5c:82:34:ff:ba:8f:2b:74:90:d3:a8:5c:79:
         57:d2:b0:4f:53:37:11:0d:14:dc:c4:5c:27:85:a9:b2:e1:c7:
         c8:a7:11:e4:9b:2e:ab:3f:20:d9:ed:98:bb:86:9b:af:08:12:
         fd:56:20:96:cc:1a:d9:6e:36:95:85:ec:eb:0d:f9:8e:d6:41:
         c6:74:2e:73:53:88:28:51:4a:c2:e3:c5:ba:23:b1:a6:fd:c7:
         df:d6:c1:5a:d5:a7:81:56:76:49:9c:33:b9:91:5c:13:38:85:
         af:6e:d5:fc:32:c3:be:de:e3:ad:32:01:fe:01:16:77:d9:c0:
         46:c8:1b:a3:4f:6e:7c:3c:32:f1:a6:bd:1c:ce:c1:6d:a0:eb:
         6e:e4:b9:22:ab:d9:38:00:29:0e:78:c9:5d:60:44:83:6e:aa:
         6d:29:74:08:4c:c0:c2:80:af:29:df:a1:a8:be:da:ac:40:6c:
         65:2e:a4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:17:04 2026 by rpki-client