Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c2ad7963-9c8a-3f29-abe3-42f874ddd334.roa
File:                     c2ad7963-9c8a-3f29-abe3-42f874ddd334.roa (raw, json)
Hash identifier:          S6u6QTanjOmFfTKHe1FWe/tjkAC2ICwC8Y04YXr3rmk=
Subject key identifier:   FC:C3:68:48:46:04:E1:4A:38:DE:BB:F3:2A:D2:79:FD:50:41:EE:80
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584EC0A709D30E000B2AD5179100
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c2ad7963-9c8a-3f29-abe3-42f874ddd334.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     31775
IP address blocks:        209.249.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:09:d3:0e:00:0b:2a:d5:17:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=1e149720-8a69-41c3-afd9-32f780d94e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6f:92:38:66:32:50:e7:61:23:29:ab:31:71:
                    ed:d5:aa:bb:d6:ae:e7:42:39:d6:a9:17:58:a0:48:
                    7e:92:24:17:46:54:c5:63:04:14:4c:76:c7:e7:a6:
                    09:7e:22:25:a6:0c:87:44:28:0c:ca:e9:0b:4b:fb:
                    5e:68:0e:43:fb:b1:04:e5:cf:5f:6a:bd:ca:7a:93:
                    90:a5:76:58:b8:ab:b8:a5:1b:41:9a:8e:b7:30:56:
                    c9:78:95:0d:3f:f9:41:fd:16:5d:a6:dd:33:ef:8c:
                    39:2d:6d:b2:fb:8a:96:f0:1b:6e:43:f8:1a:17:54:
                    37:b4:4f:34:89:f7:1c:77:88:ca:73:3c:a7:bd:4d:
                    47:00:72:f5:a0:02:8d:ff:dc:28:8f:60:ca:1c:e4:
                    77:04:73:f5:d8:29:90:99:7b:43:82:c2:15:7d:1c:
                    8d:97:5f:50:34:09:7a:99:ea:d4:28:c0:2b:d4:45:
                    70:0f:3f:5c:67:f5:93:61:a6:e9:e8:73:8c:61:e7:
                    16:36:a4:9e:d8:d3:3a:e6:43:a1:c7:c9:f6:33:c9:
                    12:46:2e:f7:68:c3:0f:0a:fe:df:32:95:ee:12:d7:
                    63:df:c0:a1:5f:8c:bc:1c:3b:30:10:4e:6c:1a:a6:
                    85:d6:66:2d:82:5a:cb:1e:d9:06:ef:f8:98:17:69:
                    92:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C3:68:48:46:04:E1:4A:38:DE:BB:F3:2A:D2:79:FD:50:41:EE:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c2ad7963-9c8a-3f29-abe3-42f874ddd334.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:3f:3a:5a:99:95:eb:79:d8:0d:0f:0d:57:76:f6:97:55:85:
         03:a7:c2:07:31:cc:d1:1d:35:32:fb:6b:25:9a:03:a3:44:a4:
         47:29:3b:92:96:ac:7b:82:ee:3d:7d:56:b9:b2:af:f6:ee:6c:
         0b:56:f2:e2:5d:46:2d:fc:5f:36:49:b6:f1:6f:d1:60:ce:e9:
         e6:72:80:ac:6c:0a:39:6b:33:74:20:10:4c:f3:4b:f5:23:e4:
         8c:e7:25:81:35:6a:c6:8c:6c:e8:0b:6c:2d:92:5f:31:ef:bc:
         fb:b9:60:c6:ad:88:50:dd:88:7c:c4:e8:4b:fe:99:77:75:10:
         d7:e8:d0:76:dd:6f:10:23:ff:bc:73:dc:10:d3:4b:70:b3:2b:
         ce:d8:be:f9:4e:9e:4a:81:11:22:5d:73:eb:0d:bb:a9:36:50:
         7b:ec:2a:e4:fc:c3:e1:18:f3:db:11:65:cf:c7:fe:f8:5c:40:
         17:34:5f:99:a4:8b:d6:27:19:54:9d:56:d4:03:e6:e2:fe:1b:
         1e:64:ee:47:38:34:2b:0a:7f:85:81:ed:82:7c:33:0d:41:ab:
         13:9c:04:85:84:ae:26:40:be:b5:7d:8e:fd:b2:02:76:c6:f0:
         0f:80:72:8c:d3:b2:41:54:49:c6:ba:54:89:f3:a2:f6:71:9d:
         40:9e:b7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 05:12:09 2026 by rpki-client