Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c38f9fba-37f6-3d54-8f63-61fbebeeb1c1.roa
File:                     c38f9fba-37f6-3d54-8f63-61fbebeeb1c1.roa (raw, json)
Hash identifier:          IIBYh+hn6hDb0IOX247Cn7i0pUOthJQRsoaONKfMNwc=
Subject key identifier:   FA:82:23:15:4E:B3:82:73:EE:FA:DE:DC:09:04:80:10:C8:23:A1:D2
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584EA787344845B8C126070291A8
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c38f9fba-37f6-3d54-8f63-61fbebeeb1c1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     29731
IP address blocks:        159.18.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:34:48:45:b8:c1:26:07:02:91:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=11d0de73-b502-4239-9cc1-3653ee1685da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:51:6e:96:0e:16:3c:91:dd:c2:7f:1c:41:bd:
                    1e:78:05:e4:24:39:cc:71:a9:8b:61:b1:ef:46:85:
                    88:27:98:7b:ae:ee:7a:a9:ed:b7:9a:8d:7e:b0:fb:
                    19:71:27:f9:80:3c:b2:cf:47:60:91:f3:58:54:a1:
                    bc:bd:8f:a0:de:1c:32:09:13:0f:a3:15:13:47:d8:
                    1b:46:a6:5b:56:d0:10:21:eb:26:32:28:a4:f6:b0:
                    fb:d9:5a:92:26:81:30:4b:ae:bf:ee:16:64:a9:f6:
                    6a:33:8a:9c:60:d2:b0:b8:fd:37:93:60:d5:46:34:
                    d6:f7:85:a7:a3:b8:9e:c7:85:ac:55:19:f3:82:81:
                    dd:0f:73:bb:b1:3f:67:e6:50:91:29:1e:4f:4e:44:
                    21:c2:b2:7e:c0:34:91:e3:7a:5b:b1:a2:b0:dc:51:
                    4b:d3:ee:b0:cb:56:ff:37:ff:95:d9:47:11:ad:ff:
                    ed:49:5c:7c:0b:fa:56:ce:0e:df:af:34:56:c0:76:
                    c7:d9:d6:49:0d:a4:61:a5:dd:3c:46:0b:d7:6a:5a:
                    11:97:bb:6a:a5:4c:7a:02:f9:c5:2c:11:a5:06:8c:
                    92:a1:fe:03:7a:46:30:b8:78:83:f4:ff:70:1e:fb:
                    61:c0:a0:e2:41:54:ec:20:7a:ca:63:43:8d:3f:27:
                    52:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:82:23:15:4E:B3:82:73:EE:FA:DE:DC:09:04:80:10:C8:23:A1:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c38f9fba-37f6-3d54-8f63-61fbebeeb1c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:31:2e:63:75:de:40:d0:3c:e4:95:c1:6b:85:7a:3a:f4:81:
         cf:1e:cb:3a:b1:8e:5e:09:8d:48:ac:a2:50:e8:ae:ee:ec:58:
         c6:fe:18:e8:d6:d5:d9:5f:01:63:3a:56:3a:7f:cc:95:f0:a5:
         48:29:62:a9:8b:08:38:ff:3b:d9:b2:e4:55:c1:a5:a7:74:09:
         50:f8:7d:5e:17:9f:16:e4:8d:d4:fc:18:cb:38:bd:b1:6c:b7:
         9a:35:da:f6:2d:45:34:85:54:dc:ea:6a:3a:89:1b:27:24:b7:
         21:42:89:21:8f:82:34:43:25:9f:a3:c8:0d:c5:56:56:0b:18:
         34:b0:ad:11:6c:8e:07:7e:d5:f9:63:48:e4:22:8c:d9:a3:de:
         29:26:a3:01:18:2c:6f:00:1f:80:41:07:f1:42:6a:d8:c2:54:
         39:48:c8:09:45:ec:93:5e:14:6c:f9:ff:12:ba:06:f3:43:a5:
         68:87:99:45:47:41:51:4e:2d:fd:bb:ea:9c:c7:50:1c:4f:1e:
         d0:27:fa:51:e2:ac:d1:4f:74:73:8d:34:b7:0d:96:33:71:dc:
         fc:ed:f6:d4:40:a0:54:0b:cc:a1:b2:76:db:0e:aa:e4:a0:85:
         5d:7b:03:bf:db:e7:4a:4c:c8:ec:e6:69:bb:40:14:41:16:b8:
         83:d8:ea:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:05:11 2026 by rpki-client