Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/df5de06c-6f7f-354a-b1a4-b4951bbc8135.roa
File:                     df5de06c-6f7f-354a-b1a4-b4951bbc8135.roa (raw, json)
Hash identifier:          Lue8qPgIVIZmNxEzoDNUeKTW1SzCx1WpufuK33gTNHY=
Subject key identifier:   20:EA:50:A4:68:37:A9:92:16:A5:09:C3:3B:0D:A0:3B:30:5B:39:7B
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D1707E7FDE8B7EADC547CDC00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/df5de06c-6f7f-354a-b1a4-b4951bbc8135.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     394973
IP address blocks:        209.249.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:e7:fd:e8:b7:ea:dc:54:7c:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=26a93494-160e-40d6-b757-aa136c758662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f7:38:7c:5b:d5:52:59:5c:06:36:bd:69:fb:
                    45:b3:0b:10:a3:13:41:dd:30:4e:26:a0:16:c3:30:
                    8f:d6:29:d9:64:82:52:b5:70:24:41:49:c0:cf:15:
                    52:09:54:f2:98:07:f5:bf:83:f5:05:64:21:d3:e8:
                    79:14:43:56:22:f8:7d:4b:da:cd:a5:85:08:8d:46:
                    7c:8a:ac:2b:56:0a:c2:d9:e2:90:a3:aa:6c:5a:a4:
                    01:08:19:7c:3b:b1:c0:13:e7:88:7d:82:40:20:de:
                    04:4e:14:38:1e:98:20:a4:cc:16:a0:c9:1f:0a:49:
                    64:ea:3f:8b:c6:7c:6b:9f:8f:83:ba:db:d0:d6:d9:
                    af:a0:e7:56:00:e0:08:5f:e1:2b:59:21:d1:a1:21:
                    b1:34:33:5d:6b:d0:41:95:c4:07:b8:6d:9e:a4:bf:
                    b4:dc:2f:2d:b8:96:c9:c8:c0:04:b9:44:0b:28:b7:
                    d6:01:ad:d1:41:bf:0b:e4:13:43:31:1a:e2:2e:40:
                    c1:2b:27:30:3c:39:0f:35:87:f0:27:f4:24:0c:34:
                    65:f9:26:3f:7f:82:2a:83:15:68:e0:69:c3:90:55:
                    90:81:98:23:62:c4:27:5a:5f:ac:44:c8:a7:1a:11:
                    82:42:29:09:34:8a:63:0f:ab:57:7d:47:8f:57:03:
                    1a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EA:50:A4:68:37:A9:92:16:A5:09:C3:3B:0D:A0:3B:30:5B:39:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/df5de06c-6f7f-354a-b1a4-b4951bbc8135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:bb:83:a2:5d:11:17:94:03:1d:da:6c:cb:96:e6:71:c6:9b:
         5b:66:8f:65:e3:a9:8d:1d:0a:e2:97:71:e7:8f:9d:0a:98:10:
         63:af:66:dd:8c:97:1c:e3:5e:13:0c:6b:96:bc:7f:b0:1f:43:
         66:eb:d5:21:25:86:8d:5e:dd:95:05:59:47:06:06:84:81:47:
         fe:eb:c5:e6:8f:d2:7f:69:bb:cb:12:cf:cc:e6:ce:01:61:2b:
         ef:df:ac:c5:97:cb:7b:91:24:50:c6:93:60:ab:d5:a9:f4:52:
         6f:51:77:79:a2:e8:5f:cc:ec:1f:20:30:94:8b:0c:1b:9d:81:
         e2:a8:e5:a9:0a:0e:54:55:68:7e:59:e2:1b:31:55:1d:01:38:
         4d:a1:ed:e6:78:8a:99:47:2b:53:9b:93:44:50:3e:f7:57:64:
         84:9c:49:e5:02:e0:a9:4b:15:0c:8a:b1:5d:aa:40:d2:88:49:
         e9:d9:8d:46:09:45:a3:28:3a:32:fb:c2:7a:b2:b5:7e:33:ec:
         8a:fb:41:83:89:42:87:dd:bf:51:b4:d4:3c:47:b3:3c:87:76:
         d8:b5:b9:c3:7f:b4:a3:15:65:28:c8:32:d3:93:2a:eb:ac:83:
         04:72:ab:f3:12:9f:05:b5:74:78:2b:2d:0d:43:ed:67:3e:fe:
         a5:4b:38:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 07:46:26 2026 by rpki-client