Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f125da6c-abc0-3fd9-a234-b942fc47b718.roa
File:                     f125da6c-abc0-3fd9-a234-b942fc47b718.roa (raw, json)
Hash identifier:          CdoeAUq1bvSfTzlz6uo6jFSuBM9/uTyIH0unSOdg4xU=
Subject key identifier:   A3:7D:F3:00:A7:0B:5C:33:08:BD:57:54:FE:04:50:85:0E:34:20:3A
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D67DFCB7943479D62FE1FDF80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f125da6c-abc0-3fd9-a234-b942fc47b718.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     33321
IP address blocks:        209.124.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:cb:79:43:47:9d:62:fe:1f:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=d9dbef33-2de6-4ea6-9070-8ec43e60ca5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6e:94:ae:33:8e:63:7b:ef:5a:fa:32:f9:a3:
                    e6:08:47:4f:4c:7c:b1:6b:b4:fc:5c:9e:c3:85:cd:
                    3a:cf:65:d1:91:14:a2:d3:1d:e5:d1:20:43:04:8d:
                    81:58:4a:f0:60:98:d7:77:e4:da:15:4f:9d:10:7c:
                    f4:16:c0:dd:58:a2:96:6f:89:0f:ec:1f:8d:cf:d4:
                    41:5a:01:05:a4:db:20:b3:46:0a:ef:7f:16:42:18:
                    75:c0:d3:d5:ce:a2:b0:d8:1e:75:5e:9f:be:c1:05:
                    5f:be:10:e0:7d:08:95:24:24:42:4d:ea:24:8b:18:
                    0d:a1:d2:0c:b2:fa:36:29:ef:7b:5c:86:0e:40:cc:
                    75:45:77:45:c2:a7:8b:8f:b3:26:6d:1c:f6:33:9f:
                    7c:db:fd:1c:c3:20:9e:c8:80:e3:b3:29:41:cb:3e:
                    6c:6e:14:bb:fd:b3:66:57:fd:a7:59:16:eb:8b:cc:
                    3d:a3:e8:ab:96:25:02:89:fa:de:ba:ba:66:f5:ac:
                    25:d3:8b:71:81:c7:e7:eb:f3:51:74:d9:c7:21:77:
                    dd:ed:72:a1:b7:80:42:d2:a8:5c:8b:2e:3b:d6:aa:
                    dc:f7:9d:cb:b2:d8:a5:ec:21:7f:69:e4:8a:94:b3:
                    0f:a1:5b:42:26:9a:f2:7f:07:6f:c5:51:5d:39:c6:
                    2e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7D:F3:00:A7:0B:5C:33:08:BD:57:54:FE:04:50:85:0E:34:20:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f125da6c-abc0-3fd9-a234-b942fc47b718.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:12:0c:00:0a:6d:59:f2:8f:64:8d:f0:29:1a:61:40:0c:12:
         fb:df:92:ab:bf:24:08:52:4e:8a:06:32:58:75:6a:01:50:a1:
         d1:78:da:9a:6b:77:2f:ef:41:93:e7:4a:b2:67:3d:51:53:89:
         06:b9:da:bd:eb:50:01:f2:f9:c4:d9:62:74:f6:3e:fd:62:e8:
         e1:f0:3d:27:24:33:09:da:a6:05:f0:ad:44:63:be:24:8f:1d:
         a2:8a:13:87:4d:74:b4:d6:b7:89:8e:bb:42:1e:8e:14:25:96:
         1a:60:fc:d7:72:80:9b:81:23:c4:31:82:07:bf:08:f4:5b:ed:
         8f:2e:00:28:e8:9e:85:26:9b:97:d1:a5:20:71:8f:54:9b:58:
         91:ce:22:60:4e:36:35:22:dc:46:58:8a:dc:39:94:99:26:e1:
         e2:84:43:81:5b:db:06:a6:15:e8:81:ca:92:4d:9e:0b:a6:ba:
         b1:8c:15:19:3a:7f:9b:6b:69:c0:24:19:0c:28:fd:b3:43:cb:
         ee:6a:f9:ba:5c:2d:81:a6:d0:0b:56:22:64:cf:19:6e:4b:f1:
         f2:20:af:01:78:4c:56:9d:c4:ed:e6:da:22:ff:5c:d9:a7:33:
         28:48:89:c5:64:31:ca:86:bd:a2:7f:fc:45:a0:fc:33:69:3a:
         b3:d7:0d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 14:24:40 2026 by rpki-client