Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f320d7b2-0cd0-3949-9ba9-93f4207360ba.roa
File:                     f320d7b2-0cd0-3949-9ba9-93f4207360ba.roa (raw, json)
Hash identifier:          oNMgSpcQw5RFybFEG2A5fwCSmtMVK6V8L8cz+F8fuDQ=
Subject key identifier:   03:2D:36:90:8B:6B:26:AC:EA:B2:DD:98:CE:7D:A0:C5:91:B7:93:AA
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D67DFCD3CDAB941552D840180
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f320d7b2-0cd0-3949-9ba9-93f4207360ba.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     29833
IP address blocks:        209.249.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:cd:3c:da:b9:41:55:2d:84:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=834dd4d5-2b2a-4a90-81a0-718949cb7ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9c:8b:94:4c:52:9a:b3:61:89:07:2b:ce:1f:
                    13:95:86:9c:fa:e4:93:6b:5c:b5:63:82:86:df:42:
                    79:26:b3:33:76:20:60:46:26:77:e5:bb:df:0e:ae:
                    0c:b8:f8:45:62:e8:be:57:f9:95:2d:27:fa:54:22:
                    a2:3e:fd:c9:2e:09:69:ef:9a:27:4c:75:c6:61:28:
                    d0:37:ae:5a:db:c7:7f:88:bf:38:25:ef:95:b6:8b:
                    d4:24:23:d1:32:25:0b:ef:b5:f9:f4:af:57:bd:72:
                    01:af:2b:67:73:53:e7:19:81:0c:4e:98:e0:ad:a5:
                    c5:dc:28:19:a5:08:66:c5:b6:bb:bc:7a:c4:b3:d0:
                    cc:1f:34:93:a9:2f:ae:18:9c:47:d8:61:dc:89:93:
                    99:76:f5:48:90:a6:22:75:47:ad:27:2f:8e:21:c1:
                    50:31:57:92:df:ad:98:18:88:f3:ff:4d:a8:df:68:
                    6c:78:5b:b2:6b:37:fd:cd:73:9d:ec:23:1d:6e:af:
                    47:da:15:0e:59:e9:60:10:32:5b:7b:52:b7:1f:9c:
                    48:67:8e:ec:42:17:6f:31:51:82:15:98:1f:d4:d5:
                    2d:b1:60:c9:09:9f:35:25:71:06:6f:76:d0:97:a3:
                    d1:58:be:e1:d4:97:27:93:10:70:3e:db:88:dd:fa:
                    86:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2D:36:90:8B:6B:26:AC:EA:B2:DD:98:CE:7D:A0:C5:91:B7:93:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f320d7b2-0cd0-3949-9ba9-93f4207360ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:c6:65:f7:0b:22:72:ec:5d:21:f8:51:ad:95:ac:9a:37:5c:
         94:41:dd:37:ea:b0:a2:73:e0:6e:a5:4f:e8:8a:61:1e:84:36:
         46:9c:6f:ea:d7:83:f8:2a:ed:f9:e9:1c:20:d5:16:e9:39:78:
         bb:a3:42:bd:f5:08:aa:e2:ce:c8:dc:77:31:5d:60:2d:10:3c:
         9b:bf:b2:2f:97:bc:dc:e8:08:ee:27:e0:da:b6:a3:89:6d:82:
         ba:59:fc:5f:3e:4f:fc:87:27:fa:2f:eb:b9:f8:79:94:7d:c4:
         50:31:c5:7b:da:8c:8c:a7:6c:3a:29:82:39:e6:55:49:cb:df:
         2b:46:8e:a3:c5:7b:f3:00:84:50:6f:2e:36:cb:a8:2b:89:c1:
         30:af:a0:dd:9c:2b:f0:13:91:67:de:25:3d:be:06:db:be:3f:
         db:a1:3c:8c:71:3d:63:a2:ad:8e:c1:28:1f:a7:a7:6d:aa:0b:
         40:4f:56:a7:95:22:30:93:79:3b:20:58:f5:c0:5a:c9:09:7c:
         b2:11:c6:af:8c:7b:9b:fc:8e:c5:6f:10:a0:cd:0a:d9:ea:59:
         18:dc:69:7f:b3:6b:89:7f:0b:dd:03:e2:d8:8d:70:14:77:e9:
         6a:29:3c:5a:ec:4b:c7:49:45:eb:14:10:1e:87:52:69:c2:3c:
         79:5c:68:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 14:23:36 2026 by rpki-client