Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/f08abee9-414b-3299-aa0d-823a1c6aaab9.roa
File:                     f08abee9-414b-3299-aa0d-823a1c6aaab9.roa (raw, json)
Hash identifier:          QZMsJQ8zmcK7Se+bqDRN6HwMirkIgpTb4zwk4UpEBA0=
Subject key identifier:   61:0B:EC:3B:B3:28:71:F7:02:80:2A:FF:B9:C2:E5:C1:C6:B1:FB:1C
Certificate issuer:       /CN=8eadffea-7ae3-46a5-afb6-3aee3190a76d
Certificate serial:       010D0C9F4328584DE41B18E9D184BA957C1A1840
Authority key identifier: 0E:FB:0A:1B:F9:6F:6F:F5:DD:7A:77:98:29:40:51:63:C1:E9:09:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/f08abee9-414b-3299-aa0d-823a1c6aaab9.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16509
IP address blocks:        209.135.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/8eadffea-7ae3-46a5-afb6-3aee3190a76d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/8eadffea-7ae3-46a5-afb6-3aee3190a76d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:18:e9:d1:84:ba:95:7c:1a:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eadffea-7ae3-46a5-afb6-3aee3190a76d
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=8d8f36da-004e-494c-a202-03c2af1a26a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a0:be:a5:6d:bd:4b:e8:ee:b6:4a:5c:67:c1:
                    bf:ff:84:bb:a5:8a:3a:36:b9:e5:ce:a2:dd:00:cd:
                    a2:b0:9d:d9:6d:0d:db:85:87:ca:30:c9:2d:7a:3a:
                    c3:3f:96:bb:21:ba:5c:5d:7d:20:7b:6a:49:8b:11:
                    c8:32:d1:d7:a6:02:64:e3:88:7f:37:96:26:ad:c5:
                    22:22:99:98:d9:45:f7:24:60:e2:cb:c8:da:5d:fc:
                    52:ad:39:66:c1:5d:46:7f:85:9f:be:a7:14:3e:a3:
                    c4:14:f6:42:bb:02:75:c9:5c:3c:fd:a7:01:83:bf:
                    92:fd:4a:ae:82:04:22:4e:db:be:00:00:77:62:79:
                    3d:3b:06:9c:23:0d:49:0f:12:45:35:99:2e:1d:30:
                    23:95:e8:4f:42:35:33:a4:27:4f:ec:3f:94:6d:47:
                    9d:53:4e:0b:a0:3d:1a:f1:90:f0:1c:6a:f4:c5:b2:
                    5d:04:b1:b7:5d:24:77:89:8b:14:61:39:bb:2a:e2:
                    24:3d:e4:08:93:1e:7e:ef:f5:52:0b:7e:90:ea:66:
                    cf:e2:87:d8:3f:a1:48:95:dd:62:d3:4b:e4:71:5a:
                    d5:d3:00:9c:d4:00:75:e3:aa:0a:52:05:a8:3c:b8:
                    02:11:79:08:9c:fd:fd:03:82:a3:0c:c1:b5:c9:52:
                    b1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0B:EC:3B:B3:28:71:F7:02:80:2A:FF:B9:C2:E5:C1:C6:B1:FB:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/f08abee9-414b-3299-aa0d-823a1c6aaab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d/8eadffea-7ae3-46a5-afb6-3aee3190a76d.crl

            X509v3 Authority Key Identifier:
                keyid:0E:FB:0A:1B:F9:6F:6F:F5:DD:7A:77:98:29:40:51:63:C1:E9:09:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8eadffea-7ae3-46a5-afb6-3aee3190a76d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.135.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:10:9e:bc:d8:36:d5:b9:ad:b1:d4:f6:f3:90:5f:39:ac:7b:
         79:f9:46:b4:80:15:1a:ab:51:fd:52:25:e6:a1:5f:ea:a8:45:
         30:bb:72:ac:1f:83:23:a5:8b:24:a6:12:c4:03:50:b0:89:73:
         a7:04:95:df:31:62:e6:9f:1e:96:88:32:93:78:14:60:10:b1:
         1c:07:ae:53:41:4a:18:a9:37:95:ad:80:06:84:79:03:2e:2d:
         f4:0a:9f:fa:15:bd:bd:83:27:3c:99:ad:00:3f:b9:73:42:55:
         13:5c:6f:a9:0b:85:aa:2f:a6:5c:15:68:cf:f1:44:f1:02:ca:
         03:03:80:11:31:4d:8e:d0:35:27:87:f1:1e:9b:01:86:82:82:
         ba:ab:79:b9:52:46:19:8f:4c:ad:7a:25:b7:35:bc:00:53:3c:
         f9:b6:ff:6d:2e:85:8c:4c:f0:10:d1:ed:4e:a0:ad:6e:fc:66:
         78:ff:8c:7d:9d:ed:7a:f8:49:83:26:03:7c:a5:27:20:9b:e4:
         45:18:12:b6:79:b2:e7:8c:24:40:3f:b6:1f:ad:8f:2a:c9:cb:
         85:47:b4:bf:78:ee:ab:4e:b3:71:4b:d9:b8:ae:dd:41:d0:44:
         02:17:a1:7c:82:2e:90:a0:6f:8d:4f:38:7d:d5:07:1b:92:b3:
         54:f9:e0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 16:12:34 2026 by rpki-client