Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0ceac602-c7bb-32f7-ab85-c61e0603a3c3.roa
File:                     0ceac602-c7bb-32f7-ab85-c61e0603a3c3.roa (raw, json)
Hash identifier:          OaMsd9a9i5L06oYYFj45fks0Q+i4SuNSd1AsN1oxsBc=
Subject key identifier:   1F:CC:86:C6:8F:55:54:8B:DA:27:B2:89:4D:7B:A0:EA:93:FD:A8:D3
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584F4972D00A9936809F2D28F740
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0ceac602-c7bb-32f7-ab85-c61e0603a3c3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15290
IP address blocks:        216.191.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:d0:0a:99:36:80:9f:2d:28:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f50d73af-5ba0-4b78-aa86-0fe66bf9c650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:50:af:97:fb:ec:89:59:4f:ef:6c:6d:01:4f:
                    d4:10:f4:cc:db:63:1f:8f:dc:58:83:76:8b:c1:77:
                    c1:82:4d:1e:86:99:a3:a0:27:bd:c9:de:52:ac:bd:
                    f4:50:55:b0:51:76:cd:4b:db:6e:62:7d:96:66:0f:
                    e3:c6:82:9a:7b:3a:05:d4:35:76:f7:3d:b5:06:f2:
                    fc:db:06:c2:5c:e8:4a:aa:5d:f6:63:fb:d5:a3:0a:
                    bf:9e:b7:94:88:8b:58:51:ff:2b:d0:d7:77:40:eb:
                    2b:96:80:90:19:ce:df:90:1e:dc:a5:5f:21:35:55:
                    3b:7d:db:0e:cd:73:20:7c:57:fb:09:fb:30:05:92:
                    9b:9d:37:46:13:47:84:79:a4:2e:c3:52:80:ff:21:
                    43:a2:e6:bc:54:b3:5c:e0:59:3d:22:d4:a4:b3:ec:
                    b0:45:95:4b:dc:b2:6c:b9:9a:69:31:db:73:08:39:
                    e5:87:6e:a2:70:b2:e4:cd:da:cc:55:ab:e5:72:b9:
                    be:a3:ba:a1:1e:e6:91:be:ee:fd:41:62:31:f1:e7:
                    c5:63:85:6a:c0:39:a3:a4:d2:27:8a:7e:00:c7:e4:
                    a6:a4:13:34:06:5a:f6:aa:2c:c6:81:4a:72:d4:0e:
                    8a:aa:40:c9:7e:28:12:3e:60:f8:b3:73:4e:1b:bd:
                    83:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CC:86:C6:8F:55:54:8B:DA:27:B2:89:4D:7B:A0:EA:93:FD:A8:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0ceac602-c7bb-32f7-ab85-c61e0603a3c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.191.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:e9:19:ef:fb:57:c6:b6:06:31:dc:ed:72:15:a8:f9:88:65:
         d7:05:4e:ea:28:d3:c1:66:bc:36:bd:3b:73:4b:20:86:2b:bc:
         25:05:a4:85:38:8e:05:94:0d:3a:f6:fe:ce:8b:de:cc:cb:1a:
         34:d9:29:3e:e9:78:75:fa:c1:59:17:57:0a:9a:75:5f:9d:4e:
         a3:14:a0:08:4f:b8:33:db:ec:d6:c6:0a:5b:a4:6a:a2:11:57:
         1c:8b:58:fb:5f:9f:05:4c:4d:2a:bc:73:e3:01:80:d6:75:b9:
         a4:c6:f1:c1:30:8d:74:28:ce:52:46:f5:68:39:9d:64:a1:4f:
         78:7b:3b:ed:6b:67:98:28:48:dd:58:8e:af:88:cc:22:b8:fe:
         ae:27:9f:ad:cc:35:55:80:c3:56:a3:50:c5:66:7a:9e:33:85:
         82:d6:ef:ba:35:ca:bf:a7:64:c1:e7:bd:14:a1:38:95:72:92:
         f3:c3:3f:c8:a6:fe:5d:e0:f1:d4:6a:53:3b:82:80:cb:ec:df:
         fc:9a:1b:a8:75:03:06:3e:e9:a9:16:26:5b:33:3e:3b:e0:d1:
         db:96:5e:22:be:c2:e7:6f:d1:d1:e3:74:93:ae:a3:18:42:59:
         77:64:bb:85:4d:98:ae:a8:70:ba:b8:fb:a7:c8:38:bf:65:32:
         cd:33:46:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:06:12 2026 by rpki-client