Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2a9d48c4-e74c-34c5-8a72-0826c68fc3f1.roa
File:                     2a9d48c4-e74c-34c5-8a72-0826c68fc3f1.roa (raw, json)
Hash identifier:          03J1XAx5N+QeBsdgcMNilJ+FgG+9xNqYcYF6+v9x1lw=
Subject key identifier:   D4:DD:69:DF:C2:08:4A:5E:E5:EB:FF:0A:FE:AD:7D:B1:FF:9A:23:43
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584E482490B812BBA62C184EC880
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2a9d48c4-e74c-34c5-8a72-0826c68fc3f1.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     4474
IP address blocks:        216.166.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:90:b8:12:bb:a6:2c:18:4e:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=47da1b26-205e-433b-aa3d-987aea2fcf30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4e:43:d7:b1:2e:a1:1f:9c:60:2d:93:9c:d0:
                    03:0b:a3:58:b4:d5:6c:40:d5:cf:65:3a:ea:8b:6e:
                    b2:5a:6b:1a:3f:d9:bd:0e:25:7c:74:7a:a3:35:33:
                    ba:22:1f:07:96:2b:0b:aa:85:94:d6:00:4b:4d:9b:
                    89:df:6c:43:84:02:b0:d0:b9:2d:a1:7c:de:a6:fc:
                    e8:f9:d2:85:59:e4:e0:ff:ee:a7:6d:7f:8e:56:de:
                    f6:57:29:74:ad:0a:1e:d7:fe:e5:f6:03:a8:20:34:
                    e0:dc:d7:54:ef:fc:b7:90:46:3f:a0:e3:05:e6:ed:
                    27:9f:af:e9:25:ad:cb:bd:1b:f2:27:6a:ae:b5:22:
                    fa:79:80:ea:4e:26:03:51:f1:a5:33:a1:5e:3c:e2:
                    93:fc:f6:7d:ae:a2:85:be:4f:ad:0f:a9:69:bc:12:
                    cf:13:f3:64:7e:0a:41:2e:da:89:16:4a:07:c4:03:
                    b3:7a:6d:40:bc:d7:16:0f:9d:1c:11:e4:73:7c:1d:
                    07:6c:1e:97:cd:82:0f:8a:b1:8f:cc:28:d8:32:3f:
                    92:f3:cc:ae:36:a2:36:df:f8:58:b9:83:3c:47:fc:
                    b2:24:d1:ce:fc:74:58:f1:51:e0:48:f8:76:de:fe:
                    f0:39:6d:ee:5b:64:0b:e2:22:a5:1c:0e:5d:6a:62:
                    af:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DD:69:DF:C2:08:4A:5E:E5:EB:FF:0A:FE:AD:7D:B1:FF:9A:23:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2a9d48c4-e74c-34c5-8a72-0826c68fc3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.166.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:10:a8:3b:52:b5:fb:bc:4a:f8:14:6d:63:7a:49:20:19:af:
         97:53:3d:db:d2:43:3b:8f:51:90:cc:c1:07:db:9b:01:a5:7c:
         72:26:ba:31:3e:c7:4c:da:55:f5:f4:22:bd:c7:6b:ea:2d:fd:
         66:92:12:84:de:f5:5c:b0:42:de:3a:95:1f:ef:1f:99:56:0f:
         cf:87:58:67:3f:28:c7:b8:d7:50:c9:49:b4:27:36:fb:6a:d8:
         69:41:c3:f7:50:89:af:07:7f:9d:5a:2c:4a:95:f5:fe:f9:03:
         0c:16:8b:58:31:25:7b:5b:7c:b9:77:25:3b:bf:e5:27:ae:c0:
         1a:b8:5a:e7:22:19:9b:e2:91:e4:48:3b:95:05:e3:af:7b:f8:
         7a:d7:cf:3a:71:39:0d:e9:54:47:24:dc:17:82:1b:d7:0c:89:
         56:63:6d:c0:85:3f:96:f4:73:4d:1d:8b:d0:af:cf:2e:8b:75:
         40:8f:03:90:09:20:98:bd:7d:44:78:dd:cf:12:fe:c0:a2:0e:
         e1:14:a2:82:0f:a9:2d:5e:2f:1c:50:61:d9:f0:aa:53:d8:eb:
         ca:71:84:78:fc:84:45:45:32:4a:15:40:a4:a0:3a:2e:d2:95:
         02:06:d9:b0:0d:ea:76:5e:b5:00:30:ad:39:38:c7:50:cb:df:
         15:7d:bb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:06 2026 by rpki-client