Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5839f51d-bd45-377b-8ced-7dc40f2ae293.roa
File:                     5839f51d-bd45-377b-8ced-7dc40f2ae293.roa (raw, json)
Hash identifier:          Az5mongKg1j53P0Zb8vXziQnKnwtg99C0gbOpe2DsOU=
Subject key identifier:   9A:69:B1:37:4D:07:8A:69:12:2A:88:C6:0F:01:23:A4:49:12:DE:38
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584F4973303D28C7B6F2D54E3180
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5839f51d-bd45-377b-8ced-7dc40f2ae293.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22623
IP address blocks:        207.245.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:30:3d:28:c7:b6:f2:d5:4e:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6b7a0a70-431e-4560-9ab9-d38c732fd25d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:86:ce:03:46:33:61:77:48:f2:32:64:84:5a:
                    af:87:e8:b8:71:09:fe:be:97:8a:c3:13:a5:3a:cc:
                    49:8f:25:0b:ed:f0:23:12:9c:72:79:5c:0b:38:23:
                    73:81:05:4b:dd:5e:88:2f:ba:e5:06:23:5a:2b:e0:
                    75:f5:37:0c:4f:fd:4e:06:a4:39:0e:35:97:31:94:
                    76:17:d7:80:f0:01:55:c8:7d:6f:bd:c8:f7:72:7b:
                    1d:31:82:b8:5c:fa:95:0e:51:98:b8:4f:07:12:10:
                    32:52:ee:84:dd:1d:92:d8:12:55:f7:89:23:47:c1:
                    c5:b3:83:87:8c:cb:2b:af:4c:15:0c:42:45:aa:ce:
                    31:a3:90:36:46:4f:83:2c:ae:b1:2b:65:77:ba:e6:
                    df:dd:7d:19:a6:d5:e9:65:1b:5c:c7:fc:de:4b:01:
                    de:60:1b:12:6f:58:b4:45:98:a3:d7:2f:b8:db:d4:
                    25:21:7e:0f:aa:48:bd:cf:6f:a9:26:22:cb:49:99:
                    b5:77:ac:8c:d7:b4:74:61:85:d6:e6:c9:da:7b:e0:
                    ff:61:ae:83:3f:a9:45:4c:1f:e1:44:95:ef:00:bc:
                    11:c8:34:b4:40:10:9d:80:bb:a4:ea:c5:ec:93:13:
                    b3:8d:0b:08:90:e5:33:0d:d1:31:fe:7b:a4:5a:f2:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:69:B1:37:4D:07:8A:69:12:2A:88:C6:0F:01:23:A4:49:12:DE:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5839f51d-bd45-377b-8ced-7dc40f2ae293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.245.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:30:99:62:44:24:83:76:24:5d:28:9a:b9:3f:e5:20:37:c3:
         6e:7b:6a:55:b4:22:9f:b8:6b:82:5f:f0:ef:1a:e7:50:ff:07:
         a8:b9:7d:87:48:d9:6c:cc:1d:06:3b:6a:c7:61:d3:8b:70:f2:
         56:c3:a6:81:50:cc:9c:68:9c:51:51:a3:a4:59:2d:9b:60:d1:
         af:11:20:fc:3d:8c:91:41:f8:9e:ea:a5:37:0a:c4:18:38:fb:
         5e:aa:11:6c:dd:68:08:b6:ca:ba:ec:39:d1:dd:f2:ae:41:80:
         55:7f:bd:97:90:23:13:28:f6:f4:bf:22:f3:7d:40:d0:6e:6e:
         90:b8:be:c0:6f:7d:23:d1:76:f6:f3:1d:82:35:61:3f:82:ba:
         0b:b9:9d:f6:a7:46:91:ac:2d:2c:73:ef:ba:0b:c3:2e:57:3c:
         05:83:b5:6e:49:98:b9:fb:9b:d5:b9:fd:b4:56:b9:f6:a2:3d:
         d9:34:1b:43:2f:f9:ab:1e:2e:ff:1d:97:da:13:f3:0c:60:a6:
         4f:7f:cd:4a:a8:1f:ae:48:83:e0:e5:df:0b:58:be:2b:ca:da:
         3c:88:a9:f0:d2:2c:1a:fe:a1:51:43:5c:cf:f4:5f:4a:17:c3:
         79:c4:41:da:f9:58:a4:60:38:b7:6e:58:17:6c:d4:c4:bd:0d:
         7b:6d:27:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:37:16 2026 by rpki-client