Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8a33fbf0-e343-35d7-84ac-0fdf65a6c3d3.roa
File:                     8a33fbf0-e343-35d7-84ac-0fdf65a6c3d3.roa (raw, json)
Hash identifier:          zA/HKRlK4rG7gTCKcrBayD3jM2VViF6S61acR3cJALk=
Subject key identifier:   95:E2:CC:30:3D:E7:36:E1:AC:8D:C7:77:76:F7:D1:A2:05:E6:EA:6E
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584DCAFAED1D22C89A6287CD9300
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8a33fbf0-e343-35d7-84ac-0fdf65a6c3d3.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     15290
IP address blocks:        209.146.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:ed:1d:22:c8:9a:62:87:cd:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=804eb28c-5bc3-47cf-9c30-fbb4f78c9c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:ca:5a:b3:da:36:5d:d5:56:ff:cd:96:e1:
                    9b:0d:6f:65:53:1b:86:6d:0c:3e:d6:f7:5b:38:df:
                    b8:49:89:ec:21:e2:8b:10:f6:0b:b3:95:f9:53:ed:
                    dd:2a:7e:f4:f9:b4:2c:dd:d5:7f:be:5c:63:25:80:
                    63:2e:8f:42:dc:52:80:76:38:8c:cd:1c:05:7a:c0:
                    db:23:ad:ce:9c:69:12:2c:85:24:3d:b5:83:c7:bd:
                    c0:0e:68:9d:4b:1e:20:22:c2:4e:86:63:e5:0c:93:
                    3a:83:fa:02:09:6c:28:c7:e9:15:eb:14:34:03:23:
                    33:3a:ee:df:3e:22:ae:50:16:9d:69:c7:f8:f5:66:
                    d7:88:65:67:2c:0d:36:37:9d:09:7c:a6:39:5e:8f:
                    0a:76:ac:eb:3c:af:12:5a:29:05:c1:4c:ec:a9:f5:
                    23:b3:07:b9:7a:32:51:6d:8b:74:77:5e:cb:ad:c9:
                    0d:ce:62:72:2a:2c:45:ca:4b:f5:c3:04:c2:85:17:
                    7a:5a:db:75:09:5e:07:2a:fd:26:eb:48:fe:68:1f:
                    5a:11:4e:48:17:cf:50:7f:50:a4:fd:5e:26:b9:4f:
                    0f:1b:99:fa:8f:b6:4f:5b:f5:d4:24:4f:b4:d3:62:
                    32:96:a0:f1:5b:a3:04:5d:a9:38:fe:bf:cb:8d:32:
                    f8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E2:CC:30:3D:E7:36:E1:AC:8D:C7:77:76:F7:D1:A2:05:E6:EA:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8a33fbf0-e343-35d7-84ac-0fdf65a6c3d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.146.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:04:8f:32:e5:db:da:03:1c:12:45:d5:55:43:74:27:7a:18:
         e0:06:91:0c:f3:94:fc:d8:13:37:59:3c:99:42:cf:82:1e:79:
         ba:af:85:a0:74:9f:86:77:a9:3b:05:a7:91:83:b6:6c:99:1a:
         d3:84:41:bd:13:f5:7c:71:11:9c:78:60:32:c4:80:a8:60:df:
         08:fe:6d:c7:56:40:04:b7:06:85:14:0a:6d:c3:39:c4:08:a5:
         ca:ec:1b:b4:80:0e:05:dc:4b:d1:9b:d7:88:57:69:05:7a:bd:
         e9:aa:49:2a:11:27:9a:83:6d:f1:91:5d:15:cc:33:ce:02:37:
         c6:2e:93:22:a4:38:d9:5c:9a:cd:62:7e:b2:a0:d8:c3:2b:77:
         5e:b4:36:6c:e8:c4:97:b0:39:4a:6f:0f:ff:43:9d:07:72:b7:
         d3:31:05:e7:0f:aa:b3:9d:7c:14:6b:8b:99:75:97:b5:47:ab:
         1e:f5:9a:a9:32:58:3b:fe:cc:a1:19:c1:d0:df:16:86:9f:a8:
         bf:26:e5:c0:5d:b8:bb:50:35:2d:12:3c:c3:9b:f8:51:aa:ec:
         a2:41:1a:d0:8f:77:be:74:6c:eb:36:cd:49:60:1c:4d:dc:bc:
         46:b0:99:0f:4a:ad:47:66:b4:81:ca:6b:34:fb:1b:97:67:fd:
         90:ab:13:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:43:40 2026 by rpki-client