Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ff0a30d9-f78b-3b78-b556-12ea625d5317.roa
File:                     ff0a30d9-f78b-3b78-b556-12ea625d5317.roa (raw, json)
Hash identifier:          JB7WMjgSrvGfeVQ1Wwf/S6SLnVwj3TcKAv3KPw2mTOg=
Subject key identifier:   71:EC:72:34:7C:1C:8B:9A:DB:94:5D:07:CC:A7:3F:82:E7:CA:D0:7B
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D1F4A033679034652527E3180
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ff0a30d9-f78b-3b78-b556-12ea625d5317.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     6461
IP address blocks:        208.185.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:03:36:79:03:46:52:52:7e:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=079c0df6-ab06-40e9-a6f1-6ced7dd90724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:61:4b:9d:1a:31:f2:6b:94:9e:f7:bd:9d:e2:
                    2a:4c:8b:c4:bc:d2:3e:13:28:71:52:32:eb:af:18:
                    06:a8:df:a4:de:33:7d:55:ae:00:2c:4c:55:b2:a3:
                    09:92:a4:92:69:81:89:57:9d:2a:8c:12:28:99:ec:
                    71:ce:53:c0:b3:84:d9:0e:75:ef:dc:13:fe:8f:f9:
                    28:9f:60:fe:dd:aa:f5:ed:c9:f7:16:45:ea:c2:af:
                    f7:9d:0f:09:cf:16:f0:fe:f2:59:78:b8:85:18:a3:
                    38:bd:fa:79:95:3d:25:34:b4:d3:41:3c:93:ae:b9:
                    7b:51:95:17:23:fb:fb:0f:b9:fe:29:4a:6b:f1:4f:
                    02:8e:16:50:12:c1:a4:ad:a0:8b:88:23:d9:92:be:
                    29:a0:4b:bf:0e:93:c9:ae:14:8b:e2:cf:05:34:71:
                    f4:86:fb:1c:02:d3:0d:fa:38:b0:c5:f0:d5:1a:6c:
                    5d:44:1a:ab:2a:76:e9:44:24:5b:a2:cc:32:ae:91:
                    1c:c6:b2:ff:a8:f0:9f:c4:a8:a9:51:db:f2:09:9e:
                    15:0d:dd:9e:47:fe:a4:5b:76:77:b6:32:0d:f6:9b:
                    cd:da:9e:d6:9e:5c:30:b8:3f:5c:0d:5a:f5:38:06:
                    b4:0d:e1:f3:c6:13:cc:76:2b:37:ef:eb:45:ee:87:
                    b0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EC:72:34:7C:1C:8B:9A:DB:94:5D:07:CC:A7:3F:82:E7:CA:D0:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ff0a30d9-f78b-3b78-b556-12ea625d5317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:69:4a:cd:a9:4e:eb:a8:cd:ec:ce:6f:19:90:a0:50:ee:96:
         49:3c:6e:d0:50:6b:7b:dc:80:28:85:49:f1:7b:98:e5:e2:b2:
         86:ad:3d:c5:14:88:52:7d:2c:6c:43:cd:cb:cf:f7:46:9c:22:
         e6:23:2d:b5:21:20:d2:73:08:fe:01:90:08:cb:08:71:28:22:
         ad:80:ec:86:30:05:46:ea:b9:83:22:b2:dc:93:f0:cc:48:ab:
         b5:cc:07:13:13:00:03:6b:1e:ea:46:32:34:b0:a9:d9:30:df:
         0a:03:bf:76:77:ad:f2:73:e4:bf:f0:51:23:94:80:c4:5f:e1:
         ac:25:20:f3:ae:88:af:86:f8:76:1f:2d:b7:03:8b:04:18:95:
         a2:f0:ce:6d:2d:6b:80:5c:13:d1:ea:09:3d:5f:e3:b5:7f:aa:
         2e:de:da:3b:78:97:8e:a8:84:11:48:27:f1:da:2f:32:0b:c8:
         bc:19:42:42:a7:92:67:b6:32:b8:b1:8e:c0:b2:1e:12:b8:cd:
         e2:a4:70:a6:b4:eb:75:41:cb:5c:02:f9:45:3c:71:50:a7:1c:
         9d:96:04:21:0c:0f:e5:f1:75:50:15:0c:83:35:ba:70:20:b3:
         c9:74:2f:b4:67:59:1d:b4:04:76:ee:0a:05:64:c3:6a:f0:3f:
         41:8c:b5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:56:58 2026 by rpki-client