Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/e86b2bcd-e0c6-3540-9739-11e9823e2f3a.roa
File:                     e86b2bcd-e0c6-3540-9739-11e9823e2f3a.roa (raw, json)
Hash identifier:          zoKHOMyNZLg7WvhiX3ipkwtkrKcxqGYbOmVd/4Vzp2A=
Subject key identifier:   24:F3:1A:DD:4A:BF:9F:BE:44:A9:56:A9:DE:5E:B4:90:55:FD:FD:83
Certificate issuer:       /CN=25d7d3fc-8bab-49db-bccd-5054dcd6f19b
Certificate serial:       010D0C9F4328584DC995AC51CAD5527A6BF16280
Authority key identifier: 4D:24:2B:65:21:DB:48:BF:86:5D:B8:81:7F:30:5C:5D:07:93:C0:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/e86b2bcd-e0c6-3540-9739-11e9823e2f3a.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     8075
IP address blocks:        209.94.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:ac:51:ca:d5:52:7a:6b:f1:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d7d3fc-8bab-49db-bccd-5054dcd6f19b
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=556f90c8-e4d5-4e10-a0d5-28ad84d9c97d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4d:c3:5f:79:4e:0d:ec:ef:80:84:42:3d:5f:
                    f6:ec:24:c2:71:1c:90:a5:cb:60:61:34:0a:d0:52:
                    26:2a:1d:18:b3:59:5d:64:71:7b:c4:b9:8d:c7:f9:
                    f9:60:b7:62:d3:c7:1e:d5:ea:94:03:2c:e1:c5:26:
                    ab:f8:91:c5:ed:06:87:64:5b:4d:38:9d:00:61:e7:
                    d2:a9:93:cf:a0:d2:ed:d8:95:4d:87:cf:f1:7c:a1:
                    11:88:e6:89:94:76:1e:58:70:0f:a3:e9:87:1e:2d:
                    72:d6:fb:46:13:b1:e1:7e:47:03:4a:c5:2b:35:93:
                    55:f9:f1:a4:7d:53:bd:d2:da:18:45:a8:c9:3a:16:
                    40:4b:1c:ad:7e:a2:53:4c:40:38:23:7d:98:8a:0b:
                    51:ac:b5:ef:5c:f0:f3:40:b5:f9:50:aa:f1:91:f2:
                    ce:b5:64:59:8b:f2:95:97:a8:f4:89:06:0c:5d:41:
                    e3:41:34:a6:61:43:7f:a3:74:60:74:f6:98:17:c6:
                    8c:93:ee:5a:a6:96:37:6b:b5:07:82:66:29:02:73:
                    47:3b:20:f6:8b:3c:dd:0b:70:84:78:59:42:3b:40:
                    c7:38:60:75:1e:33:28:15:5c:e4:50:8e:bb:64:06:
                    cf:e3:ea:ff:fe:87:20:5f:ef:b1:ee:a3:1f:fa:e7:
                    fa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F3:1A:DD:4A:BF:9F:BE:44:A9:56:A9:DE:5E:B4:90:55:FD:FD:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/e86b2bcd-e0c6-3540-9739-11e9823e2f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.crl

            X509v3 Authority Key Identifier:
                keyid:4D:24:2B:65:21:DB:48:BF:86:5D:B8:81:7F:30:5C:5D:07:93:C0:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.94.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:c0:42:18:dc:50:f9:b1:be:a1:a0:bb:7b:81:52:48:bc:59:
         34:79:15:a8:61:fc:db:42:28:6f:1c:53:51:18:14:4a:9a:db:
         10:a0:c3:4b:71:6d:6a:66:3a:50:0d:0f:06:72:07:61:83:f9:
         48:1f:01:dd:17:6e:5d:ff:f0:ca:d0:9c:cd:99:56:57:ac:5a:
         c6:7c:1f:c3:8f:31:a2:28:0b:d4:27:1b:11:fa:d2:34:c2:44:
         36:3f:28:a8:b1:a9:41:77:27:66:76:f7:ce:c3:21:01:93:40:
         ad:97:16:9e:94:17:30:ac:35:e2:8a:5c:69:f0:ab:b4:fe:5e:
         42:1c:99:37:df:01:90:0a:f0:6a:ff:f6:a1:45:77:e2:c0:60:
         15:bb:7e:ea:da:05:bd:44:61:82:49:8e:5b:40:ff:d8:c8:bf:
         b0:60:ae:3e:57:82:52:53:57:3f:3a:7f:ba:b3:09:ab:64:94:
         74:44:a6:47:ca:6d:5d:50:54:27:bf:e2:ee:28:2e:33:89:89:
         65:ff:7a:48:5f:ab:0f:4c:aa:f5:11:a5:0d:00:38:d9:68:35:
         7a:6f:72:f8:a3:90:68:74:b4:43:f3:fe:de:bb:b4:b0:40:c1:
         8f:4b:be:f4:f5:c5:2e:af:8a:c9:8a:bd:d2:92:80:78:87:35:
         8e:d1:7c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:23:52 2026 by rpki-client