Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7/3ee28537-a62d-36df-b906-73daba427ce8.roa
File:                     3ee28537-a62d-36df-b906-73daba427ce8.roa (raw, json)
Hash identifier:          6gF9nFIimPzyGpnBYlR8wb6B281+kYvgyIdFdnqNBmI=
Subject key identifier:   68:BC:FC:85:15:4D:36:B1:3B:48:4E:5A:27:F5:7D:7C:59:46:B1:E6
Certificate issuer:       /CN=93efedd2-1e8b-4d2a-b834-4cc0388fe9a7
Certificate serial:       010D0C9F4328584DC8305B0F091BE46F51F3E320
Authority key identifier: BA:1E:C3:C3:4A:E1:45:8F:CE:6A:CA:C5:1C:2C:21:80:95:84:99:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7/3ee28537-a62d-36df-b906-73daba427ce8.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     13576
IP address blocks:        209.142.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:5b:0f:09:1b:e4:6f:51:f3:e3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93efedd2-1e8b-4d2a-b834-4cc0388fe9a7
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=c9143778-f6db-48f3-91f1-ea2d8ecd27e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:19:b9:32:09:9e:cc:eb:6b:87:6d:05:da:
                    85:1b:90:4c:c9:cc:f2:0f:b8:5d:d9:ed:e0:79:63:
                    97:fb:b0:38:c5:39:d7:c4:6f:32:fa:ca:84:85:06:
                    80:06:a1:80:d3:d1:43:44:93:a1:5f:32:25:74:e8:
                    fa:58:95:e1:56:89:5a:f7:cd:6c:a3:15:d5:b6:2a:
                    b0:b4:21:d0:c6:04:80:b7:46:32:ee:e7:a3:38:33:
                    10:7c:45:c0:8f:d8:4e:6f:03:94:b4:f4:b0:fc:83:
                    5b:e9:d5:c8:50:48:2a:b8:5c:ff:b7:d4:a5:47:e9:
                    de:52:fd:52:e7:41:01:fc:3e:fd:2f:50:96:8a:a1:
                    a9:5c:50:36:b9:d8:30:cc:78:db:1a:41:ef:e9:bb:
                    18:ea:56:56:2a:19:20:4a:b8:d9:8e:98:fb:44:3d:
                    27:86:83:74:f3:fa:d4:52:fe:3a:39:e0:cc:6f:48:
                    90:88:64:d0:60:83:ad:f3:1d:e1:9e:75:57:1f:b4:
                    b3:36:dd:59:95:cd:78:a3:cb:5e:d7:3d:73:4f:29:
                    8b:30:40:69:1e:01:ef:a8:6a:30:39:b9:43:3b:c0:
                    c4:e8:14:e9:eb:f2:67:1c:e7:7e:72:82:32:60:ad:
                    f5:da:ba:e1:bb:8d:02:1e:7c:33:ec:26:6a:92:23:
                    41:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BC:FC:85:15:4D:36:B1:3B:48:4E:5A:27:F5:7D:7C:59:46:B1:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7/3ee28537-a62d-36df-b906-73daba427ce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7.crl

            X509v3 Authority Key Identifier:
                keyid:BA:1E:C3:C3:4A:E1:45:8F:CE:6A:CA:C5:1C:2C:21:80:95:84:99:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93efedd2-1e8b-4d2a-b834-4cc0388fe9a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:0d:83:95:3e:d7:2c:87:1c:fc:5d:da:08:c2:01:60:20:d4:
         e4:2e:ef:da:b8:9d:a9:51:b4:df:e1:12:32:bd:e0:80:f8:ca:
         60:f3:37:48:91:95:1a:c9:f1:67:d9:0c:92:19:6c:af:54:be:
         d9:9e:22:51:67:c4:74:d2:0a:df:f9:b0:ab:c8:25:5f:2f:d7:
         65:b3:81:80:49:2d:4c:65:d4:c5:a2:2c:42:6d:59:72:32:b8:
         bc:69:dc:73:59:9c:c2:b3:76:67:7c:6b:91:d9:8f:12:08:7c:
         d6:67:7e:b0:8f:bc:ab:c6:4e:3b:4b:63:56:b6:cd:8c:56:0f:
         71:7e:f2:a7:d0:e2:e3:fe:aa:fa:d0:8f:0e:99:e4:dc:0f:aa:
         09:bd:62:4c:58:f7:8b:ee:52:8c:65:09:ec:6d:16:8b:43:6a:
         7b:24:65:3b:c2:fb:99:5f:ad:2e:59:7b:93:ff:61:c5:da:e5:
         cf:93:8c:80:3b:3c:f8:20:af:cd:0f:21:13:92:28:35:bf:3c:
         8c:2f:11:68:be:2a:9c:fe:78:b0:76:d9:45:75:21:10:88:24:
         cb:f8:ed:c2:f8:b2:8d:bc:5f:52:f2:49:99:6b:cf:d1:1e:5f:
         e0:eb:45:24:3d:22:54:96:14:76:47:ba:8b:7f:cf:f1:4d:f3:
         bd:2a:16:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:34:50 2026 by rpki-client