Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/e22cd4fa-5665-39d4-843f-a7ad97b70800.roa
File:                     e22cd4fa-5665-39d4-843f-a7ad97b70800.roa (raw, json)
Hash identifier:          h+tFbo5VjuKCvPDx9Zk6t3IjLtaIay9XC8c8kpNd6Zg=
Subject key identifier:   3A:9D:E9:E7:16:87:94:0F:4D:8F:FF:D1:28:C9:FD:F9:8C:F5:23:6C
Certificate issuer:       /CN=40163235-a725-497c-92e8-c077e46672e7
Certificate serial:       010D0C9F4328584DFBD621CAA70D193629826980
Authority key identifier: 09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/e22cd4fa-5665-39d4-843f-a7ad97b70800.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     33083
IP address blocks:        209.135.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:21:ca:a7:0d:19:36:29:82:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40163235-a725-497c-92e8-c077e46672e7
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=a2567902-3ae5-4528-b367-d9ffdca519c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:9b:36:fa:a2:70:f2:ba:db:fb:d4:d1:c0:
                    d9:c0:25:79:fc:70:e4:e5:9b:d0:55:24:a8:44:09:
                    de:70:b2:10:11:cf:ed:ab:b1:69:6f:1a:74:8b:4a:
                    2b:83:de:ec:2c:f3:d8:a8:17:06:90:0e:b5:b8:4d:
                    c6:79:72:82:09:14:0a:55:56:d2:e4:d5:a1:bb:01:
                    f4:c9:4a:46:b5:57:9c:d3:d3:8b:bf:f9:84:b1:e4:
                    37:e6:7f:02:42:88:63:9d:a0:e6:10:5d:9d:a3:c9:
                    66:86:5c:48:ce:a9:41:b0:04:a4:4e:6c:a6:b5:4a:
                    eb:59:ff:2d:99:e0:ba:17:bb:a0:49:61:6a:22:bd:
                    31:a4:09:a7:25:17:b3:fa:7f:2f:7f:55:5b:e5:ad:
                    f1:a3:a0:93:3a:8c:33:18:32:5f:3a:b3:80:71:13:
                    6b:20:ca:8a:33:13:9b:c9:4e:f6:cf:fc:9a:6a:1b:
                    4c:43:36:e5:c6:39:06:68:5c:45:c5:74:1a:58:5c:
                    55:64:bb:82:85:97:4e:c6:b6:b2:ff:d4:6e:4a:86:
                    77:7e:f1:33:4f:47:f4:14:bd:00:31:d5:35:fa:37:
                    7a:ab:20:72:fa:ea:a9:3b:fd:7e:e7:3d:77:a2:0c:
                    41:c9:01:1b:cc:bb:86:73:5a:eb:6a:2f:ec:d7:51:
                    cc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9D:E9:E7:16:87:94:0F:4D:8F:FF:D1:28:C9:FD:F9:8C:F5:23:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/e22cd4fa-5665-39d4-843f-a7ad97b70800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl

            X509v3 Authority Key Identifier:
                keyid:09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.135.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:31:44:3f:c1:5f:92:f0:95:20:b3:92:3c:e1:46:6b:4a:1d:
         b7:16:6e:35:6b:63:ec:da:4f:08:39:ee:52:56:e4:dd:46:70:
         44:74:7f:58:18:a9:b2:7e:9a:1d:1f:f2:2c:6a:c2:ce:44:72:
         b0:e4:8a:60:1c:dc:c8:1b:d5:6b:21:9a:d0:d8:da:9d:44:d9:
         ea:10:92:f3:65:b3:d8:cf:e0:8d:0c:ed:88:f3:06:d6:f6:10:
         04:c2:51:c8:24:22:f1:60:b4:01:db:7b:28:84:0f:45:e9:8a:
         cd:84:4f:22:0e:c2:45:f9:83:8c:09:d8:b1:75:ad:6e:63:e1:
         01:fe:a9:62:da:6e:f0:1f:cf:f7:dc:2b:99:88:31:90:f9:8f:
         c4:61:6e:f8:d2:84:1d:11:d8:72:b7:97:5e:d5:48:71:5a:a5:
         78:dc:c4:c5:56:19:70:9a:17:bf:65:49:7f:c0:1d:71:f9:a9:
         8c:3c:25:df:a5:f2:1f:c8:2e:77:2a:0d:2b:4d:53:30:d0:78:
         a5:0b:38:f2:0f:9a:63:21:65:6d:d4:5e:12:1e:66:c4:d6:1e:
         d5:57:6a:97:8c:e6:9e:37:d5:9d:51:a4:a3:a2:28:74:39:42:
         26:3a:7f:c5:36:87:d2:9a:b9:08:c4:fe:8a:d6:5d:3d:1f:2a:
         c7:4e:c7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:42:31 2026 by rpki-client