Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/48183b0d-014a-3b40-903d-63977be0fd76.roa
File:                     48183b0d-014a-3b40-903d-63977be0fd76.roa (raw, json)
Hash identifier:          14ELX1OUs+XlpOCsq78nBT7nx778bAbkhNDdJkzEhjQ=
Subject key identifier:   9B:B3:B0:59:0F:25:1F:AB:73:4D:FA:7E:B4:70:F2:38:39:83:56:39
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584CF6ECDA77067173EF18AD24C0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/48183b0d-014a-3b40-903d-63977be0fd76.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     13768
IP address blocks:        209.15.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:da:77:06:71:73:ef:18:ad:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=873f99c9-acfc-42c9-94ce-c8ec417d101a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:14:6d:d4:29:a8:10:36:f4:3d:13:72:3f:15:
                    c0:1d:f1:75:ed:da:5a:f8:f6:3c:68:4d:e6:c0:c1:
                    3c:9a:bd:90:2e:7a:84:b6:70:29:fa:43:ec:17:b2:
                    0c:3e:f3:b5:f6:fb:41:bf:06:d3:c7:b2:71:18:e7:
                    b8:0f:96:cc:94:76:8c:8e:88:20:1b:8c:65:61:fe:
                    5e:b8:5f:d5:05:85:65:0a:c0:50:bc:b0:2e:a0:ba:
                    d9:07:ac:08:e0:7d:b4:9a:51:68:6e:43:4e:f7:4f:
                    52:12:bf:69:b3:75:4e:0a:d9:76:d0:68:72:28:5d:
                    0c:43:8f:a7:f5:ad:16:91:eb:de:5b:0a:2b:ce:9c:
                    cc:b9:45:2c:4a:30:19:9a:a3:b5:c2:12:3c:c9:61:
                    01:76:07:74:e6:ce:ae:4e:98:32:80:b9:19:55:e0:
                    2d:f1:82:f8:59:26:e4:b5:48:f5:21:59:f9:c5:75:
                    8b:ee:fe:98:42:e9:e3:1c:46:4a:5a:39:6c:46:5a:
                    f7:13:67:6b:7c:f9:f0:69:00:a3:79:1e:81:bd:9d:
                    e0:c4:96:95:3f:60:66:d7:e4:72:c8:5c:b5:c3:30:
                    05:46:a3:36:6e:a9:ee:61:d0:c2:d6:79:55:bb:27:
                    49:c5:84:64:19:0d:00:02:1b:52:ac:68:5f:74:a2:
                    a8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B3:B0:59:0F:25:1F:AB:73:4D:FA:7E:B4:70:F2:38:39:83:56:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/48183b0d-014a-3b40-903d-63977be0fd76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.15.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:e6:c2:65:2d:d6:0a:e4:43:70:70:4e:7a:e3:ba:88:7e:3d:
         ee:be:99:52:25:8d:92:8d:14:19:aa:d3:d3:62:76:10:0f:b3:
         51:12:e2:f9:85:a6:2b:13:e5:9e:22:64:e3:50:88:ef:6d:36:
         ee:3f:d0:fe:8f:36:4e:17:0a:18:4f:a3:d4:de:b9:c8:9d:07:
         bd:85:63:6b:4a:60:49:f1:55:39:45:3d:78:83:3d:39:b3:7c:
         aa:4f:af:39:93:54:05:4d:fe:cd:81:54:ac:3a:42:c0:09:d3:
         cc:ee:b2:2b:44:b2:4f:26:46:c3:bd:02:ef:e1:8b:59:80:0f:
         9f:4b:5f:11:c5:3c:20:25:37:66:30:8e:16:21:a9:e9:f1:02:
         e5:3c:56:e7:1f:a8:c3:dd:c9:61:76:a5:e1:08:15:30:9d:09:
         85:c0:c7:6e:ec:dd:63:51:5a:1a:b2:01:05:fc:70:96:33:ed:
         a0:6a:57:ab:b2:af:f6:20:7e:e4:56:ac:39:33:98:50:55:b6:
         9e:d3:bb:0c:19:83:aa:d3:78:ca:97:48:27:de:2a:55:d9:91:
         fe:9e:d8:15:97:e0:b2:bf:b0:72:19:71:ac:2d:d7:8a:40:fb:
         8f:15:06:aa:15:87:cf:cd:ef:66:36:c2:fe:f4:3b:25:88:06:
         ce:3b:23:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:26 2026 by rpki-client