Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a/2daa5850-82c6-3bd2-8154-4fea1fbafca6.roa
File:                     2daa5850-82c6-3bd2-8154-4fea1fbafca6.roa (raw, json)
Hash identifier:          nmn3YSSZc7Dw2wY2Mj8yWqdEkoiJ4jcVvP6saOI4TLE=
Subject key identifier:   2A:F0:7F:FE:0D:3D:8A:6A:5F:45:CF:05:13:74:34:12:B6:7C:1B:31
Certificate issuer:       /CN=93cbb231-50f0-43e8-b3c8-5d5831adb28a
Certificate serial:       010D0C9F4328584C9536DB7700C2DC38A6A11980
Authority key identifier: 26:3D:54:DD:96:3C:D3:D7:D4:00:2A:9E:2A:AF:2A:E6:D8:94:68:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a/2daa5850-82c6-3bd2-8154-4fea1fbafca6.roa
Signing time:             Tue 20 Jan 2026 02:00:29 +0000
ROA not before:           Tue 20 Jan 2026 02:00:29 +0000
ROA not after:            Mon 20 Apr 2026 01:00:29 +0000
asID:                     14618
IP address blocks:        167.94.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a/93cbb231-50f0-43e8-b3c8-5d5831adb28a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a/93cbb231-50f0-43e8-b3c8-5d5831adb28a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:95:36:db:77:00:c2:dc:38:a6:a1:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93cbb231-50f0-43e8-b3c8-5d5831adb28a
        Validity
            Not Before: Jan 20 02:00:29 2026 GMT
            Not After : Apr 20 01:00:29 2026 GMT
        Subject: CN=9e69ec25-9e5e-4d90-b5bf-a35b8f7b774c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:82:57:fd:ec:d7:85:2a:dc:9e:e6:72:b5:93:
                    ed:ca:bf:fb:e2:14:14:41:84:c0:f8:cf:21:e6:df:
                    65:8a:22:ac:56:b4:80:25:fd:b3:c0:7c:99:ab:b2:
                    56:72:5b:1c:d7:fb:8e:99:63:e2:cf:12:ed:82:25:
                    58:fd:fd:31:0f:ae:f8:fd:88:84:6c:5f:f0:b6:fd:
                    fa:25:d2:f9:76:dd:5a:ce:c6:e0:79:9e:c9:bb:1f:
                    30:b6:1d:b9:ba:ac:d1:f5:0e:64:60:e5:22:aa:de:
                    f1:59:f3:0b:d6:67:84:d5:7b:1c:b8:f1:29:99:60:
                    d4:1f:c4:10:1b:c9:a4:19:a6:c7:fb:8f:2b:9a:d8:
                    98:42:16:5a:10:7b:77:a3:cf:6a:48:8c:09:f2:0e:
                    52:5b:ac:69:76:c4:af:6b:d2:30:a1:c9:97:9d:b6:
                    3f:a1:be:8a:06:81:a1:48:33:fd:32:68:37:82:ba:
                    70:16:3e:a6:b8:9c:a9:74:b0:3a:c7:8d:16:54:fb:
                    2b:8f:c7:b5:3c:6c:88:83:61:71:36:2a:dd:09:02:
                    fe:9b:4b:00:72:10:87:18:ce:16:1e:7d:ba:5b:55:
                    d6:88:25:58:a4:a7:d8:d3:f6:be:77:4f:e5:d4:ac:
                    1c:95:17:64:b7:61:c0:bb:b9:9e:43:6f:cb:ba:13:
                    c0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F0:7F:FE:0D:3D:8A:6A:5F:45:CF:05:13:74:34:12:B6:7C:1B:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a/2daa5850-82c6-3bd2-8154-4fea1fbafca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a/93cbb231-50f0-43e8-b3c8-5d5831adb28a.crl

            X509v3 Authority Key Identifier:
                keyid:26:3D:54:DD:96:3C:D3:D7:D4:00:2A:9E:2A:AF:2A:E6:D8:94:68:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93cbb231-50f0-43e8-b3c8-5d5831adb28a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:43:c4:c4:8b:c1:c1:dd:b8:d9:e3:15:88:95:00:99:de:26:
         71:55:ab:f1:64:68:0f:9b:ec:fd:15:f7:d3:38:62:d0:fb:8d:
         2c:a8:4b:1b:a2:5a:7b:38:ce:62:e1:12:45:75:3d:3f:7c:d5:
         0f:39:b1:2a:92:44:53:76:02:4b:80:79:96:c7:ea:5e:42:3b:
         45:d5:cb:1d:4a:91:85:a3:b0:5c:62:6a:dc:78:37:39:5d:90:
         65:0e:af:bf:32:e7:2d:0b:60:8a:fc:92:cc:47:4a:22:67:22:
         59:8b:f3:04:44:01:77:4e:f3:c2:05:2a:36:a2:09:d0:bc:1d:
         3b:28:03:a6:b5:7d:2d:c8:fe:09:14:ce:38:d7:7b:c0:56:34:
         fb:b3:c9:59:e6:6e:f6:91:8e:58:ca:ad:33:38:3f:02:78:41:
         67:b1:08:79:ef:0b:75:0c:bf:75:47:d1:ee:e2:a8:8d:e2:ac:
         f9:79:fa:fb:8c:38:ad:76:4b:03:45:4c:ba:07:85:31:db:6d:
         d7:76:1e:3d:4a:a7:92:53:99:50:db:3c:df:10:c6:2f:c3:22:
         75:5a:58:12:0c:da:ba:18:04:d0:fd:10:14:21:0f:e4:20:94:
         04:4b:41:02:ef:d8:1f:89:1c:dd:01:04:40:5a:3b:9c:74:b0:
         3d:da:92:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:39 2026 by rpki-client