Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3d339b3a-0ee4-3ef7-9752-c5f1ef78f93a.roa
File:                     3d339b3a-0ee4-3ef7-9752-c5f1ef78f93a.roa (raw, json)
Hash identifier:          mX98bvyutetNVjEVYPx/z4V7tPY+QqONfulj+SngJuA=
Subject key identifier:   09:62:17:01:0D:9A:D8:42:F6:A0:5A:24:C8:39:AA:9F:3B:BC:57:D5
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584EFF777BB4BFFF128F19D60F80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3d339b3a-0ee4-3ef7-9752-c5f1ef78f93a.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     11359
IP address blocks:        216.222.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:7b:b4:bf:ff:12:8f:19:d6:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=b3bf113c-c2f6-46f1-b0d1-21675acf641b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:24:b3:5d:80:a8:a2:87:73:9c:8a:5f:e1:0a:
                    eb:29:f4:fb:dc:b6:91:d3:d4:3d:ad:65:14:3f:4a:
                    e2:95:12:d6:49:7a:ab:4a:18:91:35:2d:41:9c:6b:
                    c2:53:5b:83:ef:c3:e9:5d:85:a0:2b:89:00:86:05:
                    7c:d8:62:85:31:bf:28:8f:65:23:c7:39:10:a8:e1:
                    7b:f6:e1:52:23:f3:2e:20:32:20:4d:5b:bb:d8:ff:
                    78:4d:87:a5:19:9e:95:99:c1:28:44:d3:a9:a3:01:
                    91:69:da:be:ed:5f:c9:15:e1:9e:69:12:bf:0e:35:
                    9b:dd:c4:75:a3:d7:cb:84:86:ff:d0:18:6d:79:66:
                    35:29:de:1f:9d:66:a4:32:7b:92:2d:77:27:34:75:
                    38:46:b2:6b:79:d2:aa:cc:2e:af:d4:2c:e0:98:8e:
                    87:00:dc:ef:fa:69:00:3b:8f:ee:89:ca:04:11:9d:
                    4c:b2:46:e5:c0:58:cf:de:5e:25:84:df:ad:44:88:
                    1e:54:5d:09:ad:02:1e:86:2c:1b:9d:eb:cb:ef:b1:
                    2d:f3:95:b0:c2:50:c7:4b:ee:03:ba:be:2e:b6:a7:
                    b0:cd:b5:e8:16:a4:e4:25:4f:d9:81:24:01:da:16:
                    7f:3e:0a:88:29:ef:45:9f:46:f4:59:e0:e9:85:d3:
                    de:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:62:17:01:0D:9A:D8:42:F6:A0:5A:24:C8:39:AA:9F:3B:BC:57:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3d339b3a-0ee4-3ef7-9752-c5f1ef78f93a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:61:a2:c2:81:a2:c4:98:02:fe:e1:e7:3a:24:6b:d4:31:ad:
         97:5f:f4:c6:4c:0e:33:54:60:6b:12:e2:8e:a0:fe:7d:6f:f2:
         94:d0:e3:a6:d5:f2:e2:41:c5:63:98:4d:fd:4c:ef:e4:3e:3c:
         67:fb:b6:7e:65:b6:75:ed:bf:73:5f:d3:5b:ca:62:b2:e6:96:
         44:18:bf:fb:3f:ae:7b:41:24:66:04:be:8e:0a:f8:d0:fa:af:
         80:74:01:09:90:e7:56:e1:0c:39:18:c7:e3:05:56:ca:a6:dd:
         c6:90:9c:e2:0f:b9:ba:55:79:59:cc:e8:40:fb:87:c8:fb:35:
         99:ab:1a:8f:6e:72:a8:7a:55:4c:4a:fe:46:15:3e:31:46:c8:
         37:fd:cf:79:57:fc:6f:bc:5a:fa:32:f1:4c:9a:69:41:e4:5f:
         93:1c:e8:bb:48:04:99:45:4f:ae:4a:67:3e:7c:02:eb:8a:b8:
         8d:13:85:7b:0b:89:a0:35:fd:6a:1e:7e:ab:bb:3c:e9:13:81:
         98:3b:0e:84:e0:e1:6c:08:47:da:92:74:87:90:b6:5e:9b:f6:
         51:ee:4b:ea:2e:bf:bf:89:1a:7f:df:81:20:58:b1:b9:a1:da:
         36:3b:89:23:7c:56:40:ec:da:50:5d:16:6d:ab:46:09:66:1f:
         75:38:5b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:04:50 2026 by rpki-client