Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3e5d23d7-ba48-34e8-a74c-a1657b700b7c.roa
File:                     3e5d23d7-ba48-34e8-a74c-a1657b700b7c.roa (raw, json)
Hash identifier:          9JY+AALTZ1j/0WWQkmj3uVslWkgKmXj0NgbHnsqk2XU=
Subject key identifier:   AC:B3:74:57:C3:C4:F8:F2:B0:1D:4B:3E:28:EB:E9:7E:43:DA:35:CB
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584C794C3F0F3FC88A4D15164240
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3e5d23d7-ba48-34e8-a74c-a1657b700b7c.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     4997
IP address blocks:        208.39.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:3f:0f:3f:c8:8a:4d:15:16:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=78589498-5014-49d1-8be6-b3bef19dd87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b0:8e:3d:7f:d2:d0:51:a2:b6:26:8a:51:ab:
                    5d:57:e0:89:cb:56:8c:0a:5e:12:00:a2:a9:f2:47:
                    da:08:18:f4:72:35:21:c0:9f:0c:14:b5:6d:e7:32:
                    81:d0:98:ed:27:77:eb:07:fd:ad:e0:b6:6b:2d:25:
                    59:b1:68:18:30:d0:69:7f:5c:c8:8c:c4:37:4b:de:
                    cb:38:a7:dc:59:be:e9:10:68:46:2d:78:b0:88:8b:
                    a7:4b:ac:33:93:73:6b:e1:d4:ca:8f:54:3b:a1:e0:
                    59:71:35:e2:20:59:eb:0c:22:e2:81:2e:3f:2b:c0:
                    ba:89:c1:36:56:2c:7d:4f:b7:cf:14:34:67:11:f5:
                    19:33:cc:9e:3e:af:40:72:38:b9:bc:99:b3:ae:78:
                    7c:69:e2:b4:e5:d7:f6:55:dc:ed:52:6c:89:3c:31:
                    b9:ba:05:c8:c9:8d:d1:24:45:a5:d0:32:50:c2:d1:
                    d0:0b:91:88:65:0b:26:9e:b3:f8:18:a3:51:5b:a8:
                    76:e6:8e:49:ab:10:0b:3a:60:cc:0d:4b:4e:f6:92:
                    ac:bb:fc:cc:c0:15:00:b8:11:c8:bf:83:0f:08:8d:
                    f7:81:c3:fd:9e:06:b2:83:d2:69:93:8f:3d:ed:43:
                    83:27:ee:d3:04:b0:54:ee:b7:78:42:85:7c:32:1a:
                    ef:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B3:74:57:C3:C4:F8:F2:B0:1D:4B:3E:28:EB:E9:7E:43:DA:35:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3e5d23d7-ba48-34e8-a74c-a1657b700b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.39.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:be:a6:9c:8f:a6:eb:6c:5c:ca:a0:73:33:e8:60:0e:b8:a4:
         43:fa:e3:2f:87:fe:4b:61:ae:ac:ab:c0:f7:cc:27:a5:1f:f0:
         b7:1a:a1:8a:6a:a4:c5:d1:00:3d:18:d1:91:e7:30:5e:ad:de:
         52:03:81:cc:55:60:c9:34:b2:ed:63:11:3e:dc:de:78:e0:26:
         65:61:db:c3:06:43:d6:84:0e:d5:b5:22:7e:bf:8c:33:68:9d:
         56:7a:e4:d5:e1:6b:b4:79:a4:77:a1:c7:38:7d:ab:87:01:c8:
         6b:26:c8:3f:2b:c5:28:43:e6:93:01:13:cf:a2:24:a4:7e:d0:
         5b:f5:a0:a3:0b:d9:63:53:1e:40:54:a7:86:b0:d5:4d:8a:e4:
         db:2d:e6:e9:d8:87:5c:4c:e4:90:dc:36:c3:38:90:92:49:d8:
         86:f0:d9:f7:32:d7:48:a4:c5:2f:17:49:07:c7:c5:0e:dc:73:
         90:60:2b:ad:9e:d2:b3:24:0b:04:a7:a4:6d:72:e0:05:a3:75:
         65:9e:49:10:05:81:41:53:56:9f:62:cc:00:01:4a:77:e6:93:
         6c:d9:0a:b3:10:cb:fe:64:6b:ef:b8:7a:aa:67:06:ff:b7:9b:
         05:67:93:ed:08:f6:9e:58:be:06:47:bd:44:b8:06:cf:27:de:
         58:fa:ed:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:01 2026 by rpki-client