Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/85207695-722f-30e2-9f54-1d50afa7a4df.roa
File:                     85207695-722f-30e2-9f54-1d50afa7a4df.roa (raw, json)
Hash identifier:          qXDXuR8i7kEE3SKB1yyRCdn6P30EwjDjpRpkwElTMPo=
Subject key identifier:   F1:3A:40:74:7A:8A:9D:23:00:BA:1F:0F:03:7F:3F:E7:04:E8:C8:28
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584CACF1CC1FCCB7495242D21400
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/85207695-722f-30e2-9f54-1d50afa7a4df.roa
Signing time:             Wed 28 Jan 2026 14:00:36 +0000
ROA not before:           Wed 28 Jan 2026 14:00:36 +0000
ROA not after:            Tue 28 Apr 2026 13:00:36 +0000
asID:                     54748
IP address blocks:        208.184.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ac:f1:cc:1f:cc:b7:49:52:42:d2:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jan 28 14:00:36 2026 GMT
            Not After : Apr 28 13:00:36 2026 GMT
        Subject: CN=b8ac4acb-b5a0-46e7-8154-d8e0af055b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:61:81:f0:06:56:51:f9:7c:1c:82:b1:44:f7:
                    12:a3:71:c4:fd:da:c6:d8:8f:9b:54:58:7c:93:41:
                    00:38:e4:e5:45:0e:7e:00:d1:ff:1c:ec:ab:21:31:
                    ba:c3:60:4f:dd:00:de:01:f2:f4:1a:af:a8:b9:a4:
                    22:3d:b3:35:d2:fa:5c:05:3e:89:4c:26:d2:15:2c:
                    8e:f7:2e:60:f3:30:70:a5:b4:26:9a:3f:d1:bc:69:
                    3e:cb:1b:14:0f:be:36:b6:51:fc:8d:64:b7:64:36:
                    49:62:73:68:72:cf:11:58:e7:66:76:c0:dc:57:dc:
                    ce:61:44:99:f9:fc:d8:40:3f:59:73:26:6d:e9:29:
                    74:bf:d9:38:77:f3:0c:a7:9d:13:f8:0f:7e:0c:78:
                    61:48:56:fa:32:70:23:27:71:59:74:b0:d0:5e:4b:
                    99:17:74:e9:d8:da:3b:9d:2f:ad:83:17:df:22:5c:
                    38:7c:28:39:58:d9:c6:b1:40:ce:c9:61:1f:7a:d7:
                    f1:ec:05:d6:78:fd:f2:7c:67:3e:fd:6f:f5:c5:7c:
                    f2:32:3f:ea:e7:15:dc:da:8d:62:f6:4f:f8:c6:8d:
                    db:67:26:70:03:b2:49:56:47:32:ca:77:e1:1a:4b:
                    36:a1:28:5d:b9:d5:97:d8:e1:e3:e5:28:5c:30:76:
                    59:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3A:40:74:7A:8A:9D:23:00:BA:1F:0F:03:7F:3F:E7:04:E8:C8:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/85207695-722f-30e2-9f54-1d50afa7a4df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.184.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:9a:23:af:bc:71:80:f2:4b:58:6f:2b:ba:bd:2b:92:9d:93:
         5b:c6:72:21:7b:7d:19:0d:89:71:e2:58:27:98:f7:3c:57:e3:
         f4:ca:4e:7f:a5:56:5c:8f:a9:1c:33:e4:78:76:9f:1d:aa:12:
         cf:c2:7a:c2:cf:c6:61:a2:1a:8a:b2:45:2d:3e:13:08:2b:3c:
         81:b9:86:dd:92:19:b9:8e:58:4d:b0:bb:f4:74:fe:b7:ce:94:
         e3:04:54:09:b7:59:d9:6a:55:8a:ea:ac:7f:ca:62:2a:23:95:
         42:da:e4:2b:14:7c:22:77:20:c1:16:4a:a7:c8:7c:95:e5:5c:
         5a:c2:0d:0b:28:2d:61:00:60:90:c7:62:c6:96:de:b7:35:6e:
         23:fa:b0:52:f9:dd:29:7d:fc:ae:1f:d7:0a:88:0b:42:d8:df:
         a9:29:1c:97:58:f7:cb:1f:fc:e2:62:69:e6:72:aa:8d:39:fc:
         1f:2f:b9:da:a8:71:d8:d9:25:00:1c:77:35:15:bf:d5:8a:3d:
         44:29:8c:15:1f:de:9d:38:4e:ce:f4:81:79:5e:25:b8:42:d4:
         32:9f:ed:5c:e9:1c:47:d1:f1:7d:eb:cd:bc:54:70:67:aa:19:
         95:bc:9b:30:57:df:32:30:e0:2e:9f:6e:09:f0:51:1c:f9:45:
         45:03:41:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:01:54 2026 by rpki-client