Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b9c2ec32-0486-301f-adab-f42190819047.roa
File:                     b9c2ec32-0486-301f-adab-f42190819047.roa (raw, json)
Hash identifier:          5BKwwfhSzppSnX0pYfKp5qmZV6nir6+9eo5Z4EHbc3o=
Subject key identifier:   70:19:1A:08:85:3A:B1:DA:3C:97:CD:78:1E:2A:A1:BB:CC:58:AA:AF
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584F119D0E83F2CBB292730E78E0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b9c2ec32-0486-301f-adab-f42190819047.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     393320
IP address blocks:        209.249.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:0e:83:f2:cb:b2:92:73:0e:78:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=48618b2a-da6e-4b24-a765-93d73f8fe701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:97:5f:18:45:89:27:6d:06:a9:d4:31:44:26:
                    f7:c8:64:e2:a1:16:8c:2f:9a:3c:3f:db:2f:7c:60:
                    ae:b5:7d:51:88:12:78:c2:da:38:15:3f:5e:2d:86:
                    be:c7:d3:b0:87:7c:ee:3b:c6:c5:43:e5:e5:06:ff:
                    b4:25:29:b4:cf:72:8f:a4:2c:d2:db:d8:2d:44:17:
                    dc:a2:b4:0c:0a:41:c1:c1:22:37:29:23:a2:79:87:
                    e5:0d:a3:e9:f2:6b:e7:cd:4f:1b:ca:b7:d1:dd:c6:
                    40:79:fc:e8:c9:8c:97:5b:5f:7c:4d:b5:9e:69:67:
                    b8:e8:d6:d9:1d:bf:26:84:8b:8e:da:9a:4d:8b:76:
                    3d:bd:e0:b7:c1:66:80:d7:7c:0e:70:ee:ae:d2:61:
                    26:ce:1a:99:f9:94:9b:30:2e:28:4e:56:c9:ac:c2:
                    57:e9:fa:ab:9d:0c:ee:6f:2f:ef:3a:7e:4a:29:4c:
                    e7:fd:96:3f:86:a7:80:37:ee:04:f9:33:89:ac:64:
                    01:99:7f:57:32:c1:da:e9:7a:1c:e3:26:ce:65:c9:
                    00:80:5c:47:04:95:4c:95:41:d5:1a:f5:ec:c5:09:
                    0a:76:ff:9b:b5:8d:26:f7:b8:01:a4:fd:33:b3:cb:
                    b0:5e:23:2d:65:f4:fa:33:be:3d:ed:3f:c1:1e:94:
                    6d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:19:1A:08:85:3A:B1:DA:3C:97:CD:78:1E:2A:A1:BB:CC:58:AA:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b9c2ec32-0486-301f-adab-f42190819047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:1e:35:e6:72:fb:b6:93:cb:57:c7:33:2c:43:b3:30:a0:3f:
         83:a5:f1:5b:be:92:51:e6:69:75:c3:92:4c:5b:82:b3:70:34:
         d8:b5:0a:96:c7:2a:11:0a:18:21:82:63:17:5b:ea:37:5f:23:
         a4:5b:e0:6f:3e:14:fc:6a:84:c3:23:ec:68:e6:a0:24:2a:99:
         00:bd:a4:3d:27:2b:9a:f2:0f:60:68:d7:31:e2:15:d3:e5:ec:
         0c:9b:58:d1:8f:60:b3:03:41:48:7a:eb:63:81:9f:33:8d:ad:
         a0:0b:ec:3f:c6:c4:19:a0:13:2c:3c:48:4f:1a:33:2b:3c:39:
         52:c9:39:69:bd:77:1c:fa:21:ca:50:12:01:2e:b3:38:71:fa:
         9b:4d:b0:b0:9a:65:2f:22:62:54:69:f0:b8:a5:08:c9:e0:b2:
         ff:68:10:90:51:90:10:9b:0a:ba:91:85:f3:00:19:48:0a:f4:
         18:9d:de:d7:c3:35:0b:13:5c:74:aa:aa:4f:2f:3e:7f:a7:ce:
         56:19:78:73:5a:b7:ea:4c:03:ce:66:24:98:90:9a:c0:6b:a7:
         ab:59:2a:81:61:11:20:57:a6:29:ab:f3:67:4d:66:3c:8e:b9:
         1d:f3:4f:f5:86:d0:4b:d9:c8:14:57:fb:4f:4d:bb:04:7e:2d:
         28:e0:06:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:32:12 2026 by rpki-client