Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c38f9fba-37f6-3d54-8f63-61fbebeeb1c1.roa
File:                     c38f9fba-37f6-3d54-8f63-61fbebeeb1c1.roa (raw, json)
Hash identifier:          eQsJSXCnER2YsobrVPH9FqMV1bnZWdNSU62XzIEZn5E=
Subject key identifier:   38:52:7D:8C:D1:FE:C5:E4:8F:D9:9F:33:F6:98:7B:3C:C6:DF:BA:2D
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584CEA5CE7A673B2E991E04A1A40
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c38f9fba-37f6-3d54-8f63-61fbebeeb1c1.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     29731
IP address blocks:        159.18.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:e7:a6:73:b2:e9:91:e0:4a:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=432d1dcd-ce81-4758-8134-fa9791f8d791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6a:28:5b:15:c7:f2:f4:36:88:74:95:d3:3b:
                    3d:05:dc:f5:18:f8:94:22:35:9b:2d:de:47:6a:8c:
                    35:11:95:6f:30:8d:b4:40:1c:b7:cc:36:ed:62:2d:
                    b1:1d:1d:34:8b:44:98:99:2f:08:e6:88:62:2d:e9:
                    31:47:bd:7f:a6:ac:db:1c:08:03:0b:13:95:b0:bc:
                    62:73:e6:19:b8:9e:4e:93:d4:00:c2:e3:45:e8:92:
                    fb:6e:7b:ad:75:23:16:ef:90:1f:97:2f:dd:c9:c4:
                    c2:1e:41:99:93:3e:8f:98:45:77:b2:93:e2:64:a9:
                    76:c9:70:f0:c4:4b:77:bb:a7:6a:d8:0e:ac:23:15:
                    46:2b:db:72:c6:f8:dd:19:a5:be:14:b6:47:89:9a:
                    65:7e:03:53:1c:07:8b:cb:45:9a:57:19:dd:d6:4a:
                    7a:14:dc:76:57:bc:d3:13:85:69:6e:d9:c6:20:f8:
                    3b:82:b4:c6:03:ce:29:97:11:8d:a6:00:0f:fd:a0:
                    86:c1:90:8b:5e:d4:ac:82:f8:cb:ce:92:94:97:c3:
                    8f:62:d5:ec:67:f2:41:ed:a5:84:88:14:6b:8b:94:
                    75:3f:d0:4a:2f:e1:fe:a4:2e:03:32:af:fa:20:3b:
                    ed:cc:45:c2:6f:25:5b:f6:99:04:41:2c:5d:11:27:
                    ee:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:52:7D:8C:D1:FE:C5:E4:8F:D9:9F:33:F6:98:7B:3C:C6:DF:BA:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c38f9fba-37f6-3d54-8f63-61fbebeeb1c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:29:d8:21:d0:e9:b8:df:77:0a:58:dd:1b:04:23:1c:6e:99:
         b2:56:0e:18:17:ae:95:8f:9c:72:2f:6b:6d:9f:c9:cc:0f:b3:
         8c:86:df:bf:c2:50:bc:a0:10:50:6e:77:da:3d:7c:b9:c6:f5:
         d2:8d:bd:1c:64:25:8b:3a:87:38:88:14:7e:d0:6e:e2:6c:25:
         98:83:0c:5a:70:37:4b:53:68:9f:f0:c6:1f:6d:87:34:60:db:
         aa:d4:9d:0e:2c:82:e4:a2:c5:d2:8b:db:11:eb:01:48:44:f3:
         f3:91:39:8b:46:79:48:24:c1:a5:1d:58:cd:b1:b9:cb:2a:e2:
         f9:a0:3e:86:40:6e:28:62:f5:e0:65:02:92:8f:58:f2:82:52:
         37:91:1d:18:8e:e6:e9:13:84:ca:36:e4:3d:b0:dd:dd:ea:0a:
         c9:56:ca:bb:30:ee:69:5e:52:f6:4f:6b:4c:63:12:fa:71:b9:
         38:15:a1:4b:fd:f2:c0:7c:8d:a6:08:51:ad:22:cd:aa:5e:e3:
         6f:fd:b7:fc:9f:2c:77:be:20:80:88:1c:a1:5c:d1:c3:36:77:
         72:fb:43:af:ea:a0:f2:6a:15:04:b1:bd:74:4c:1c:52:6c:1b:
         d5:f8:4d:e0:54:a1:11:25:48:91:7e:da:f6:77:b4:8d:2a:b0:
         e0:c2:22:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:37:18 2026 by rpki-client