Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ccdde809-50c4-33e9-a009-60f26d2db07f.roa
File:                     ccdde809-50c4-33e9-a009-60f26d2db07f.roa (raw, json)
Hash identifier:          UlRiLCdPY78TmKIwE+/nXRW6RYj7qpx63VanMwcq6HA=
Subject key identifier:   D9:2A:48:3E:50:B0:5A:B6:2D:45:8F:03:A1:0A:82:9F:31:CF:90:77
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584CE7922E7D6F9910D337A72E80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ccdde809-50c4-33e9-a009-60f26d2db07f.roa
Signing time:             Wed 18 Feb 2026 14:00:41 +0000
ROA not before:           Wed 18 Feb 2026 14:00:41 +0000
ROA not after:            Tue 19 May 2026 13:00:41 +0000
asID:                     812
IP address blocks:        159.18.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e7:92:2e:7d:6f:99:10:d3:37:a7:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 18 14:00:41 2026 GMT
            Not After : May 19 13:00:41 2026 GMT
        Subject: CN=fb4cddbc-8e86-4a77-9987-8f1cae2be573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:d1:e2:bd:73:5f:91:8c:5f:d9:fd:e2:bf:
                    a3:3a:12:f1:0d:11:fa:b7:ec:04:ac:11:69:a5:29:
                    8a:73:e9:39:cb:8d:0a:2e:e3:7a:08:0a:85:d2:79:
                    fb:77:e3:43:10:89:36:94:5c:f5:f7:a9:3b:95:ce:
                    91:ca:12:f2:ee:84:2e:40:3a:12:bc:85:96:4c:e0:
                    17:77:85:4d:42:00:d7:ac:be:ed:15:88:ef:00:f0:
                    69:6d:fa:06:86:dd:51:eb:45:86:26:72:06:6e:21:
                    53:d1:98:0b:0d:18:88:d3:59:7a:20:7a:57:b3:6d:
                    d5:e1:41:bf:a7:cf:3f:9b:6f:a3:ba:72:fd:8b:c1:
                    23:47:94:70:07:85:f7:b7:97:5f:06:c7:23:81:62:
                    51:85:3b:ed:75:3e:bc:aa:99:76:d9:d7:c9:f2:8a:
                    b0:77:7d:41:9f:09:41:a2:70:68:0a:a8:a8:bf:fb:
                    9e:41:a0:2d:9f:db:2a:10:d8:b0:1b:c3:29:d8:87:
                    f7:06:2f:d0:e8:7f:33:b7:75:c2:a6:05:ca:1c:66:
                    e8:db:e3:ec:9c:e7:c3:3e:21:a2:6a:fd:71:d6:49:
                    da:a5:5f:ca:11:3b:95:9d:62:62:26:61:51:7e:6c:
                    78:fc:b2:58:03:e5:fd:d1:67:61:6a:32:8a:72:5e:
                    50:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2A:48:3E:50:B0:5A:B6:2D:45:8F:03:A1:0A:82:9F:31:CF:90:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ccdde809-50c4-33e9-a009-60f26d2db07f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:52:2f:67:1a:74:59:2c:2a:8b:f8:12:69:96:cf:f6:ef:09:
         c8:18:29:08:d6:fe:0d:59:e0:3f:c7:b2:2a:08:9d:d7:9c:d1:
         1c:1a:61:4a:a6:e6:ff:84:78:87:54:f0:38:f1:2e:5c:ab:f4:
         71:69:cd:72:5b:4d:e2:26:2c:09:7d:10:e4:58:e8:13:83:ff:
         b1:b0:54:8e:4a:62:ec:df:90:fc:42:f3:48:5d:c3:b7:0d:83:
         7b:7b:2f:cb:5a:56:47:88:e0:29:86:7b:f8:b2:c0:18:dd:31:
         a5:bd:1a:04:36:56:ec:92:a9:d8:d0:14:6e:ce:70:1b:69:9c:
         44:4d:9f:a6:66:12:43:b5:bb:4c:33:28:3e:ad:e7:fe:a5:48:
         00:9b:db:2a:04:20:be:81:3c:6a:60:b1:99:05:2b:59:69:e0:
         ff:fc:23:84:b5:6d:28:57:39:8f:25:d1:87:6a:e8:91:1e:d0:
         80:d7:56:d1:c5:48:9e:aa:5c:5f:4b:b5:b0:0e:81:9c:65:61:
         66:8c:cb:93:96:1b:14:59:af:91:4b:1d:24:1c:c4:91:25:6b:
         f0:42:16:55:3f:f4:b1:c7:b6:76:e2:37:67:99:67:47:98:93:
         38:77:7f:b2:a2:1b:4a:70:67:d5:17:7a:32:d6:5c:87:06:b7:
         92:c5:15:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:50 2026 by rpki-client