Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d09c7690-2642-3543-a0f7-ea08bf2d71af.roa
File:                     d09c7690-2642-3543-a0f7-ea08bf2d71af.roa (raw, json)
Hash identifier:          8wAsR2oJTkmFrHhzq7MXRilNd+zjKI27GO2Eq5149aQ=
Subject key identifier:   A0:EA:29:A8:21:25:FB:58:BF:AA:88:A3:92:8E:98:EC:56:C4:D6:F6
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584EFE122134DDA20CA0FCB43700
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d09c7690-2642-3543-a0f7-ea08bf2d71af.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     4997
IP address blocks:        208.39.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:21:34:dd:a2:0c:a0:fc:b4:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=4bb7119c-1b4c-40ef-b8e8-c519db70cc22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c3:e4:88:74:a0:f6:15:bb:24:2d:ab:a4:2e:
                    f8:3f:57:29:10:0e:58:69:ba:41:94:bf:d2:aa:98:
                    45:6c:ce:60:bc:c4:26:0d:02:f1:7b:1a:c9:15:8c:
                    c2:6a:d0:6c:a8:73:a7:3b:73:14:4b:35:6b:00:f7:
                    5a:49:af:8d:a0:26:66:21:1c:fa:df:36:5b:16:be:
                    f3:9e:7c:c5:8e:11:ea:01:ae:26:78:5e:92:ac:6d:
                    a6:7c:2a:bf:e4:32:28:08:9f:01:f4:89:ab:4f:92:
                    92:7e:65:84:ca:f9:83:42:e2:09:4d:b0:80:36:2b:
                    67:22:93:97:67:7f:ae:cb:74:ab:1a:a1:ec:d9:78:
                    9c:41:2d:37:ee:67:01:b7:ee:85:27:10:db:f3:ad:
                    61:e0:84:6d:fa:41:40:50:13:a7:d3:9b:f6:af:ba:
                    96:b7:5c:22:6a:f9:46:3c:79:42:d7:88:6a:34:47:
                    56:6e:89:75:ee:f9:74:73:9c:bf:30:2d:cd:44:05:
                    3e:c9:5b:18:a7:ca:8c:ea:79:8d:6a:f9:1a:0c:71:
                    4c:8f:31:d6:5f:1a:39:1f:cb:63:ac:d0:e5:a0:25:
                    d2:2c:17:06:01:2d:21:de:9d:47:56:e0:95:18:cb:
                    3d:73:ef:09:89:a4:f3:80:e6:41:68:d2:6f:c7:0e:
                    08:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EA:29:A8:21:25:FB:58:BF:AA:88:A3:92:8E:98:EC:56:C4:D6:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d09c7690-2642-3543-a0f7-ea08bf2d71af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.39.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:7e:a6:3a:0b:6a:40:f9:1f:2c:1a:76:3e:f6:b7:d0:92:c4:
         17:10:51:31:0b:12:84:56:97:46:1f:de:f5:75:34:5b:e9:67:
         bd:0e:13:b3:35:23:bc:53:16:8a:b8:81:1a:2d:b6:7e:0f:b8:
         ac:6c:27:a6:6f:66:55:e5:fc:3e:29:dd:8c:32:e2:73:e3:53:
         e4:55:8b:37:a3:0e:7d:62:3c:7a:93:e0:11:26:23:82:f7:0c:
         52:ab:8f:99:d0:29:e8:6c:f6:92:50:57:56:bc:0b:b5:ac:9e:
         af:6e:92:c7:9f:04:4a:78:95:12:57:52:63:73:8d:6d:f9:9b:
         47:31:06:17:a4:7b:ed:5c:3d:43:3c:99:fa:a4:c8:ba:5b:71:
         f1:c0:ae:6f:32:45:a6:b9:ff:93:b2:4c:a0:7d:8d:9f:2b:e4:
         ec:a5:a9:9f:ea:9d:a5:4b:87:3a:b6:79:3c:cf:38:eb:d3:2b:
         b0:a6:cb:fa:53:cf:0e:8f:49:5f:c5:99:10:b7:95:75:4f:63:
         29:8b:f7:45:a9:18:69:ec:a2:ba:3f:88:33:0b:38:27:46:c8:
         f1:47:53:d7:d4:84:ef:20:ef:99:3c:57:76:ab:e0:36:7e:9b:
         e7:dc:9d:88:02:bb:e4:ab:50:10:80:6b:04:fe:8e:46:9d:97:
         68:4b:7a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:33:11 2026 by rpki-client