Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d920f883-a40d-3c1b-87c7-2a51d6408eb2.roa
File:                     d920f883-a40d-3c1b-87c7-2a51d6408eb2.roa (raw, json)
Hash identifier:          PpcKxcIgL01SIkYpLQa38bl2b1aaV4/MkvJPSTuSHCo=
Subject key identifier:   0D:0A:02:4B:57:D0:B8:69:BB:E5:FC:18:73:97:42:1F:2C:DF:3B:47
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D7B6A8A7D7F7A800820B3FF80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d920f883-a40d-3c1b-87c7-2a51d6408eb2.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     11359
IP address blocks:        216.222.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:8a:7d:7f:7a:80:08:20:b3:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=d564afbd-25f5-41b0-8aa1-7b3bdd75db51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c5:95:18:8a:5f:b8:2e:d8:9a:e7:18:22:4d:
                    7b:16:c3:1c:f6:de:bf:88:04:62:e7:ef:d1:0b:01:
                    ce:1d:91:fb:6c:e1:b1:2f:8f:88:02:d4:5b:6c:83:
                    fc:96:5a:64:59:d3:29:8f:a5:4c:30:e9:4f:eb:d3:
                    74:26:08:17:65:e9:a4:4c:ef:d4:1a:29:b6:0d:15:
                    cb:2a:70:8f:f2:0a:f3:b4:ae:43:a3:9e:6a:a7:82:
                    50:fa:9a:45:3d:99:3a:9f:44:b7:ae:56:a3:ec:81:
                    d7:25:0a:0c:dc:1b:9a:9b:3e:2d:e7:e2:dc:4d:ad:
                    b2:8b:41:ca:1a:2d:2b:45:08:ab:e7:83:44:05:e7:
                    c1:b9:55:6c:18:99:4a:7d:93:d1:47:8b:cc:53:27:
                    6f:12:40:a3:d2:dd:f7:a7:07:1f:8d:b1:81:f9:50:
                    76:86:14:2c:78:c2:b1:37:15:34:4b:fb:01:5b:c1:
                    ca:9f:e4:c3:f6:fc:15:47:e7:fa:16:cb:0d:1e:24:
                    1f:c8:33:87:5d:f9:d2:fc:dd:96:3d:23:71:4b:9f:
                    8f:00:e3:eb:15:82:c0:c7:33:ca:ec:5d:4f:56:7a:
                    c1:b5:7c:60:65:b0:81:69:ed:63:11:b5:23:fe:c4:
                    ea:00:f3:3c:6f:df:33:35:09:77:ab:9d:93:91:33:
                    3a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0A:02:4B:57:D0:B8:69:BB:E5:FC:18:73:97:42:1F:2C:DF:3B:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d920f883-a40d-3c1b-87c7-2a51d6408eb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:70:f5:9e:37:97:a9:10:e1:60:d0:92:eb:94:e1:6f:3f:4f:
         8d:be:c1:89:01:23:c3:3a:6c:7a:1a:d8:8a:1d:ae:f8:2f:dc:
         a0:ac:d8:8e:3b:29:df:6d:ee:43:93:aa:b6:55:ce:9e:ab:e3:
         7f:af:c9:9d:af:0a:7b:21:16:27:bc:ef:8d:cd:39:63:4c:06:
         9f:72:d9:92:56:69:84:29:26:dd:45:2a:72:b2:72:37:08:a6:
         18:fd:54:40:0f:3f:de:1e:fc:db:b9:c8:97:e4:57:04:8f:05:
         7c:73:f3:20:1d:cd:b9:27:3b:89:1f:c0:a7:0b:4d:d5:49:3c:
         ff:ef:ee:9b:94:90:8c:11:4d:58:3e:9a:48:1f:c3:1d:36:55:
         77:c5:a3:ee:4f:c3:fe:b1:89:30:59:40:9a:30:33:81:25:df:
         b8:0d:e9:65:4a:9f:83:e0:1d:6b:e5:e7:b1:c8:c0:e7:4d:61:
         59:b3:0b:93:f7:63:02:af:40:04:f5:62:e3:15:c0:70:42:e7:
         2b:b0:65:9e:f5:42:2a:d3:76:6c:78:b7:0b:56:9e:29:38:67:
         cb:46:e2:ae:fa:c1:18:c5:f6:ef:1b:f6:fe:fb:5d:01:dd:1f:
         0b:31:c3:c9:c0:70:e1:30:00:1f:29:03:95:36:9c:62:20:eb:
         f2:1f:ea:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:31:58 2026 by rpki-client