Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f9132a87-ab2b-3752-8579-5f0bce3dea6f.roa
File:                     f9132a87-ab2b-3752-8579-5f0bce3dea6f.roa (raw, json)
Hash identifier:          PDWeSCcuItCXE53DxyEEXNoNP1vWvtjJR4MzgZsi+0w=
Subject key identifier:   64:9F:FE:E2:62:56:A3:24:F5:FD:BD:60:DD:CC:EB:F3:7C:A5:0E:AE
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D59EA743E2B386500C1F5F300
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f9132a87-ab2b-3752-8579-5f0bce3dea6f.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     27425
IP address blocks:        198.241.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:74:3e:2b:38:65:00:c1:f5:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=df11ac1c-2c23-4dd6-9ac2-c8175b5597c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:91:69:b7:8f:ef:a6:e9:55:9a:6a:77:05:6f:
                    61:50:b4:ce:fc:b5:af:35:9a:92:59:27:66:d7:88:
                    fe:ff:16:60:6b:d2:82:57:a4:72:f7:91:56:86:2a:
                    8e:5f:11:66:4b:a9:fe:44:58:ef:3f:ab:7a:b4:62:
                    67:59:c3:00:db:03:57:65:a5:7b:bf:98:d8:b3:a6:
                    98:e6:02:86:a9:c1:9e:73:6a:56:85:a1:4e:51:16:
                    8f:8c:54:70:aa:39:17:b5:23:33:64:5d:3a:24:a1:
                    08:41:39:5b:0b:14:4c:cd:83:d8:70:98:d5:5d:1a:
                    42:a3:fb:cb:22:8e:5b:b7:6d:90:18:98:6c:ac:54:
                    c7:28:64:fd:03:cb:79:c4:a1:fa:2d:6b:65:be:57:
                    81:1f:b0:cf:bd:2c:95:5d:f8:b1:c0:61:98:c1:74:
                    d5:ac:03:ea:4e:98:51:35:64:ad:98:7a:7e:5e:75:
                    e3:c1:d8:aa:d1:86:ac:60:23:cd:96:f6:fd:b4:6b:
                    0a:b5:3c:a9:c0:e7:8b:0d:5f:af:2e:a5:17:47:43:
                    eb:aa:a7:f6:f5:72:7b:1d:de:33:42:ea:c5:ad:7d:
                    be:fe:58:32:d2:bc:d4:3a:5d:0e:27:cd:aa:4c:87:
                    6f:f1:bb:95:1c:8d:54:e2:94:a6:8d:c8:f2:cf:b3:
                    fb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9F:FE:E2:62:56:A3:24:F5:FD:BD:60:DD:CC:EB:F3:7C:A5:0E:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f9132a87-ab2b-3752-8579-5f0bce3dea6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:32:ba:c1:32:48:59:4e:64:c6:4a:d6:a8:28:35:ef:42:64:
         f5:83:02:db:a2:2a:5b:dd:86:f5:04:f1:38:d3:8a:85:35:84:
         0f:08:47:df:6c:ea:b4:10:70:fa:27:f3:e4:ec:88:b9:78:07:
         37:b2:e3:35:3b:b5:cf:7a:cb:e6:94:d4:77:1b:e8:4c:b4:e1:
         37:0f:01:7c:b3:08:a3:06:3a:20:ce:8c:15:62:1d:f8:8d:a9:
         0a:11:45:08:77:1d:39:67:90:81:50:d7:fe:2d:6e:bf:dc:7a:
         83:67:96:99:7f:5a:4b:1e:9e:6c:a4:72:cd:19:b8:54:37:61:
         eb:ad:d3:ef:ad:44:5e:d8:f3:41:a7:39:c3:1e:32:7f:a0:0c:
         9e:b4:f2:b8:43:6a:12:6e:e1:bf:ff:83:d3:5f:a6:be:62:d9:
         36:9e:2f:d0:fe:93:74:32:32:96:d1:d5:ec:e2:38:16:6e:0f:
         5f:a5:f3:81:95:c5:25:23:72:08:4d:b0:83:68:be:49:b8:01:
         a2:8c:e8:01:64:70:86:b7:54:64:2a:c7:8a:32:eb:21:68:04:
         bf:9e:f2:e3:9a:3a:7d:01:15:ab:34:3b:73:5d:ea:3b:f2:ed:
         c3:2d:5c:66:74:3d:24:1a:35:d7:04:4a:e0:ac:fc:fc:16:41:
         8e:e9:a9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:49 2026 by rpki-client