Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/01c3aae7-18f2-3a7e-a992-73a516149a99.roa
File:                     01c3aae7-18f2-3a7e-a992-73a516149a99.roa (raw, json)
Hash identifier:          vj5W6MGL9bu21vUkACknW9b5tu14T05WYmQub5tBbbo=
Subject key identifier:   41:C6:15:85:BB:3D:6E:94:99:B8:46:B5:4B:C7:1D:D1:09:4B:34:D8
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584F7782EA2FA38A8CA85FAE7E10
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/01c3aae7-18f2-3a7e-a992-73a516149a99.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     393631
IP address blocks:        64.125.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:82:ea:2f:a3:8a:8c:a8:5f:ae:7e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=e2874771-4f4d-4d32-8708-bd4ccc82c695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:51:9a:a8:b3:ac:df:9a:be:a6:7a:73:61:c0:
                    00:f4:b8:a5:66:d7:61:e2:41:d0:ff:4f:01:09:6f:
                    88:a2:33:0e:17:b3:17:93:24:bc:62:ba:45:75:93:
                    21:9f:54:76:8a:a7:87:ac:dc:ca:8c:a8:50:b1:60:
                    ce:c1:22:01:cb:fd:2c:e9:4e:7d:30:11:20:7f:d0:
                    7b:f2:ef:f2:58:1d:d2:27:f2:40:25:e0:29:53:d8:
                    f2:95:9c:0d:dd:0f:58:ba:05:c8:7f:05:2b:67:3c:
                    76:21:8c:c4:23:eb:03:30:4f:7b:e0:85:b0:b0:db:
                    20:73:64:0b:1c:e3:02:19:72:6d:f6:52:5f:4e:25:
                    ce:14:a5:13:46:02:59:51:49:27:ba:4b:4f:31:8f:
                    da:bd:98:1b:c1:c5:05:2a:99:fc:10:7a:4b:18:db:
                    b3:67:d8:e0:7d:38:a4:0a:e2:95:6f:38:82:9e:e1:
                    ad:77:aa:bd:71:fa:7a:bc:90:68:95:1c:1f:d4:7c:
                    ed:58:4a:60:83:ae:97:9f:6d:81:13:1b:82:b0:18:
                    74:b0:fb:aa:bc:c2:c9:59:da:e1:7c:4f:73:2b:f5:
                    a4:0b:98:9c:2c:8c:b1:ca:23:3a:07:1b:23:c2:0d:
                    f9:08:fb:a8:11:c1:c4:ec:76:74:fb:65:56:54:cd:
                    a7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C6:15:85:BB:3D:6E:94:99:B8:46:B5:4B:C7:1D:D1:09:4B:34:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/01c3aae7-18f2-3a7e-a992-73a516149a99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:2e:81:34:ee:53:9e:bf:64:ab:30:d6:21:3e:b2:35:36:6f:
         f0:8c:64:80:c3:21:14:82:17:34:dd:9e:6a:29:ab:1b:45:6e:
         3c:52:84:aa:61:25:56:fb:8f:1f:4a:d2:bc:93:7e:61:dc:d0:
         6f:11:c1:44:0d:53:7d:ef:60:d3:9e:af:6c:ab:f6:58:69:11:
         d3:d8:4f:04:b8:37:9e:b9:61:a2:30:bb:08:ef:42:d7:c4:4b:
         14:d3:3c:92:af:66:02:7d:08:a0:ee:45:c1:d3:c5:1d:ca:2b:
         5a:7d:ff:d1:3e:f0:8f:e2:d7:c1:d8:62:e8:5f:55:d0:b6:bc:
         59:c4:26:08:c4:fa:ca:96:79:2e:56:06:90:ad:9e:1d:00:70:
         72:a6:be:91:47:63:26:8e:c9:9e:89:73:e6:a1:3b:9d:f6:aa:
         1e:49:45:5f:d3:4b:dd:ca:d6:e9:e5:7f:f2:9a:db:0c:54:91:
         21:d4:6f:76:4d:0c:ad:95:37:c9:d0:83:da:ac:67:f2:4e:63:
         0d:45:df:6d:74:cd:71:c8:38:d4:53:88:f7:2b:30:1f:0b:c4:
         0f:40:b2:1c:aa:0a:7d:a8:96:0d:33:75:45:9b:71:91:b1:d2:
         61:3c:98:93:f3:fe:2a:ba:42:ce:2c:ef:04:40:40:ef:d0:55:
         2d:2e:82:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:35:53 2026 by rpki-client