Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0ee37803-d3ff-3096-9238-75e7b75f8601.roa
File:                     0ee37803-d3ff-3096-9238-75e7b75f8601.roa (raw, json)
Hash identifier:          +apRNgwsJLOI+mkPtgL0yhoaitLIS0SdTtppxKwrZUA=
Subject key identifier:   5D:BD:2F:17:31:0B:FE:8D:FF:D0:9A:3F:9E:DD:5F:2E:F4:2A:2D:97
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D524350CAD83E1900B6FEC660
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0ee37803-d3ff-3096-9238-75e7b75f8601.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     30419
IP address blocks:        64.125.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:50:ca:d8:3e:19:00:b6:fe:c6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=f4397b46-6af9-4b12-8808-aefb1542f1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:db:c5:78:7e:5a:53:cd:88:8b:96:41:2a:
                    e6:30:3a:62:22:20:48:b6:d3:49:9c:b0:d6:b0:16:
                    bd:6f:66:2d:8e:94:71:11:9c:75:1b:4c:e0:bb:b9:
                    4c:7f:1f:41:d7:84:d4:a0:e2:5b:4c:75:d6:cc:2d:
                    75:64:2d:34:aa:a1:db:81:d2:7d:5b:ca:fe:67:8d:
                    94:52:a6:e9:3d:aa:01:e6:03:e0:73:e7:da:e7:eb:
                    e4:ee:fc:29:90:e2:4c:5d:6e:75:5f:eb:79:e1:5d:
                    12:05:0f:0a:fb:7b:ee:87:20:04:28:b9:1a:0d:9c:
                    58:2b:79:d8:d8:2a:13:2b:e5:d7:39:68:76:ac:35:
                    dc:6c:34:b7:85:ad:1b:a9:dc:ad:e1:cf:15:ae:22:
                    29:57:79:64:d9:12:c8:85:0a:31:97:01:5d:a4:a9:
                    b0:17:5d:60:09:08:37:bc:e5:a0:c2:09:86:89:56:
                    7a:86:49:d0:3c:0f:87:b2:a9:78:34:d6:33:66:73:
                    ad:42:c1:74:8e:ac:d4:db:1e:10:47:f3:98:65:db:
                    95:e8:e9:36:03:f1:79:35:55:c7:6e:7a:b5:8b:8f:
                    54:b9:b5:69:29:b0:53:a7:67:28:2d:e8:58:8c:cb:
                    9f:06:40:6e:a2:66:35:6b:1f:2e:7e:bc:73:70:c5:
                    02:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BD:2F:17:31:0B:FE:8D:FF:D0:9A:3F:9E:DD:5F:2E:F4:2A:2D:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0ee37803-d3ff-3096-9238-75e7b75f8601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:d1:27:c3:5a:bc:85:d3:5a:1e:dc:39:de:b5:29:aa:63:5c:
         f8:e0:1a:e6:bb:f2:c9:ba:0d:38:dc:37:e9:d6:00:25:5c:38:
         b8:e9:b1:7d:03:a8:72:d8:2e:a3:cf:52:97:57:04:0a:be:a7:
         e0:b5:0a:a5:d1:79:f9:53:20:b9:0a:a9:32:07:e3:53:e7:d2:
         3f:d4:91:47:01:89:d2:b9:ad:16:29:57:44:bf:9e:18:00:31:
         0c:f7:e7:d6:88:34:30:6f:18:bc:ff:3e:95:e7:9b:67:b6:68:
         a1:18:2c:9d:72:1c:70:97:2e:cd:42:5a:bf:fd:5e:50:0a:db:
         08:7c:02:22:6e:2a:43:0d:cc:f7:99:68:3c:04:18:f7:7f:ca:
         8d:2a:47:f2:bb:a6:c2:27:ac:b6:1b:06:e9:1a:6b:6a:21:42:
         cb:69:d7:5d:16:85:ae:5c:25:b4:17:43:d9:fe:e7:c2:65:1b:
         22:ee:3a:fd:a1:f4:58:f3:7c:43:6d:d6:ef:bc:61:85:8f:d4:
         56:74:a8:f6:9a:b4:e7:e7:a5:10:08:33:fb:28:35:9b:96:38:
         0a:67:43:22:8b:be:b7:69:46:c0:30:e0:c6:9b:cf:02:3e:ce:
         08:a7:61:7d:98:94:2a:43:0d:28:35:ff:55:1d:c1:33:92:6c:
         0c:a5:51:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 14:24:28 2026 by rpki-client