Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1c55430b-aa95-3e48-9f8a-dccea2142280.roa
File:                     1c55430b-aa95-3e48-9f8a-dccea2142280.roa (raw, json)
Hash identifier:          Cf9Glqo3DEsuObN9kO2S8aZsvq9SkfBbAx02s5rwu0I=
Subject key identifier:   7D:F8:3C:96:EF:0A:31:0C:80:A5:CC:15:23:68:8B:70:47:E2:9B:59
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584EE7BCB6E5CC8A1C9958AC6180
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1c55430b-aa95-3e48-9f8a-dccea2142280.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     6461
IP address blocks:        64.125.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:b6:e5:cc:8a:1c:99:58:ac:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=5ce0a72a-ef99-4ef8-ae85-48bbf2bc59c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9f:14:36:42:0d:85:05:0a:77:25:2e:f9:88:
                    cd:5b:dd:a6:6b:07:d4:48:52:dd:d4:2b:ff:de:b5:
                    a3:aa:f4:ef:19:d7:9e:d2:8e:80:07:67:49:a6:7c:
                    88:7f:b0:6f:2f:20:2b:a0:bd:bf:2d:06:a3:68:c3:
                    2c:c1:dd:06:98:7c:77:8c:67:62:18:60:33:26:20:
                    3a:39:a1:05:6c:65:35:26:41:c4:f2:cc:72:b0:71:
                    99:a5:28:5a:86:d8:95:5c:a0:4f:0e:b0:11:b7:4d:
                    68:62:d3:40:cf:87:cf:8d:f1:0e:ea:26:42:a2:ff:
                    60:ca:03:c1:53:bc:47:c0:7e:07:be:c9:bb:29:39:
                    86:dd:99:27:28:8d:f3:2d:c0:2a:60:e4:0d:45:a1:
                    d1:30:72:5b:6d:90:41:ea:93:5f:c6:5f:57:65:69:
                    14:2b:6f:cc:fc:ab:65:67:8f:d3:76:f1:07:40:51:
                    30:97:c5:f0:65:7e:92:c4:3e:13:54:35:0d:f7:0f:
                    b7:3d:60:13:a9:3a:5c:63:ea:25:f9:dc:3f:77:38:
                    d4:58:ed:75:12:d6:61:95:a7:f7:1e:5b:0b:a2:83:
                    30:83:ec:18:d0:cd:e2:f6:87:0b:36:90:7c:69:a1:
                    79:05:48:3e:f7:ed:09:8c:e7:62:22:22:eb:9f:20:
                    9c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F8:3C:96:EF:0A:31:0C:80:A5:CC:15:23:68:8B:70:47:E2:9B:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1c55430b-aa95-3e48-9f8a-dccea2142280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:6d:c9:4a:7b:0f:bb:7f:16:f9:57:29:ec:78:0c:2b:60:5f:
         5a:d2:57:38:96:a0:55:0b:86:e0:40:7a:4d:35:dd:05:ed:7e:
         a4:1b:24:f7:20:ea:3b:59:bd:d2:0f:e9:2c:5d:a4:24:12:51:
         12:78:6c:49:c4:37:d3:cc:95:35:6c:49:c8:14:ad:5b:87:d2:
         9e:83:f4:d3:e9:e6:3f:5c:83:df:ae:fd:d2:c8:b5:2f:b1:cc:
         d1:71:cd:9e:ab:dd:c0:c9:f4:94:68:34:c5:e2:49:7b:39:ea:
         05:ab:6e:df:fa:f0:84:70:15:04:af:cd:46:26:90:0a:2d:a0:
         5f:be:84:1e:d2:9d:77:e2:9e:14:49:3a:6d:91:8c:79:f5:fa:
         5c:df:b1:10:da:da:76:46:ca:a1:b3:45:0d:14:cc:58:01:1e:
         b4:43:57:da:31:a1:1d:30:52:b7:ca:8c:35:81:96:f9:5b:c1:
         50:ed:41:f5:39:ad:e4:dd:f4:2e:15:b1:b3:5f:1c:c7:84:0a:
         a0:4c:c1:d9:97:2d:00:c4:84:b6:be:b4:fa:97:6e:6c:de:12:
         ae:ab:03:63:e0:e4:f3:b8:0e:a2:42:b6:c2:ba:bb:bf:1d:37:
         39:fa:72:de:b4:b6:60:fb:3c:bf:01:db:1a:bf:96:08:1d:8e:
         6b:e0:9d:38
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7nvLblzIocmVisYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk
NWNlMGE3MmEtZWY5OS00ZWY4LWFlODUtNDhiYmYyYmM1OWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ8UNkINhQUKdyUu+YjNW92mawfUSFLd1Cv/
3rWjqvTvGdee0o6AB2dJpnyIf7BvLyAroL2/LQajaMMswd0GmHx3jGdiGGAzJiA6
OaEFbGU1JkHE8sxysHGZpShahtiVXKBPDrARt01oYtNAz4fPjfEO6iZCov9gygPB
U7xHwH4Hvsm7KTmG3ZknKI3zLcAqYOQNRaHRMHJbbZBB6pNfxl9XZWkUK2/M/Ktl
Z4/TdvEHQFEwl8XwZX6SxD4TVDUN9w+3PWATqTpcY+ol+dw/dzjUWO11EtZhlaf3
HlsLooMwg+wY0M3i9ocLNpB8aaF5BUg+9+0JjOdiIiLrnyCcfwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFH34PJbvCjEMgKXMFSNoi3BH4ptZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvMWM1NTQzMGItYWE5NS0z
ZTQ4LTlmOGEtZGNjZWEyMTQyMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQH0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPW3JSnsPu38W+Vcp7HgMK2BfWtJXOJagVQuG4EB6TTXdBe1+pBsk9yDq
O1m90g/pLF2kJBJREnhsScQ308yVNWxJyBStW4fSnoP00+nmP1yD36790si1L7HM
0XHNnqvdwMn0lGg0xeJJeznqBatu3/rwhHAVBK/NRiaQCi2gX76EHtKdd+KeFEk6
bZGMefX6XN+xENradkbKobNFDRTMWAEetENX2jGhHTBSt8qMNYGW+VvBUO1B9Tmt
5N30LhWxs18cx4QKoEzB2ZctAMSEtr60+pdubN4SrqsDY+Dk87gOokK2wrq7vx03
Ofpy3rS2YPs8vwHbGr+WCB2Oa+CdOA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:23:58 2026 by rpki-client