Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3a58a272-1567-32bf-93ef-107d75898430.roa
File:                     3a58a272-1567-32bf-93ef-107d75898430.roa (raw, json)
Hash identifier:          uuis/TApNSCWNrZv/IUTM9Dw3SfT5AN4+DJQjQbBFW4=
Subject key identifier:   D2:38:BA:5F:E8:17:DD:0B:8A:74:C7:51:BA:17:AB:92:63:C5:9B:D6
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584F7782EA8B4CD28BB3363F5880
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3a58a272-1567-32bf-93ef-107d75898430.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     18586
IP address blocks:        64.125.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:82:ea:8b:4c:d2:8b:b3:36:3f:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=c95d2eb3-bf33-4191-a5b2-a3e64a7609eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:77:39:86:fe:c8:3f:a4:7e:0a:7b:89:b7:eb:
                    40:71:8f:d0:7f:5c:53:d3:4d:50:21:c3:75:94:b6:
                    31:33:94:fb:86:1f:58:83:db:3c:7e:19:d3:a2:a5:
                    81:4f:7b:5b:81:d0:75:83:99:da:d8:bf:0b:95:c1:
                    f0:ae:eb:91:70:df:c1:6f:bb:f2:88:5a:b7:c7:ce:
                    a6:b4:8b:64:95:8c:36:91:1f:c6:cc:49:08:51:a9:
                    42:70:e9:ec:d6:75:b0:6f:53:cd:10:93:46:af:53:
                    86:10:2d:19:59:4c:33:3c:eb:22:1f:3e:4c:fc:93:
                    b6:90:56:0d:09:8b:73:81:b4:9f:ff:9f:09:77:c9:
                    fb:d8:8c:cd:5e:1e:da:ea:cf:0e:c2:c9:00:18:d2:
                    1d:65:cc:72:1a:79:d3:a3:c2:d6:aa:06:25:c6:00:
                    b9:da:e8:95:d1:ad:2a:47:fc:22:35:20:b7:32:42:
                    25:26:19:b2:71:cc:bf:f3:b5:14:d8:42:d0:39:2f:
                    5d:94:b7:6f:c2:ca:5e:ee:74:2d:6a:7b:85:15:f7:
                    50:c3:dd:81:54:33:5c:a6:b1:dc:d1:0f:63:b9:87:
                    74:4a:21:fc:15:c3:b2:40:16:7f:ea:04:34:2c:33:
                    93:c4:fe:33:0a:2e:b8:f6:f2:51:9f:87:34:38:f3:
                    f0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:38:BA:5F:E8:17:DD:0B:8A:74:C7:51:BA:17:AB:92:63:C5:9B:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3a58a272-1567-32bf-93ef-107d75898430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:e5:7e:0d:5f:b4:2b:dc:4e:2a:45:de:ff:4b:f8:bb:6d:f1:
         e2:d6:0e:f2:a6:69:a7:13:85:a4:b5:36:55:6b:c6:65:61:01:
         61:3a:b8:50:8c:08:a5:c5:86:6d:2b:16:48:a8:bf:82:88:5c:
         a6:fe:8a:1d:01:fe:69:99:1b:59:ee:0f:3c:c0:8e:99:f0:7b:
         5c:2c:56:7e:04:d2:f6:78:4e:fb:6c:91:e5:bd:26:dc:76:90:
         6d:63:b2:d2:1f:53:61:6d:94:b7:d8:b7:c0:48:35:3c:2c:18:
         17:c3:e4:c2:b4:ee:2b:48:ff:e4:c4:ce:93:7a:b4:65:11:c4:
         41:46:f6:be:a1:ad:8c:68:09:c0:fa:5f:e1:e4:e6:c3:a7:2c:
         a2:a6:c4:77:1d:13:5c:6c:b5:11:1c:86:e6:3f:37:56:94:59:
         b1:57:ae:99:4d:29:5c:1d:db:4c:d8:1a:e8:48:8f:54:9d:cd:
         1a:aa:a2:87:7b:03:81:95:27:40:79:d3:a1:3d:98:4b:4f:91:
         3d:84:7b:2e:6f:de:cc:e3:97:1a:80:7d:46:ef:18:17:79:8b:
         d7:0f:3a:7d:e1:f4:22:21:f2:12:36:f1:25:6f:bc:eb:c3:26:
         05:cc:fe:e2:69:93:fb:4c:f7:e3:d8:5f:a2:0a:b5:5b:0c:2a:
         6f:e9:1d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:05:58 2026 by rpki-client