Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3a595638-086f-3129-b3e7-c4271c674a71.roa
File:                     3a595638-086f-3129-b3e7-c4271c674a71.roa (raw, json)
Hash identifier:          myPJ075MbwN2Prc7FMhsXASPz7Whgo1Y2eC/nQ5Pl04=
Subject key identifier:   A3:40:99:A1:07:2C:79:36:42:A9:18:81:3E:5D:CD:42:03:B8:B5:EF
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D59EA74C2FC056106C6AAE200
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3a595638-086f-3129-b3e7-c4271c674a71.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     14427
IP address blocks:        2001:438:7d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:74:c2:fc:05:61:06:c6:aa:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=1a997dbe-384b-49ef-ae45-c91e2a959578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:31:6d:3a:b1:8c:63:88:bd:cc:96:fb:42:5f:
                    d4:ec:32:ba:ac:36:b3:0f:40:7e:d1:ce:48:9f:7f:
                    21:60:e1:55:60:29:fe:71:16:b5:c9:ff:2e:f0:70:
                    6b:b5:8c:49:f9:10:60:ac:e2:1d:b2:b5:66:d6:a8:
                    a0:8b:3c:3c:ce:36:35:da:17:a5:51:cc:b7:e1:fa:
                    8b:16:d1:50:5a:67:da:bb:bd:11:61:69:00:e7:08:
                    d3:e6:3c:d2:59:8e:11:26:eb:02:9a:9f:51:a7:d2:
                    b0:da:81:1e:f8:33:97:66:be:ac:f4:c5:72:26:49:
                    b5:94:9f:c7:ed:46:ec:f2:da:85:7f:3b:45:af:c9:
                    88:4e:22:33:78:8e:b2:a9:6d:7b:1f:09:aa:6b:73:
                    fe:2f:72:7a:93:9e:04:d8:5b:6b:c9:ae:04:01:05:
                    f9:53:be:9c:6d:32:34:44:2f:9a:78:56:06:9b:0d:
                    46:e3:5e:ab:53:37:07:e7:0b:4c:fb:a8:0d:75:3a:
                    ea:a0:74:e2:fd:be:15:ff:28:89:bf:d1:77:7a:d2:
                    94:7b:35:29:e8:56:85:31:9b:25:dc:65:dd:ca:63:
                    69:ce:2b:79:61:7c:af:fd:b7:34:5e:a7:45:17:ec:
                    d2:10:27:06:e6:d8:5e:f0:a5:fd:47:57:8f:e3:0e:
                    6d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:40:99:A1:07:2C:79:36:42:A9:18:81:3E:5D:CD:42:03:B8:B5:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3a595638-086f-3129-b3e7-c4271c674a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:7d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:e9:6b:72:7c:a9:ee:2e:36:92:8b:3f:d1:f8:83:99:6f:44:
         87:f1:ad:e4:75:c5:8b:96:2f:dc:43:a8:95:59:4c:39:15:31:
         27:a8:f4:41:8f:b4:bf:b9:b8:c0:af:7f:b2:ef:47:0d:fc:f3:
         7f:ed:d8:b1:f5:c1:24:f5:ab:56:5c:b5:eb:7d:99:a9:cb:0a:
         94:1f:90:da:9a:2c:73:09:37:5c:cf:9d:a9:cb:87:bc:56:3c:
         b0:e7:b5:6a:11:20:ea:54:f1:27:7b:90:cd:f3:c0:f9:a5:08:
         bc:36:36:a7:bf:c6:20:40:df:04:d3:7d:dc:43:fc:ed:df:06:
         e9:b9:b5:c4:da:02:04:89:ca:b3:0b:50:1c:aa:64:5d:fd:7b:
         b7:d0:d5:c6:7f:ef:98:3c:47:29:a3:dd:0f:7c:1a:70:fa:e8:
         7f:ea:f9:6c:ac:9d:3c:52:b4:55:e9:25:b7:68:18:7f:ff:2e:
         72:13:82:59:dc:69:7c:a8:78:d5:9f:08:c2:d9:3d:f3:dd:93:
         2f:e8:dc:fc:32:f9:ab:67:8e:84:51:73:a0:1f:73:b2:0a:d9:
         3d:05:e2:86:11:41:d5:e3:71:b6:14:58:02:6e:71:ff:88:99:
         9f:b7:2f:b8:46:fc:c5:65:29:90:eb:45:2e:57:5b:f9:c6:53:
         90:4a:e2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 14:26:13 2026 by rpki-client