Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3bf1ddfa-ba7e-3162-a20e-8456399b8f95.roa
File:                     3bf1ddfa-ba7e-3162-a20e-8456399b8f95.roa (raw, json)
Hash identifier:          iG5huB93UOj2I/WdGeD/BK1W8fZGIUy7Tr4g2U6hUjA=
Subject key identifier:   6D:10:49:5D:88:F9:BD:70:EC:CC:3A:15:BD:18:C7:EA:8E:87:FE:B1
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584EA7880C2DACEC927FAC613300
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3bf1ddfa-ba7e-3162-a20e-8456399b8f95.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6461
IP address blocks:        66.46.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:0c:2d:ac:ec:92:7f:ac:61:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=88a7e958-5353-4fc1-b8f4-b0a9a50ace39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a6:28:32:82:a9:e4:21:be:dc:ed:cc:a7:b0:
                    cd:13:37:5d:45:bd:80:6f:04:92:2e:d2:95:81:00:
                    9b:00:91:41:78:f6:09:f2:e5:b7:3d:d4:f1:1b:8b:
                    d4:3f:10:4b:b5:13:b0:87:ba:6c:74:b3:53:e8:ee:
                    16:98:c3:53:fd:6e:a5:26:25:92:b6:05:cf:30:f5:
                    f4:9f:28:fc:54:e7:ef:25:47:3e:73:f2:39:18:52:
                    7a:6e:b0:b5:26:ea:a3:bb:0b:20:20:43:a1:d9:b3:
                    bc:2b:77:00:a7:9d:6a:3f:01:38:c5:6d:5e:75:5d:
                    b7:ac:b3:42:c8:1f:c2:6f:aa:54:a0:25:b5:06:b9:
                    5d:29:6a:39:8f:7c:db:98:7d:a5:70:9c:3d:06:84:
                    c2:f8:59:3e:fc:05:72:62:4a:f2:2e:1b:58:a7:98:
                    7a:aa:c6:e1:5b:05:1a:b6:d8:87:0b:14:95:0e:a5:
                    b2:78:7c:68:3c:c0:68:83:c4:0e:7f:e6:6c:cf:b1:
                    c1:2f:0b:a7:1e:4a:d2:05:8d:1d:95:55:74:ce:1d:
                    c2:f6:b0:94:82:ed:a6:3b:20:ad:d7:a7:4f:62:6e:
                    71:60:11:17:f3:00:82:17:4f:fb:2d:10:ed:cc:69:
                    a7:ca:c0:d8:4e:3b:57:73:d1:83:fe:d1:18:33:2e:
                    29:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:10:49:5D:88:F9:BD:70:EC:CC:3A:15:BD:18:C7:EA:8E:87:FE:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3bf1ddfa-ba7e-3162-a20e-8456399b8f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.46.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:4c:fc:39:b3:af:2c:ac:54:9a:0f:96:cc:a8:eb:03:8b:00:
         08:6e:c2:30:3b:8d:b1:fc:4a:da:7e:10:07:da:eb:78:f4:63:
         d5:d7:fe:e4:6d:0d:42:e8:ef:83:69:1c:24:91:9f:8f:5d:62:
         49:80:10:9a:55:ff:2f:96:b2:6b:34:33:d3:fb:0c:c5:80:21:
         50:f8:81:95:df:39:ef:1c:02:88:b6:3c:7b:0f:7a:84:38:38:
         fe:40:26:44:d0:33:4a:8e:21:8f:e8:6e:df:78:44:10:12:35:
         05:35:3f:08:70:df:86:30:75:1e:b6:07:95:fb:c8:d2:97:1f:
         a8:a5:79:07:21:1e:4e:c6:7a:2e:08:d9:f6:e6:b0:8a:23:1d:
         1e:5f:98:f8:76:11:6d:9b:08:e7:5d:b3:15:2b:0b:c5:b6:9f:
         28:71:33:2b:48:78:18:49:c6:6e:87:65:5e:a5:54:ff:77:17:
         fc:f3:43:99:cc:06:07:c0:ca:f8:d3:c7:15:63:64:c7:4c:7d:
         10:30:e3:d8:a0:b5:7a:00:5f:9d:66:b5:6c:8f:f7:e3:de:76:
         63:ae:e6:06:a8:9c:86:5c:aa:62:73:fd:e7:da:ea:58:36:78:
         47:81:c2:a4:8c:e2:8b:20:e4:6f:57:16:95:25:63:0f:ac:bd:
         48:c5:14:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:24:05 2026 by rpki-client