Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4447bfed-b16b-39ab-aeee-d53637c2572f.roa
File:                     4447bfed-b16b-39ab-aeee-d53637c2572f.roa (raw, json)
Hash identifier:          EiHQVwfvxZR4BxI6Mu4dLvVeYlxHAl1krWgi4f0bNcs=
Subject key identifier:   3A:8E:14:7C:96:FE:1B:B9:D9:01:4E:99:D3:5C:48:04:01:1D:5A:80
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D524357E3FD81199DCF4EFCC0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4447bfed-b16b-39ab-aeee-d53637c2572f.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     13955
IP address blocks:        64.125.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:57:e3:fd:81:19:9d:cf:4e:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=ecaea14d-3276-4232-a819-f758b741851d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3b:49:d6:84:25:a7:3b:36:3f:ad:78:0d:c1:
                    79:f9:88:51:96:18:d1:cc:e7:b5:59:16:7c:c1:48:
                    66:09:36:6c:ec:be:57:3b:85:3d:6c:fa:0f:b0:a5:
                    ad:20:71:c6:c5:32:db:48:57:e5:e0:e4:00:b4:d7:
                    cb:70:69:02:fa:e0:e6:3e:6e:6f:dd:83:b8:90:12:
                    19:e3:d7:1e:82:59:3e:36:1a:23:6a:a9:9b:63:ea:
                    b7:91:8b:49:8a:37:72:6a:0b:c5:ec:27:92:1c:34:
                    21:fa:8b:03:5a:1b:5a:63:dc:30:11:75:15:33:6b:
                    49:40:c0:bc:cc:b7:35:38:17:f1:57:f0:64:ed:d3:
                    d1:ec:d4:f2:96:fd:88:13:66:93:0c:09:16:26:d8:
                    d0:da:1e:7d:50:f0:96:09:b1:7c:7f:4f:e4:3b:10:
                    52:7e:02:df:14:29:90:24:81:0c:93:b7:c7:32:89:
                    6b:dd:6a:c9:c4:8e:6b:4d:cd:db:41:49:26:77:f4:
                    47:11:a5:53:92:fd:5b:49:3b:f0:fa:dc:d6:13:7d:
                    1f:c6:aa:ff:f3:8a:f7:42:89:d6:50:24:74:73:7c:
                    23:70:9b:ac:21:40:75:11:f1:1d:2a:6f:38:ad:92:
                    38:d6:c4:67:5a:4a:72:dd:82:43:f0:4a:ef:fd:c0:
                    11:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8E:14:7C:96:FE:1B:B9:D9:01:4E:99:D3:5C:48:04:01:1D:5A:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4447bfed-b16b-39ab-aeee-d53637c2572f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f8:b9:4d:df:0f:13:08:29:e3:73:e9:08:8c:3c:86:35:92:
         fa:6a:a7:be:3a:01:0a:32:6b:4e:3f:02:e8:a1:7d:2f:30:a2:
         2f:9e:a2:62:29:3c:cb:0a:44:aa:e2:82:6f:1c:78:86:c5:2e:
         3f:1c:af:5e:45:93:0f:c3:35:c5:61:48:dc:a8:bf:c5:61:37:
         40:c8:52:5c:a0:98:80:97:ac:91:66:46:f9:e0:df:51:86:fa:
         16:de:3b:c9:02:41:7b:77:65:44:5d:a3:89:65:08:4c:27:6b:
         1b:0f:9d:b3:85:29:e9:54:3f:fa:a5:f3:a1:ac:95:6e:4e:d2:
         d3:d2:80:cf:fb:87:bf:38:53:37:a1:6c:a2:74:58:1d:d3:1c:
         9d:c4:4f:db:49:70:1c:48:ad:05:cb:1b:07:77:1e:ab:22:50:
         8a:cc:bf:53:25:16:6f:13:bf:88:26:4d:a0:a8:4b:23:2f:f0:
         0a:f8:cd:db:f1:8e:38:e1:6a:b6:f0:e9:57:05:98:8d:83:a2:
         4e:08:25:3a:3f:89:8d:59:3a:15:5c:6b:6b:54:78:46:ae:6b:
         80:68:2d:95:4d:4b:01:87:bc:47:2a:d6:2a:08:59:ef:2a:c2:
         15:84:a5:84:b8:d1:9c:c2:a6:07:31:86:bd:ac:a7:99:9c:0e:
         50:71:75:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 14:23:23 2026 by rpki-client