Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4b552214-85d9-3e93-972d-4a516c69401b.roa
File:                     4b552214-85d9-3e93-972d-4a516c69401b.roa (raw, json)
Hash identifier:          MoxIm2NAatYkMY42FL14qylUYl1kdSz24zlFIslKLAs=
Subject key identifier:   66:30:FB:24:04:56:4B:DB:CC:E6:C1:90:6B:31:D6:E2:C1:41:54:E9
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584EA7872688F2D620E8FE9106D0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4b552214-85d9-3e93-972d-4a516c69401b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15290
IP address blocks:        2001:4c8:108a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:26:88:f2:d6:20:e8:fe:91:06:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=350f72dc-14c0-4aa2-ae24-76772998ac5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:12:d1:1b:73:c9:36:44:ee:6a:4c:1d:87:30:
                    3e:7f:62:5c:b4:68:ed:8e:63:8c:1c:1b:42:ae:65:
                    42:74:2e:e9:88:b8:84:2e:31:ec:cb:2d:cb:33:99:
                    4c:9f:0e:33:fd:cc:b5:08:17:8b:48:58:0a:bd:66:
                    3a:90:54:f3:48:9d:e7:0b:e2:0a:98:50:8a:95:57:
                    3d:8a:9f:74:d4:4f:6e:c8:bf:f1:12:3f:be:a5:69:
                    8d:ab:cb:76:64:b0:3a:b0:ac:2e:70:92:90:84:12:
                    5c:20:5c:cf:c6:0e:bd:d0:24:f1:5e:c3:4d:01:db:
                    c8:d3:aa:09:a0:0f:33:4a:df:1b:6b:b2:a3:ac:43:
                    52:41:9f:e2:59:69:78:66:65:7b:9d:7c:9b:55:5a:
                    44:96:f4:d4:83:9c:0a:9a:f6:9b:8f:38:ff:f5:7e:
                    c3:38:cc:28:88:6b:34:fe:f8:63:52:78:7e:bc:f2:
                    84:e6:85:7b:e4:20:c9:e0:ba:af:ff:e8:b9:45:74:
                    28:93:13:c0:59:f6:d5:09:50:f4:81:a5:85:bb:b0:
                    25:fb:69:87:2a:df:89:11:ca:3c:ef:78:a5:6c:14:
                    3f:da:e0:12:21:78:4d:c6:66:88:cd:f4:ed:bc:76:
                    d0:5e:18:0d:14:fe:73:c6:af:c4:f0:93:bf:32:3b:
                    1d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:30:FB:24:04:56:4B:DB:CC:E6:C1:90:6B:31:D6:E2:C1:41:54:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4b552214-85d9-3e93-972d-4a516c69401b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:108a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:fd:b5:14:77:43:10:c6:45:73:a8:8a:c2:24:55:f8:2c:36:
         ec:68:8c:ad:60:5d:fe:3b:d4:9f:fa:a1:f0:21:3a:55:5d:aa:
         65:84:5a:41:70:9b:94:69:ad:42:db:42:a3:39:b9:4c:59:75:
         b3:4d:d4:54:60:6d:5f:5d:71:8b:44:67:be:52:85:61:eb:e8:
         c4:90:65:02:4a:19:f9:5d:af:74:44:50:ec:f1:5c:e7:46:45:
         3d:36:38:b0:7f:0a:bb:11:fc:a4:e9:6c:e0:fd:34:1d:81:b1:
         7a:cc:e3:44:cb:71:1a:4d:40:5f:70:4e:da:d0:6f:8f:a4:e1:
         42:c0:6f:0e:df:35:a3:e3:ce:be:27:70:50:58:ba:03:e1:a8:
         34:6b:59:02:5c:41:61:85:a3:bd:d8:0d:fa:1a:0d:38:d1:44:
         b0:52:84:c1:b6:d6:f7:e1:01:54:19:c4:34:92:58:35:42:53:
         ff:73:f7:2f:52:4e:fb:16:47:cf:82:8c:ef:65:64:07:06:7f:
         45:a0:b2:98:8f:85:9a:10:f9:66:cd:6a:0b:66:34:73:13:12:
         52:ba:a5:b4:e9:f3:4e:b6:80:b7:b2:61:d8:7b:b2:3c:f7:10:
         61:36:49:af:52:4b:26:21:20:54:bc:25:4e:da:41:cc:ac:42:
         27:85:51:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 12:30:31 2026 by rpki-client