Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4cd71e1f-11bf-3462-83e1-5d4f9747e9af.roa
File:                     4cd71e1f-11bf-3462-83e1-5d4f9747e9af.roa (raw, json)
Hash identifier:          +i8UKNYlQqrbfvUzwc3ptKS9K7cfIwdAkJBHrBLGwbU=
Subject key identifier:   03:1E:E6:5E:65:C8:2A:B8:D7:58:74:89:EB:80:3A:F0:EE:D3:2D:C9
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584F498BE281F787A1FE12E81B80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4cd71e1f-11bf-3462-83e1-5d4f9747e9af.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15290
IP address blocks:        2001:4c8:1025::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:e2:81:f7:87:a1:fe:12:e8:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=92c86de4-605c-40d4-b752-24a4aef392be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:81:c6:be:00:88:b7:c6:27:07:28:c3:a0:c6:
                    76:78:0f:75:02:12:68:fb:55:9c:7b:30:54:b7:d9:
                    7f:b3:2c:74:40:02:83:6b:67:31:18:37:1f:52:0f:
                    d5:79:56:ed:c2:fb:08:ed:be:1c:39:95:91:17:dc:
                    b1:80:c7:c9:9c:41:96:a2:f6:58:8b:32:e9:f5:22:
                    22:41:81:d0:86:f3:09:b8:01:46:8a:27:c3:9e:e5:
                    78:01:4f:95:65:d7:29:5d:db:26:ce:fa:14:aa:0d:
                    2b:5c:c2:01:21:46:a9:fe:3d:4b:c4:84:bd:c9:df:
                    8c:15:a1:20:ff:e7:19:54:8f:dd:1f:81:d5:8c:c5:
                    be:35:ea:ef:8f:2f:cd:df:3a:c4:2e:fb:ca:7b:84:
                    cb:e5:7b:9d:1d:02:07:91:d9:0c:ec:70:bf:22:4e:
                    22:83:ce:3c:3f:e7:c2:bd:65:f2:f7:a8:32:18:16:
                    32:42:e0:57:25:7b:10:42:36:82:db:5f:e1:91:67:
                    9e:c5:cf:68:14:3a:0f:c5:8b:7f:d2:a0:f2:b2:e1:
                    0f:b9:e0:06:b7:4c:d8:a1:63:43:d5:cc:b5:6d:98:
                    be:34:01:ea:08:52:0e:f7:9a:e0:21:f7:df:ad:85:
                    17:09:45:cc:2a:10:e6:4f:ec:47:bf:30:00:52:ef:
                    c3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1E:E6:5E:65:C8:2A:B8:D7:58:74:89:EB:80:3A:F0:EE:D3:2D:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4cd71e1f-11bf-3462-83e1-5d4f9747e9af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1025::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:15:9e:1f:aa:66:6e:de:4e:20:26:fd:1c:40:8e:8f:55:4c:
         d1:e4:3b:37:fc:dc:63:51:f4:e1:75:c2:ae:fa:2e:ab:54:cd:
         c3:21:b2:b1:5f:64:91:b3:8e:85:90:0f:b7:e4:80:41:01:9f:
         3c:4c:e4:9d:e4:6b:b9:4b:3a:32:50:d8:80:3d:8d:cc:13:f1:
         25:17:9f:2a:09:e3:8a:73:bf:9d:2e:e4:a3:d1:5d:04:f3:6c:
         0a:ec:54:08:22:d6:1d:bd:98:1e:9f:1a:e9:c0:c1:44:96:da:
         7b:35:84:cd:9b:97:99:da:5e:c5:dd:31:8e:67:78:e4:14:72:
         82:81:8c:ce:c1:06:e8:fc:56:18:29:f6:e7:46:9b:d9:e7:0b:
         ea:b1:d0:47:0c:b3:e5:c2:1c:44:fe:f7:71:24:aa:ba:5d:09:
         53:65:c1:8f:b3:31:30:08:9b:f9:f4:77:4d:42:dd:22:74:8b:
         44:be:68:09:54:8e:d5:26:f8:5b:88:dd:b6:7a:63:91:87:40:
         9f:69:8e:e0:ef:74:a8:60:8f:7f:ed:17:c2:c3:bf:b6:fa:da:
         02:b9:56:de:f6:42:4e:1e:37:16:6d:0c:bf:b9:06:28:67:ab:
         1e:56:ee:f8:61:65:7c:06:9f:52:d1:90:22:d9:35:b9:5b:85:
         25:db:51:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 14:26:13 2026 by rpki-client