Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7a2a6b25-c130-345b-9ac3-4870b4b04979.roa
File:                     7a2a6b25-c130-345b-9ac3-4870b4b04979.roa (raw, json)
Hash identifier:          cOq6uW9wloD21yyz+g9Z2T67nHyGWeDfESx4XOWbH1s=
Subject key identifier:   C9:86:A1:F0:FE:64:12:EF:9A:A7:C0:8E:2C:49:5D:DD:8A:8D:BF:7A
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584F49745228C1433C07084C3100
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7a2a6b25-c130-345b-9ac3-4870b4b04979.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15290
IP address blocks:        66.46.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:52:28:c1:43:3c:07:08:4c:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b21ae063-9e3a-416d-81b8-a48c6ebf73e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9e:ba:67:f9:2c:12:35:88:80:43:73:97:60:
                    b2:80:c1:6a:68:de:ba:25:81:8f:df:79:4a:b3:ce:
                    de:3c:96:f9:1a:56:56:7d:68:64:fe:11:53:fa:fb:
                    5e:b3:46:5b:e8:0a:58:b8:c2:ec:b3:57:de:d4:13:
                    06:5e:01:8d:9f:60:22:47:5f:07:18:db:87:04:93:
                    ab:c6:58:a3:e3:51:9d:ea:27:41:72:6c:ee:b0:a7:
                    f4:cc:23:d5:28:ad:6c:95:51:fc:3b:71:7d:bb:7b:
                    75:70:a3:15:d9:b1:37:6b:41:0a:96:35:75:66:18:
                    0a:0f:87:3c:b2:fa:7e:f3:13:f0:52:e6:74:3a:87:
                    af:7a:f6:db:c9:0d:1b:01:ab:bc:71:8c:c7:a9:6e:
                    e4:44:a5:02:ca:45:7f:a2:14:7f:0c:87:4b:a1:4a:
                    4f:d8:7a:88:90:88:e2:0e:75:68:ea:a8:f3:81:fc:
                    84:d8:16:d6:bc:03:35:fc:d7:f4:8c:3a:4c:a2:2b:
                    08:c5:da:16:ec:13:5c:45:c2:ee:73:b4:ee:a2:4d:
                    02:45:b7:3c:29:bf:da:ef:31:f0:7a:51:19:b1:fe:
                    5b:24:76:76:e8:54:6a:7c:44:30:d3:43:94:07:d6:
                    9d:7b:f7:bb:db:54:1a:99:57:47:7d:ef:51:a8:36:
                    b0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:86:A1:F0:FE:64:12:EF:9A:A7:C0:8E:2C:49:5D:DD:8A:8D:BF:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7a2a6b25-c130-345b-9ac3-4870b4b04979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.46.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:11:d8:2a:70:05:d3:11:f6:26:b8:ce:33:a4:ee:eb:81:34:
         df:3c:e4:b3:da:6f:80:22:3d:b4:ba:e6:da:06:ee:c2:59:1d:
         5d:c3:85:25:ca:9e:84:c1:f0:8b:c5:1a:41:39:dc:38:cc:6f:
         e8:fc:12:9f:7a:8e:6d:fa:40:63:6e:22:29:ae:8e:19:fe:af:
         c5:68:85:01:5e:db:d3:64:8a:11:dd:74:d9:c4:a1:91:74:f0:
         75:92:b8:b8:32:dd:b4:85:c7:93:67:29:ac:de:2b:d2:35:b4:
         6b:21:24:21:ab:f9:99:db:85:72:80:de:5a:3c:21:f7:be:70:
         62:45:55:b6:24:de:20:7e:7c:55:99:e0:a7:e9:9f:12:f8:28:
         c5:37:c0:34:77:c9:91:f7:8e:c1:40:50:a3:b8:03:5a:20:b2:
         da:83:81:68:34:fc:32:65:95:19:26:17:6f:74:63:55:88:f9:
         c2:35:f0:48:63:9b:ca:70:a7:3e:ba:fa:ac:d2:e7:d5:80:64:
         b0:78:b6:63:91:e3:61:9d:a9:a9:69:e6:a6:e5:2e:70:a5:06:
         8b:e0:b1:4d:1d:2d:f0:14:17:f0:ae:74:5d:ff:bd:69:c7:47:
         9e:f9:3c:77:bf:73:5b:be:10:8d:62:50:66:76:8d:04:1b:95:
         60:2a:8f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 11:28:58 2026 by rpki-client