Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7b1246b8-08e3-34f5-922b-40e4a4fad812.roa
File:                     7b1246b8-08e3-34f5-922b-40e4a4fad812.roa (raw, json)
Hash identifier:          nk8Tc6M43otPdUeekSUUoSae0O7fAByi56FfpwpB6yw=
Subject key identifier:   37:95:6C:28:29:BF:38:37:91:11:F9:D6:28:2A:87:93:4A:DA:F8:64
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584E3E5F48940476D3BA4397F700
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7b1246b8-08e3-34f5-922b-40e4a4fad812.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     17025
IP address blocks:        2001:438:b2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:48:94:04:76:d3:ba:43:97:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=021001ea-4196-446f-a2d6-5639502ea277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ff:5e:20:ce:15:b6:9b:49:29:2a:d8:f0:6f:
                    2b:93:ff:0f:9d:3c:2f:47:7d:f8:87:cf:06:86:70:
                    6d:6e:6c:23:16:c1:9a:7a:29:27:93:c7:20:fb:3b:
                    10:87:c6:0c:9c:bd:fc:ec:02:cd:31:b0:76:ef:52:
                    fd:47:1b:50:e7:47:12:50:5a:26:7f:2a:d7:f1:40:
                    d6:dd:94:1b:2b:98:6c:f2:f4:30:7e:6d:1f:cf:b6:
                    3a:35:5b:41:ec:a9:e7:c1:4d:f6:3d:bc:2f:e8:b1:
                    69:2c:1e:e5:9c:fd:2b:11:e9:f2:e3:26:c7:2c:14:
                    29:9f:d5:c2:f4:6b:01:6d:5c:af:ec:27:96:ec:0c:
                    43:cc:78:a7:c6:5c:5c:70:80:51:41:d6:5b:28:99:
                    c9:30:bb:d2:fc:3f:c4:16:46:33:43:81:68:a5:65:
                    7c:e2:50:b5:8c:4d:72:f9:ef:e6:7b:fe:92:1f:f4:
                    57:4f:f2:82:a4:a1:a3:ec:70:a3:fc:12:33:fe:94:
                    3e:f4:6b:7f:7d:27:e5:66:5b:c1:31:31:0c:3e:16:
                    54:bd:0a:d5:de:74:d8:ec:9f:d6:4a:2c:3f:92:47:
                    c0:2d:15:83:0b:f2:dd:f6:d0:39:fd:1b:4f:cf:73:
                    20:37:be:48:7c:72:d7:9e:f3:57:a4:c6:d3:70:aa:
                    97:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:95:6C:28:29:BF:38:37:91:11:F9:D6:28:2A:87:93:4A:DA:F8:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7b1246b8-08e3-34f5-922b-40e4a4fad812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:b2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:4a:65:3c:ec:00:20:94:d0:5c:f8:1e:0b:54:e6:b0:d0:4a:
         2e:92:08:33:c0:7c:7d:44:6a:b8:a3:cc:0d:f2:23:80:54:79:
         88:71:67:f1:9f:db:ea:f6:90:0e:c1:4e:d4:e2:48:dc:7d:a0:
         79:81:84:14:2b:91:09:22:38:49:4d:23:54:3d:aa:d2:82:09:
         5c:a9:51:0a:1f:4d:e4:80:ba:81:a4:b0:bd:dd:d6:dc:8e:73:
         05:d8:27:e3:15:1e:77:2e:50:44:5d:f4:0b:48:bb:86:bc:2d:
         21:b0:4c:d8:be:7c:db:d6:35:66:a1:9e:96:db:d2:c2:a6:d3:
         20:45:de:c9:4c:fa:bf:fc:14:e4:67:49:d9:87:b0:33:b5:33:
         3c:0f:23:24:7f:09:14:95:15:00:1d:f7:ba:1d:59:7f:95:91:
         29:b1:fa:77:c1:25:49:e2:58:39:56:f6:2d:7c:fa:ca:c4:e0:
         e1:ed:df:66:97:5a:22:3c:c8:32:35:e4:c9:28:14:2c:e2:e0:
         31:4f:ee:92:1a:c7:f5:fc:b8:a6:f7:52:9d:96:0c:04:10:b6:
         4b:cd:96:16:7f:92:c0:d0:22:3d:3a:bb:9e:e6:51:af:55:54:
         86:fa:ce:83:4b:7a:91:86:64:14:16:d7:bb:2b:67:4e:15:10:
         65:f2:fe:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:51:00 2026 by rpki-client