Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8aef21de-52d8-31f7-944e-903c3477d4d6.roa
File:                     8aef21de-52d8-31f7-944e-903c3477d4d6.roa (raw, json)
Hash identifier:          dIbotROh+6QFD1yTYlNqzVdKn96Vp1miFXfxBX1uh7Y=
Subject key identifier:   26:6B:17:04:72:ED:11:5C:9A:7A:5D:30:77:85:C6:2D:1F:67:97:66
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584E5BAF4CBD372F1094EF90AFC0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8aef21de-52d8-31f7-944e-903c3477d4d6.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     3131
IP address blocks:        64.184.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:4c:bd:37:2f:10:94:ef:90:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=632feb9a-6f95-41b6-bffd-5ce2578a7cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:01:fc:d7:54:c4:4b:6e:4f:cf:5c:a5:29:
                    01:5f:e9:96:f3:4b:0f:12:94:7e:02:09:d2:33:98:
                    22:5a:dc:06:5a:91:cd:5f:22:59:e1:28:4f:24:de:
                    db:e7:a1:84:6c:48:19:34:22:7c:2c:16:6e:b6:e1:
                    bb:9f:12:ed:32:0c:04:d2:5a:f1:fb:d9:23:37:da:
                    75:be:ca:23:67:ee:cb:63:20:d1:35:cd:26:2b:87:
                    94:28:d6:e7:9a:a4:03:65:b6:00:eb:59:3c:0e:c8:
                    47:cb:be:ba:d4:3f:00:be:11:87:b0:a4:ba:25:ff:
                    2d:31:33:7b:7d:c2:25:1d:1d:29:ec:41:e9:65:48:
                    39:df:59:a1:81:0b:5c:e1:97:bd:31:c3:4e:35:bd:
                    ac:28:25:20:47:00:c0:27:64:f8:0c:ba:16:10:4c:
                    96:d6:1b:c7:5e:65:3f:a5:34:37:c4:67:df:a7:bc:
                    26:38:a5:d2:f0:84:6c:51:c0:86:73:75:98:ec:18:
                    9c:a5:fb:19:b4:fa:a5:0c:10:fc:08:f4:b3:91:96:
                    5e:63:80:2c:5f:df:ee:b6:1e:17:2e:90:1e:86:4c:
                    22:df:5a:fe:84:d9:9c:ea:ec:04:36:8b:48:c1:d4:
                    40:50:a1:b0:84:47:54:e9:23:25:c7:dc:a1:ca:17:
                    e4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6B:17:04:72:ED:11:5C:9A:7A:5D:30:77:85:C6:2D:1F:67:97:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8aef21de-52d8-31f7-944e-903c3477d4d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:d9:56:fd:dc:55:1c:bf:0a:fd:d6:64:ac:de:7b:e6:e9:55:
         40:b7:1b:32:f1:65:db:ab:68:c0:44:c3:f8:a8:e0:6d:fc:59:
         10:b0:60:f5:79:2e:30:26:cb:06:8d:62:d8:95:f2:c3:62:2e:
         ee:4b:15:34:92:c5:1c:c0:7e:27:41:53:fb:64:3e:35:e4:7c:
         6d:b5:03:65:f3:3f:0c:ba:1d:18:be:df:1c:3b:b0:a3:85:79:
         4a:0b:b9:d5:85:15:89:8e:b2:4b:9a:e9:d3:c9:a3:31:ee:1f:
         65:82:84:ce:d1:64:68:1b:4a:5d:75:21:43:8f:47:d1:70:db:
         ff:94:e1:4d:a5:a8:b9:0a:4b:1d:c0:37:13:15:b8:2c:ba:fe:
         28:41:42:8e:46:a1:25:a8:c4:d6:64:d0:8d:15:f7:99:92:00:
         dd:16:e2:fe:73:67:59:a9:a2:da:9f:ca:6c:a1:41:65:d4:d1:
         56:0e:2f:a6:78:7d:a4:fc:09:5e:67:50:79:f9:17:e7:33:6f:
         1a:ff:e8:fc:5b:70:7f:26:d9:93:b9:d7:78:80:3d:97:00:1f:
         1d:b1:e0:41:bc:cf:a5:bb:04:6e:ff:c4:8d:74:e8:21:17:ae:
         1d:bc:b9:8c:d9:3a:0b:08:de:c0:73:ff:eb:28:ad:ea:23:95:
         f8:af:45:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:45:17 2026 by rpki-client