Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9d50d0a0-2051-34d0-aea6-f88f0ded255b.roa
File:                     9d50d0a0-2051-34d0-aea6-f88f0ded255b.roa (raw, json)
Hash identifier:          jehRZTttYvN6aS65f8tyE8oshavMVxaUGHRhCq/l9Lg=
Subject key identifier:   D2:99:1D:41:1C:41:CC:B2:4E:67:BD:51:1C:18:A4:90:87:15:D8:09
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D524351807E090461FDD68D00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9d50d0a0-2051-34d0-aea6-f88f0ded255b.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     17025
IP address blocks:        64.125.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:51:80:7e:09:04:61:fd:d6:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=e6128b65-d133-4568-8b85-daf30031c935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6e:0c:e2:5e:c1:35:a3:2f:33:ee:ea:d7:5c:
                    ba:f0:81:cf:b3:c6:56:73:33:8c:b4:1b:a1:90:bc:
                    b6:6f:71:e7:8d:92:fa:93:76:a2:52:0d:80:2d:8d:
                    2d:1d:1b:7d:8b:bf:1c:e3:3a:c7:66:db:23:63:37:
                    e0:0f:8e:2b:62:89:14:52:10:6f:c3:90:67:5d:a9:
                    5d:49:8b:e3:b2:dc:9d:17:07:a3:b4:43:29:be:94:
                    47:32:99:08:69:46:e7:a5:49:6b:5f:b4:c5:37:c5:
                    8b:ab:e0:d4:15:84:51:fc:54:41:2e:df:81:b9:88:
                    55:ca:0d:59:e2:5f:9a:7b:fa:d0:48:30:e5:2b:98:
                    7a:15:4e:8c:bf:d4:11:48:91:e5:61:bd:ac:19:c6:
                    c0:94:52:43:47:03:4f:51:c4:7a:94:b8:f6:e9:cf:
                    f0:57:0a:4d:cc:50:eb:e1:19:0d:88:f2:5e:03:a1:
                    48:e9:02:ae:ee:6e:c3:3e:ee:d9:c9:3a:45:ae:e5:
                    83:17:99:be:6c:1a:de:09:85:a5:98:a5:1e:1a:29:
                    77:74:32:e5:0b:a7:61:3e:91:14:a6:34:bd:79:14:
                    24:46:61:dd:e2:a7:cc:a7:d6:01:5b:2c:8b:76:fe:
                    f7:b5:9e:53:08:f5:53:d9:8d:2c:ac:9e:19:a4:ae:
                    b4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:99:1D:41:1C:41:CC:B2:4E:67:BD:51:1C:18:A4:90:87:15:D8:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9d50d0a0-2051-34d0-aea6-f88f0ded255b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:4f:57:ec:c6:31:ef:e4:ca:e3:eb:03:e3:b2:28:6d:72:a9:
         77:53:0e:d7:d2:3b:0c:16:db:7e:02:14:44:33:00:96:8a:f7:
         e3:5b:bb:9d:4f:5c:7f:67:58:6f:f7:37:02:3c:28:4f:64:bb:
         b7:37:ae:47:26:fc:a4:c0:8d:75:3d:da:8b:85:7d:4c:46:92:
         57:20:97:d7:d3:ae:a6:03:18:0d:a1:0c:8e:53:cf:55:04:3a:
         75:53:2e:75:21:26:14:8e:fa:1b:b2:7a:94:c2:4f:e7:36:13:
         35:69:58:b3:51:81:9f:06:6d:63:15:3a:95:59:1d:61:02:9c:
         cc:d0:86:e3:14:19:8a:07:a0:a5:37:b6:1a:c3:ea:d1:73:55:
         bc:2f:30:ae:8f:f1:e7:28:03:09:c8:68:8f:64:b0:ed:18:70:
         90:1e:c6:3b:95:08:f1:c5:fe:e8:45:93:3f:99:8d:09:c3:6f:
         15:a3:2f:4f:3c:0e:ad:35:b8:32:e3:c2:01:e0:86:5c:1a:f2:
         8d:2f:5e:70:c1:1a:fb:b8:ab:57:af:68:bb:60:6e:b5:91:88:
         47:db:57:fa:dd:b8:d0:fc:4f:a8:ef:71:27:bd:43:93:28:dd:
         12:63:80:e0:8f:b9:7a:2b:31:b5:95:67:ab:c4:06:3f:b9:42:
         f0:62:8d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 14:25:55 2026 by rpki-client