Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/aa62e8f4-6631-3b88-b288-2e2678cb2a8e.roa
File:                     aa62e8f4-6631-3b88-b288-2e2678cb2a8e.roa (raw, json)
Hash identifier:          FMc2d440hpnFde1hBXG3xhWQ6JOFsKwgDxqQxbrqIwA=
Subject key identifier:   1E:CD:1C:AF:3F:CB:BA:F1:AE:BC:9D:CF:84:DD:96:DE:14:C6:A4:60
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D359FDDEDE0904612577DA780
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/aa62e8f4-6631-3b88-b288-2e2678cb2a8e.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     400040
IP address blocks:        2001:438:fffe:e::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:dd:ed:e0:90:46:12:57:7d:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=286c3c9e-438c-437e-988d-0b19fb6c3842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:27:3d:a7:6f:ee:2c:ab:e5:ee:5a:67:b3:ff:
                    a9:75:d9:ba:37:e4:33:7f:24:ca:3c:ce:a0:67:5a:
                    0b:47:29:cc:49:37:f7:f6:f6:d2:a5:c0:ac:6f:e6:
                    39:5f:d1:f3:be:9f:b9:2f:91:2a:db:37:0e:97:25:
                    a0:0e:1d:e4:dd:d7:1c:b9:19:6e:1f:10:c7:74:8b:
                    02:2a:19:8f:bc:23:e3:aa:0d:45:a5:b8:2d:33:98:
                    1a:5f:96:86:fd:75:6d:84:f8:97:f8:fe:a1:88:27:
                    43:34:80:58:c5:8d:c4:0d:f2:9f:1d:b2:b4:1f:e0:
                    36:8c:88:29:fd:75:dd:8a:71:a4:a1:34:d3:e1:79:
                    e9:72:bd:62:9b:bf:49:3a:1c:89:b8:da:39:d3:7b:
                    4a:e4:53:17:d4:65:a4:c2:6b:67:86:be:e1:c2:f5:
                    68:f2:cb:92:1b:18:a9:70:34:fe:db:87:44:79:45:
                    09:96:10:a5:a0:5a:84:8e:67:55:e1:8f:76:1f:98:
                    3c:5a:66:e7:08:ea:81:ec:75:f2:d4:94:76:25:13:
                    ba:96:31:e4:16:eb:d5:1b:78:f7:63:5f:c8:b5:29:
                    62:ab:00:25:1e:fd:55:1f:34:02:93:7b:76:60:c8:
                    4e:b4:c8:3b:7c:67:a6:01:10:35:42:ec:ef:7a:e0:
                    3c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CD:1C:AF:3F:CB:BA:F1:AE:BC:9D:CF:84:DD:96:DE:14:C6:A4:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/aa62e8f4-6631-3b88-b288-2e2678cb2a8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:fffe:e::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:23:e8:39:8b:bd:54:89:ed:2b:3d:49:7c:16:50:41:72:f0:
         23:cb:d2:c2:74:e0:f7:fa:65:bc:55:8a:34:a5:12:73:d6:44:
         d4:27:c8:6a:18:24:9a:a1:52:86:b0:34:aa:cd:c5:9c:ab:78:
         be:a7:59:36:2c:61:87:83:6a:09:3b:41:94:4c:3f:8d:38:f7:
         cf:e1:e1:fc:46:0b:37:af:59:3d:49:e6:fc:38:9c:eb:2d:a8:
         3b:f5:cd:a1:fe:29:cc:84:b8:72:39:b8:f0:95:52:48:3c:9c:
         e5:5b:ec:71:63:9f:90:0e:a2:09:18:55:02:bd:4a:b9:65:19:
         4b:56:88:27:f4:f0:36:da:ce:d3:d6:b1:ea:e6:45:40:d1:86:
         1a:3f:f3:66:99:fa:3f:55:21:79:c8:08:1f:02:0c:8c:2a:f5:
         ff:f6:fd:c2:42:c8:ab:45:ef:03:62:35:26:41:40:cb:f7:0c:
         c2:f8:4e:7e:6c:58:25:1b:80:f2:de:03:47:b2:77:04:70:83:
         9c:d9:59:0d:37:ea:4c:4c:e3:85:4e:e6:04:e9:92:db:9a:0a:
         82:7b:a9:06:84:e3:78:c4:39:f1:e2:f0:83:c4:9b:1a:93:7d:
         00:75:d6:b3:fd:78:41:1b:bf:36:f0:81:d3:98:17:2f:10:91:
         ab:7b:d6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 03:43:27 2026 by rpki-client