Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ae32cad5-eacf-3e7a-bd49-e5b92b2b74d0.roa
File:                     ae32cad5-eacf-3e7a-bd49-e5b92b2b74d0.roa (raw, json)
Hash identifier:          ekmIPqybV6K6dmYUrn2TBISFFv0QKK0B72y3CyJmRFY=
Subject key identifier:   B8:97:DE:A4:A0:E6:52:1A:1C:4E:EB:79:5B:DC:3D:A3:12:1C:F9:58
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584F49741E3D900AD3599C8CD480
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ae32cad5-eacf-3e7a-bd49-e5b92b2b74d0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15290
IP address blocks:        2001:4c8:1099::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:1e:3d:90:0a:d3:59:9c:8c:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c93a75b8-0267-4567-9927-5d1befb679ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6e:0d:8e:97:f0:48:16:97:a0:ea:a9:66:2b:
                    60:e5:c2:2d:ac:32:91:d6:57:f5:d6:60:e5:92:d6:
                    70:21:f2:3c:4c:77:40:10:ed:07:2d:8c:0c:92:32:
                    e4:2e:e3:00:fb:0e:78:59:78:1f:9e:42:be:56:81:
                    10:84:2a:68:69:fc:43:b3:6d:86:61:93:c0:bc:2f:
                    8d:e8:c9:49:63:a9:9a:da:94:f9:c9:8a:36:2a:24:
                    32:d3:e4:0b:04:95:b0:d2:c7:80:51:6c:d7:d5:45:
                    67:17:8c:96:86:5c:35:7e:d4:12:09:dc:77:57:00:
                    0c:54:e0:27:62:b2:fc:19:f4:72:15:27:bc:81:20:
                    82:c5:d3:c5:99:6f:05:b9:2a:66:11:96:2c:a0:be:
                    c8:94:04:ef:36:28:8a:1f:5e:2b:91:4e:e2:ed:f0:
                    30:32:50:74:4d:5d:22:25:e9:18:15:d9:e4:2e:65:
                    22:2c:fd:b1:93:72:7b:78:96:fd:c1:d3:b3:8c:a0:
                    3e:63:ce:85:ab:92:17:5c:b7:87:85:87:a1:ed:17:
                    86:cd:9f:89:33:2e:6f:3c:73:f1:e5:db:9e:95:0f:
                    b4:28:cb:0f:14:41:fc:f7:cf:ac:45:1e:f8:6e:aa:
                    43:18:43:b1:f2:64:ea:68:19:e2:06:27:41:ad:9b:
                    34:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:97:DE:A4:A0:E6:52:1A:1C:4E:EB:79:5B:DC:3D:A3:12:1C:F9:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ae32cad5-eacf-3e7a-bd49-e5b92b2b74d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1099::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:7d:4e:ed:41:f1:02:d8:41:a0:20:58:a5:8c:2a:80:46:3d:
         01:04:35:cc:18:81:39:51:6c:8f:bf:da:51:1a:64:4a:8d:0c:
         59:5d:9f:42:ba:73:b7:4b:a2:ea:cd:57:df:67:1b:7a:bf:a6:
         08:5e:a7:88:84:ee:53:58:fa:f9:90:32:41:d9:34:fa:4b:b9:
         89:3d:93:5f:ba:31:39:31:df:9b:10:58:07:e0:7a:1d:9d:c0:
         55:9e:3e:9c:90:b6:71:17:f4:77:24:0e:c1:a0:e0:71:6f:bb:
         34:5b:5d:64:bd:4b:22:60:63:73:5d:43:93:cb:3d:fb:d9:54:
         6d:da:7c:3d:fe:3a:ee:94:dd:8e:be:96:f5:cc:7a:7d:67:2d:
         a3:e0:1c:c0:c8:21:34:17:72:51:73:d9:d0:38:02:be:06:75:
         9c:df:58:98:ec:1e:2f:a1:13:2a:45:5d:42:ea:d9:e6:09:03:
         15:b0:e8:24:57:a5:30:ee:51:a7:4a:55:d1:b7:28:f7:04:4d:
         dd:6e:34:6f:19:0a:da:1a:be:4c:41:01:6c:91:ba:c4:ff:23:
         a4:a8:6b:6a:cb:c5:7c:aa:a2:36:17:74:8c:88:2e:06:a4:5b:
         61:3c:d2:d9:ca:f5:10:57:a0:23:77:af:83:8a:d0:00:26:7a:
         c8:9d:dd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 02:49:39 2026 by rpki-client