Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bd05d0cb-4b97-32f2-8bce-83ecff3c0ddb.roa
File:                     bd05d0cb-4b97-32f2-8bce-83ecff3c0ddb.roa (raw, json)
Hash identifier:          n1Ue0O/EyS4jK6kOXkW2RMnuZ/OOMVgXEST9P0BLO68=
Subject key identifier:   44:85:80:98:F8:68:3D:1D:BB:72:38:DC:A3:E0:7C:B2:72:3A:C7:96
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D5243510823212E2A1FA5F400
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bd05d0cb-4b97-32f2-8bce-83ecff3c0ddb.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     53802
IP address blocks:        64.125.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:51:08:23:21:2e:2a:1f:a5:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=5fe0e0a6-c75e-4cf4-b181-0c973bfbb2df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8b:b1:e9:cb:4d:53:76:ed:ed:5f:7c:3b:d5:
                    b8:b9:ab:86:b7:2d:e7:4a:21:a5:37:f3:9c:a0:75:
                    a5:af:61:92:95:12:79:03:cc:ed:a5:ef:9f:a4:38:
                    db:fe:48:41:46:12:af:63:9a:8a:b6:15:08:c1:25:
                    12:b8:56:50:30:37:dc:b3:a1:f1:4c:8c:f8:d4:32:
                    58:82:4a:fc:75:9e:f8:81:d2:ab:c1:2c:42:4f:94:
                    e0:5c:70:70:17:7d:93:2f:d9:1f:8a:96:9d:a5:70:
                    b1:f5:30:71:a6:6c:36:d1:ac:8b:a1:bc:47:b1:d9:
                    ae:81:0d:e1:27:ba:4f:37:af:0a:61:58:b9:f5:20:
                    df:9f:d2:d1:59:1b:e9:98:39:34:09:30:d9:fa:10:
                    d5:ec:70:b6:07:39:7a:88:d8:d4:fb:f4:8d:2c:0e:
                    2c:24:bc:24:b9:b8:44:b6:b3:56:1e:ec:51:99:b6:
                    80:a6:15:45:f1:cf:82:c5:b9:d5:d4:46:c8:a8:ed:
                    9f:68:2a:0e:b6:70:7e:b0:d8:b0:03:14:50:ae:a9:
                    e5:f0:f6:03:fb:06:d5:21:59:bc:0c:d7:0a:6b:3a:
                    c3:6a:01:78:4f:a3:43:34:93:a7:cf:ef:a9:ec:da:
                    55:8b:1c:82:bd:df:53:2c:94:c4:88:e0:54:1d:b1:
                    c8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:85:80:98:F8:68:3D:1D:BB:72:38:DC:A3:E0:7C:B2:72:3A:C7:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bd05d0cb-4b97-32f2-8bce-83ecff3c0ddb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:02:d6:a9:0f:e2:14:55:f5:20:10:07:98:2b:8a:1c:47:04:
         46:5c:8f:32:e5:cb:f2:86:f4:99:46:e2:1a:e5:f2:26:00:8c:
         52:05:c4:ea:8c:89:d7:b3:23:2d:14:70:4b:75:6f:8a:e6:79:
         dd:8d:c4:c4:62:d8:e9:43:93:86:3e:bd:d1:03:c8:f8:85:80:
         22:c3:7a:52:ea:ac:36:47:bd:58:27:6c:84:1f:e2:0d:f8:82:
         11:fc:05:00:a4:fb:96:a4:af:41:88:c2:88:d9:1a:bd:bb:66:
         70:00:8b:87:06:fd:f9:d9:cd:dd:b7:26:b9:e3:7a:23:94:41:
         31:15:d7:fb:48:83:6d:8b:d5:a1:3b:42:39:33:9f:b5:ef:f7:
         b1:d4:ab:d6:3c:44:3b:45:eb:01:74:02:7c:17:96:a4:ca:c0:
         c1:73:05:e4:2b:d1:c9:f1:91:d0:18:5a:7a:cb:1c:51:58:61:
         80:64:0f:5c:1b:a5:d1:f7:d5:1f:a2:e8:dc:18:58:4d:9f:ea:
         6e:28:23:ca:ca:2b:fb:e2:10:e3:51:88:92:7f:7d:53:98:14:
         a6:58:18:61:f1:bb:a7:9b:53:fc:7e:7b:b7:6c:e4:a9:8a:78:
         91:3f:fd:99:55:c1:c1:bf:d1:8b:11:f4:33:d9:f5:b3:ce:29:
         e7:6a:c4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 14:20:31 2026 by rpki-client