Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d8f8a420-7d26-33a5-bf09-7a55e511b6cd.roa
File:                     d8f8a420-7d26-33a5-bf09-7a55e511b6cd.roa (raw, json)
Hash identifier:          h4Q9OPAZcwKeEYob3X94OdZQj9gF8YfmAVnO8AeryCE=
Subject key identifier:   D3:C3:4C:03:DF:13:8B:A7:BC:BA:8D:A0:20:95:3F:61:5B:31:CC:63
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584EDC91FF8FE0F2C41E810DDCE0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d8f8a420-7d26-33a5-bf09-7a55e511b6cd.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     46667
IP address blocks:        128.177.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:ff:8f:e0:f2:c4:1e:81:0d:dc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=3f9f0f7d-f65a-4e00-acc1-8ec45b4ab408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:69:61:58:df:f6:43:86:62:1e:13:7a:21:4c:
                    f2:ca:69:14:8b:90:1d:20:cc:78:07:fc:65:3c:f3:
                    7a:9f:74:eb:44:33:e5:96:6d:68:1a:3b:05:e8:c3:
                    53:e1:2a:30:bf:d6:6d:5b:6a:dd:90:4c:c3:71:13:
                    19:13:d8:da:39:e0:10:1e:be:37:4c:ec:c1:87:8d:
                    8f:20:d0:cd:6d:65:e4:18:86:7d:6f:8d:de:08:31:
                    3c:e7:91:16:46:e1:d7:ed:c5:22:18:01:fb:c1:62:
                    b1:d6:5e:9c:62:85:b2:ee:04:39:b7:f8:65:53:20:
                    bd:fb:0c:93:55:13:17:b3:60:f5:9f:80:16:d7:6c:
                    df:b0:fe:03:0d:52:f4:f5:cb:d2:f3:b8:50:e0:3a:
                    6c:ad:bf:66:cf:0f:64:3f:35:b2:2c:80:d5:27:35:
                    9e:08:fd:32:38:07:8c:0b:c3:09:a3:94:e7:29:62:
                    cb:c4:a0:21:cd:86:3b:bb:2c:40:a5:9a:67:c0:e3:
                    e9:df:fb:0b:da:c9:f4:a1:27:12:86:6a:93:ef:eb:
                    cf:64:8c:90:ed:42:65:82:94:e4:2d:55:f4:77:c3:
                    a7:a2:38:a1:84:95:21:96:a4:de:43:22:e2:33:21:
                    21:08:b9:cc:e9:4e:3c:bd:5b:c8:77:b2:a3:9e:2e:
                    e6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C3:4C:03:DF:13:8B:A7:BC:BA:8D:A0:20:95:3F:61:5B:31:CC:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d8f8a420-7d26-33a5-bf09-7a55e511b6cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:81:df:77:c9:43:22:23:c9:89:dc:e6:49:b0:b5:61:85:be:
         a6:93:c6:32:72:54:2c:da:1f:2e:72:f3:85:b0:f3:5e:c6:9d:
         ef:dc:fd:6a:bd:9e:16:b9:7f:13:a8:b4:57:33:f1:12:4d:0c:
         e1:8a:de:de:23:1d:92:36:dc:48:64:41:d7:63:a2:40:66:61:
         b5:0c:5a:40:a8:50:d5:0d:3c:d4:4c:a0:f1:a1:16:ec:be:44:
         50:69:0b:df:4a:0c:b5:76:55:28:8f:7c:73:4c:88:6e:cc:c6:
         69:69:14:ba:dc:c2:08:89:6e:d1:0c:96:d0:fb:ee:23:e0:01:
         d0:36:6e:6f:02:a7:53:69:0a:83:ad:68:58:85:0a:4f:27:ed:
         a3:37:24:41:62:4b:5b:63:e3:65:97:97:3f:81:6e:a0:b8:40:
         87:4e:90:12:2e:e8:45:7b:64:b0:58:d1:03:a9:78:cb:f6:6a:
         6b:8c:93:f6:e3:d8:60:bb:6c:69:91:12:90:86:eb:c8:e8:b5:
         83:b2:8d:59:08:d8:ec:95:e2:13:8d:91:18:fe:3b:62:b3:a2:
         07:23:b9:48:fb:93:cf:3e:b4:be:64:72:7d:63:9d:82:20:93:
         41:8f:a1:36:54:6e:fb:8d:4b:27:91:d0:88:4f:b6:7e:cb:7d:
         0a:95:c7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:15:25 2026 by rpki-client