Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bd1821ad-fd61-3aa3-b769-229cd8f71c9f.roa
File:                     bd1821ad-fd61-3aa3-b769-229cd8f71c9f.roa (raw, json)
Hash identifier:          VtS6LbnXuvvF/hD27idu3kM2mFULSyHaBlPKNqfVsuI=
Subject key identifier:   E1:EC:14:BF:5F:C2:99:5A:EF:BC:84:06:F7:97:7F:84:53:78:25:14
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584DCAFAF41528394902F86BAB80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bd1821ad-fd61-3aa3-b769-229cd8f71c9f.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     15290
IP address blocks:        2001:4c8:101f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:f4:15:28:39:49:02:f8:6b:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=8533318c-72d3-4d8e-8513-44399422ffeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:64:89:5f:09:0a:b8:1e:41:7c:77:54:b0:b4:
                    a5:8b:8f:d1:85:3f:11:cf:06:b2:93:37:44:2c:f4:
                    d1:39:71:7f:4e:58:a4:91:e4:51:b2:fc:e4:19:87:
                    a8:d5:b8:4e:a7:a3:c9:bd:f1:b4:a7:61:23:db:62:
                    0b:e2:10:c1:55:77:ca:77:0d:37:12:45:6a:07:f7:
                    68:21:ae:0e:6a:ef:83:81:c7:22:e1:aa:68:1d:c5:
                    77:3c:8c:f1:9a:4a:c5:65:e4:70:8d:55:ae:5c:f0:
                    44:4d:22:4b:2d:65:20:89:31:19:64:12:e4:2e:e9:
                    f5:b2:09:b4:1e:99:a9:da:f6:bb:d9:96:f0:e2:81:
                    a5:cd:9c:9b:3d:c9:a4:99:1c:cc:20:6f:98:72:a7:
                    11:2f:7c:89:f3:57:0e:c9:7a:f1:05:28:11:38:60:
                    6e:45:04:59:0b:6f:6d:b3:cf:8f:73:e4:85:5e:8a:
                    ab:91:27:45:2b:5a:92:c7:f3:a1:4f:0f:56:0f:a1:
                    9a:62:3b:7d:15:c0:e7:06:83:f1:bc:02:53:be:2c:
                    65:ed:6f:fd:d3:d0:13:4b:03:ad:52:91:15:05:48:
                    89:8d:31:0a:56:1f:72:6e:93:b9:90:33:fd:1f:80:
                    91:c3:a7:85:e0:65:b0:7c:b2:d0:b6:26:bd:65:0e:
                    4c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EC:14:BF:5F:C2:99:5A:EF:BC:84:06:F7:97:7F:84:53:78:25:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bd1821ad-fd61-3aa3-b769-229cd8f71c9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:101f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:e0:33:13:08:1b:72:6e:c9:88:98:e5:7e:39:c2:d5:37:30:
         91:cd:da:1a:ed:05:15:7e:0f:a8:d6:b7:b1:4c:c6:51:59:e6:
         d1:70:c9:d0:30:75:aa:c6:54:1f:19:be:4e:a9:12:80:f7:b7:
         1b:85:04:e0:0b:c4:24:05:e3:22:f7:73:a7:c2:d6:b5:68:7e:
         45:36:17:5a:37:04:06:b8:31:fb:5f:7d:02:6f:0c:6e:96:bd:
         04:2d:e1:e0:f3:92:1c:98:f4:30:1d:c2:5a:14:e5:23:1f:a3:
         16:73:b7:66:9f:26:e8:0c:c0:8f:6d:1b:5f:7a:83:68:63:53:
         86:8b:95:93:30:28:e1:66:30:e5:ea:92:92:9b:aa:10:8d:cb:
         dd:af:7e:d8:86:9b:15:d2:31:6c:77:ce:50:3d:ff:1d:c9:88:
         9d:90:88:d6:d9:18:8f:bd:58:50:3f:20:15:fc:e7:c7:3e:cc:
         42:27:61:08:fa:8d:62:b6:86:ad:29:92:11:30:2e:ab:73:7e:
         4c:8a:2c:88:c7:14:e5:90:cf:8d:88:0c:2d:65:15:bf:2c:99:
         3b:b4:4a:27:b6:3d:5b:5f:c0:15:8b:85:9c:0a:69:fa:8a:dc:
         8d:56:a2:76:20:2e:83:d4:eb:32:96:40:18:26:f1:98:49:35:
         0c:52:98:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:25 2026 by rpki-client