Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6521df86-70b2-3373-af7a-cfc3f4480536.roa
File:                     6521df86-70b2-3373-af7a-cfc3f4480536.roa (raw, json)
Hash identifier:          JyIcx3sZb6Y3cMcelM1tw2Fy3LhE32eICQRCFgM2uGI=
Subject key identifier:   7B:2A:AF:9C:E9:DB:DC:F0:9A:10:24:5B:0B:B3:75:83:F8:AD:5A:A3
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D83CAB12CC95BA506C0065C00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6521df86-70b2-3373-af7a-cfc3f4480536.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     13555
IP address blocks:        199.127.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:b1:2c:c9:5b:a5:06:c0:06:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=16444080-98c7-40bc-8d8c-b36e95754dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b5:1d:0e:fb:97:b0:ae:f0:71:6b:96:93:04:
                    f3:fa:8c:78:8a:6c:84:16:77:80:41:5b:f7:7f:5d:
                    d0:f8:b9:f9:4a:15:ea:11:66:df:69:10:b4:64:cb:
                    8a:36:76:56:94:2d:de:7c:70:cf:9c:81:57:ef:8f:
                    ca:32:75:a0:dc:3b:fc:be:25:66:b9:10:57:9c:6a:
                    b2:b7:74:05:d1:72:a0:b5:8a:cb:5a:c3:6e:eb:1a:
                    bf:cb:ab:12:db:b0:12:ff:c8:98:86:7d:87:c5:00:
                    9c:26:6a:3b:8c:65:80:95:01:35:9c:85:94:a4:44:
                    34:de:f1:8c:c8:81:5f:d2:b6:2b:fb:d9:e6:e6:7e:
                    3e:5e:34:0c:bc:f5:0a:2d:09:02:aa:29:21:a3:23:
                    16:62:98:ea:e7:fb:57:b5:a4:fd:fd:e8:3d:fa:9d:
                    8e:f9:94:fa:6b:e3:49:97:fc:d4:e4:c1:ff:69:b2:
                    91:a5:35:3f:20:76:66:2b:89:69:ab:7e:c4:1a:c3:
                    8f:ae:c2:d6:69:2b:a2:fc:9a:19:84:69:e5:70:48:
                    7c:08:36:d8:a6:d6:80:83:95:ec:3e:bc:df:02:0a:
                    3a:c7:eb:25:69:d1:d2:47:26:cc:55:3c:39:c1:ab:
                    7b:3e:4d:80:cc:5c:6e:93:18:2a:a3:48:c3:2b:cc:
                    53:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2A:AF:9C:E9:DB:DC:F0:9A:10:24:5B:0B:B3:75:83:F8:AD:5A:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6521df86-70b2-3373-af7a-cfc3f4480536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:c7:e2:13:c9:07:cb:a5:37:15:71:53:2d:41:87:e1:78:39:
         55:e1:0b:4d:e7:d8:a4:25:59:bd:88:08:b3:da:ed:a1:72:9d:
         5c:11:7e:57:32:7c:02:eb:c2:ed:6e:92:01:8a:36:34:ad:f0:
         2e:a5:2d:7e:48:0d:df:83:d1:ba:00:36:82:13:fd:62:dc:6a:
         66:8f:27:e7:e8:cb:e0:f0:8b:16:d5:e9:f8:7f:2a:a4:95:8b:
         f0:9c:9b:66:78:ba:20:3f:b7:2a:5d:3a:0b:dc:98:64:cb:96:
         30:ce:21:a7:e7:ed:59:e5:d7:34:8a:3a:c7:bc:ce:8f:cd:eb:
         a0:83:a9:a8:f7:28:43:04:c8:7b:42:7b:f7:cb:b8:90:40:cd:
         c2:64:cd:24:be:7d:68:1d:40:c5:67:75:14:09:d5:29:ca:63:
         26:04:45:16:80:d2:1e:90:09:18:77:82:3f:ac:42:bc:20:22:
         04:70:de:71:3d:20:d1:08:14:d8:74:6d:70:f1:c7:af:7c:1a:
         86:cf:61:0e:af:16:0a:c3:77:44:0e:53:33:14:ec:4b:66:48:
         08:85:7e:61:da:47:00:d8:5f:a6:b3:4d:ba:fe:49:c0:3d:67:
         ab:c4:83:c1:5e:4a:b2:89:ad:de:92:f2:5f:44:8d:a4:35:4c:
         b3:50:1b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:02:45 2026 by rpki-client