Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/692b11be-840e-37ce-a9b0-cceec6364e9d.roa
File:                     692b11be-840e-37ce-a9b0-cceec6364e9d.roa (raw, json)
Hash identifier:          h8ISMRl8/b8jIs5OvuJ+sL7B+U0RD2E0FMlA6Gzpf9E=
Subject key identifier:   99:33:5C:4F:B5:E9:7E:07:6A:1E:C0:76:B2:F2:6A:C9:50:08:56:A9
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584C9ACC49D4F9A4CA3502198A80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/692b11be-840e-37ce-a9b0-cceec6364e9d.roa
Signing time:             Thu 22 Jan 2026 02:00:31 +0000
ROA not before:           Thu 22 Jan 2026 02:00:31 +0000
ROA not after:            Wed 22 Apr 2026 01:00:31 +0000
asID:                     19092
IP address blocks:        66.62.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9a:cc:49:d4:f9:a4:ca:35:02:19:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jan 22 02:00:31 2026 GMT
            Not After : Apr 22 01:00:31 2026 GMT
        Subject: CN=7d96fb10-903e-447c-935e-ff2a79f206e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:bb:d6:ee:f9:a8:6e:65:66:ae:43:9e:20:
                    d1:55:62:6f:54:ce:12:f3:13:20:3b:0f:0c:bd:9c:
                    4a:a2:e1:0c:08:dc:65:46:69:b4:d8:90:d5:7a:e8:
                    c4:cd:5c:8b:d2:08:37:ee:92:19:70:13:ba:f7:70:
                    f4:2a:b4:ca:71:c7:a5:0f:e3:8b:f9:59:4e:f0:2c:
                    31:80:16:dd:8c:6f:4e:12:3c:1f:04:4f:ca:c7:ae:
                    6a:1e:fd:8f:3c:69:7f:43:69:10:03:6d:ef:0d:75:
                    f3:27:ac:89:8e:b9:b5:aa:2b:1b:b1:fe:a3:df:d8:
                    13:47:61:c1:a1:e7:c9:c2:65:b9:88:76:4d:80:52:
                    82:20:15:b0:8f:23:63:7d:ae:83:06:a0:a3:ac:ed:
                    e7:88:ac:91:0b:37:6b:1d:7f:6a:51:3d:8a:5c:8e:
                    f9:82:ac:87:5c:a6:31:45:a5:ee:b8:f2:ab:ac:22:
                    1c:4b:5b:f4:c7:74:9a:da:6b:fb:a3:66:d0:b8:31:
                    c2:23:10:c4:8f:8e:0f:c1:a0:fe:df:11:92:ef:ff:
                    b7:00:c9:17:8a:ad:71:28:3e:94:87:48:4d:93:14:
                    2d:60:67:fc:e0:19:32:da:22:65:02:2e:e8:ec:da:
                    fe:e1:f1:5a:ba:84:65:1a:7e:78:45:ed:19:a4:9d:
                    35:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:33:5C:4F:B5:E9:7E:07:6A:1E:C0:76:B2:F2:6A:C9:50:08:56:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/692b11be-840e-37ce-a9b0-cceec6364e9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:92:57:72:9a:79:cc:9c:87:34:d3:a2:58:a8:b9:c7:35:5c:
         89:a7:91:4e:3f:94:81:1a:16:0e:e3:cb:90:ff:b6:9b:a7:20:
         5d:0a:3a:e8:74:8b:ee:73:4b:a8:4c:e4:33:fa:88:da:53:46:
         47:e1:28:9e:93:58:08:85:51:27:3f:90:70:3c:93:ef:8b:21:
         4e:f5:64:a8:b7:f9:b0:04:f2:49:25:41:9a:30:8b:c4:f1:0f:
         5b:c9:ec:60:ef:0b:db:db:5a:21:5b:c7:34:1c:7c:01:b5:3d:
         74:62:9b:41:0c:2d:7a:d9:7d:6a:9d:60:22:9d:fc:4b:29:8d:
         25:d5:e4:18:fb:06:73:f4:fc:9c:a1:f7:9c:42:e6:79:ea:64:
         c4:08:bc:bb:9a:2a:9c:82:15:aa:62:bd:e4:8a:12:0d:e2:4f:
         3c:a0:91:e7:84:02:da:1d:49:6f:5e:68:9c:37:bc:28:25:97:
         09:ab:91:73:6b:28:c8:ad:6f:3b:2f:39:a5:ca:58:05:0e:8b:
         b1:4a:4e:48:04:2b:e3:f8:ca:38:1f:a1:05:02:0e:7e:19:48:
         e4:76:1f:a9:a6:4d:c1:aa:cd:4f:e4:6b:1e:f0:0b:28:7b:12:
         c2:f2:b0:3b:a7:40:5a:ed:55:09:85:8e:77:26:38:e3:b0:76:
         f9:c0:b2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:09 2026 by rpki-client