Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/80032d82-d9a5-3bf7-86d2-8b9e5fecfb05.roa
File:                     80032d82-d9a5-3bf7-86d2-8b9e5fecfb05.roa (raw, json)
Hash identifier:          /FFVvcD+Q+s7pNiKIkReT9ARsCTekfpHdoAtL+8QPL4=
Subject key identifier:   28:9E:41:83:7F:05:CB:DB:6B:F8:11:3A:F9:69:FB:90:DD:8E:6F:55
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D59EA6780DDDEBB45F11B09C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/80032d82-d9a5-3bf7-86d2-8b9e5fecfb05.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     53533
IP address blocks:        128.177.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:67:80:dd:de:bb:45:f1:1b:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=3ffa2bf6-aa32-4e33-bbd8-3222cae5bd21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fe:92:d5:83:86:b9:5a:6d:a4:5f:d7:b9:ca:
                    7a:e4:ac:03:3a:aa:41:b5:22:40:db:21:c7:b9:ff:
                    64:84:04:c1:49:11:ec:08:d8:51:38:0d:fc:c8:04:
                    72:1f:c2:69:af:e8:f3:3d:03:00:42:0f:13:d4:ac:
                    1a:bc:2c:cd:65:9c:bd:7b:52:01:93:00:d2:bb:ce:
                    7f:65:36:26:40:c3:6f:46:d7:eb:37:06:f4:3c:d4:
                    58:a3:24:b6:87:1b:7f:b2:98:b9:85:e8:7f:99:17:
                    e0:83:06:05:55:b6:04:bd:95:b7:17:e9:b0:3d:af:
                    9b:32:67:f7:a9:73:43:56:b1:06:bb:85:ab:a3:50:
                    4a:59:2c:64:6b:32:0d:1a:5c:9d:84:e1:a7:30:55:
                    ef:06:28:5a:d4:66:fd:d2:90:90:10:10:d0:fc:b6:
                    b0:1c:fa:32:fa:f3:6c:13:d3:48:6d:d4:37:da:2e:
                    c9:91:17:01:33:3c:7e:2d:0e:16:39:8b:56:37:a6:
                    c1:7f:ed:1b:9b:43:11:35:0b:3c:24:59:14:66:e4:
                    e0:c3:e6:1e:e8:a7:d2:45:4c:ad:bb:b8:88:08:f9:
                    c4:15:e0:80:a8:12:ad:00:54:f1:6d:ca:79:ce:f9:
                    44:29:af:3c:f0:c0:fe:86:20:f4:58:57:1c:d4:70:
                    96:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9E:41:83:7F:05:CB:DB:6B:F8:11:3A:F9:69:FB:90:DD:8E:6F:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/80032d82-d9a5-3bf7-86d2-8b9e5fecfb05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:3a:18:ee:bb:cb:47:f1:76:d5:cb:91:02:e8:35:76:7e:ba:
         e6:5d:b3:7f:bf:e4:ef:76:d8:aa:83:18:cc:fc:8d:31:f0:c0:
         f3:e5:f4:17:1e:7a:f6:e3:ac:b9:80:5a:ba:61:8c:d3:c7:b5:
         cf:cb:da:88:26:86:cc:71:3a:24:3a:83:7a:ac:81:91:c3:ba:
         32:e9:3a:86:da:bf:50:77:21:ef:c0:ab:81:32:dc:c0:19:6a:
         4d:51:2a:82:5c:51:83:01:28:43:65:b9:f7:95:64:0b:e9:9c:
         c9:b7:dc:ef:0f:96:a0:54:20:2e:c2:33:0e:49:e1:87:81:00:
         82:ca:77:88:ad:91:74:b2:1c:c1:8e:09:e3:2e:1d:dc:44:08:
         48:76:4e:e1:17:8c:8d:6e:78:d1:0f:60:24:82:58:8d:94:dc:
         58:90:2e:39:ad:19:6c:4a:c0:f5:6d:fd:02:23:23:9d:12:c1:
         33:f6:3d:51:72:a2:54:16:d3:b7:9e:cf:ad:fd:93:a4:b7:1a:
         e1:54:c5:0c:12:bc:25:6a:7a:84:88:4e:35:20:78:b0:63:b7:
         01:48:cb:e2:90:be:66:f5:95:08:83:40:fc:fd:9b:8b:ff:35:
         ff:b6:8f:83:fb:6e:c5:e1:6d:86:2d:e5:4c:2e:20:40:d6:a8:
         e6:a0:32:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:24:13 2026 by rpki-client