Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/88e01983-96ad-3b8a-bd0d-5ee4495691f7.roa
File:                     88e01983-96ad-3b8a-bd0d-5ee4495691f7.roa (raw, json)
Hash identifier:          j3P2F3vOaVf7YLmXrjPqyCvkjBkkZS0iLv46NYaCU5c=
Subject key identifier:   09:1F:76:1E:30:DA:DD:6C:D7:2D:ED:F9:27:0C:8F:00:F8:C9:89:60
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D5E1A74F232F7D54A18607140
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/88e01983-96ad-3b8a-bd0d-5ee4495691f7.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     6461
IP address blocks:        2001:438::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:74:f2:32:f7:d5:4a:18:60:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=7e6246db-6cad-4cb3-91cb-95eb59d7eb7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:53:33:ac:02:22:73:27:ad:db:22:c0:4e:d0:
                    1b:c5:20:43:cc:1e:61:be:c4:1e:af:d3:5e:26:56:
                    91:b3:97:96:38:ec:5b:b2:2f:bb:2a:26:e0:9a:be:
                    5f:58:33:f2:b9:64:57:b1:c6:44:41:67:8a:05:8a:
                    3f:3d:b0:04:41:9e:e7:00:93:99:af:f4:ba:75:69:
                    f5:bc:04:15:e7:1d:a8:d6:2b:16:a0:74:63:f2:34:
                    05:15:15:1a:ef:d8:c4:9f:6d:df:ef:de:22:f7:31:
                    a6:bf:1f:d8:7d:09:cc:b0:60:be:f4:b7:2a:32:06:
                    63:26:a0:6c:62:04:c9:88:f3:c0:73:80:eb:48:f9:
                    8e:fd:63:13:44:59:66:50:8f:fd:96:96:77:47:d4:
                    e4:cc:46:5b:9e:e7:7b:ae:2a:71:82:bb:a1:95:64:
                    cc:07:84:5e:1b:c0:b5:dd:c5:91:02:4c:30:7d:1e:
                    bb:df:61:c5:22:13:5c:34:6f:14:af:71:3c:41:b7:
                    58:df:40:7c:d8:85:3b:ad:6a:b0:a1:96:45:07:0f:
                    ee:a1:e3:7a:be:4f:25:0b:2d:e4:03:70:49:3d:24:
                    9a:e2:1c:66:30:10:4a:bc:71:f7:60:63:c6:f1:29:
                    e9:9c:02:c4:b7:03:28:1c:85:27:12:21:77:04:b2:
                    70:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1F:76:1E:30:DA:DD:6C:D7:2D:ED:F9:27:0C:8F:00:F8:C9:89:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/88e01983-96ad-3b8a-bd0d-5ee4495691f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:32:77:f8:61:e3:5a:15:5b:a4:16:3a:bc:ae:6c:d8:d8:c3:
         64:be:27:dd:d4:8a:4d:a4:46:47:94:e9:9b:ae:72:da:d2:fc:
         ea:92:6a:86:08:21:09:51:b5:f0:60:e5:5e:ba:cc:45:42:d1:
         4d:22:f4:5c:d7:2b:9e:92:c2:fa:33:5f:a7:f6:9e:f8:48:b2:
         41:6b:89:f1:48:0b:ae:da:a5:cc:14:13:fe:24:c9:70:05:54:
         1e:9e:f9:35:4e:6b:75:b4:71:21:2e:42:85:59:27:7a:d9:61:
         0e:6c:72:56:82:2e:2b:bc:e1:ab:29:29:28:a4:4d:37:70:06:
         a8:52:de:8a:06:5d:d0:f1:87:ee:c0:05:8a:86:e3:18:3e:04:
         3c:23:b3:fb:00:77:a6:dc:d6:25:1f:26:cd:eb:bf:9e:32:26:
         14:c1:b4:cd:92:37:05:6e:05:5f:11:70:2d:46:c7:51:2d:e2:
         76:71:9e:1c:cb:03:e5:49:c5:52:83:4b:9a:e0:a8:3f:76:bc:
         67:48:a2:d6:de:2e:2b:20:6e:88:88:e7:3d:97:13:54:09:ad:
         5d:a3:6e:9b:b6:2f:2c:4f:e3:9b:65:b9:c1:51:20:e7:ad:67:
         ae:25:12:2c:2a:20:44:90:e9:5e:62:1f:9f:25:9e:c7:1d:17:
         b4:c0:de:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:39 2026 by rpki-client