Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/aa62e8f4-6631-3b88-b288-2e2678cb2a8e.roa
File:                     aa62e8f4-6631-3b88-b288-2e2678cb2a8e.roa (raw, json)
Hash identifier:          N0aM673VuWxEZX7bx+huXsxwmTspTx9kYYu2MYJzYx4=
Subject key identifier:   D7:13:C4:51:4E:9E:31:AE:A1:7D:DC:5C:FC:D4:97:83:FA:3D:08:79
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584E15E46FCE5DD845861B969F00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/aa62e8f4-6631-3b88-b288-2e2678cb2a8e.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     400040
IP address blocks:        2001:438:fffe:e::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:6f:ce:5d:d8:45:86:1b:96:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=75291d04-3725-481c-b258-2bbce221c628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:72:0d:23:58:25:a5:61:5c:2f:bb:8c:97:30:
                    1a:c4:38:d8:28:c8:71:68:3e:a2:b6:78:39:ac:27:
                    ce:d4:1f:87:ab:c3:53:33:70:f2:b7:55:c2:3e:55:
                    f6:27:c4:62:be:3d:88:a6:2b:a3:47:13:85:11:2e:
                    e4:27:61:82:84:c5:be:05:56:27:12:4a:ce:b8:14:
                    cb:9f:da:84:14:f1:2f:e2:41:60:43:59:3f:93:db:
                    3a:07:97:d9:a6:c6:b1:6d:a6:5e:98:6f:d2:33:8a:
                    ec:11:90:29:b7:9b:4f:14:b1:d6:df:32:dd:4d:35:
                    a9:56:9c:42:b6:8a:8d:82:34:43:8d:c8:d9:e5:29:
                    9d:bb:ea:08:43:a7:ed:71:dd:10:42:ef:ef:61:78:
                    9d:33:62:41:9a:18:c2:38:68:7a:8c:06:7b:6e:f2:
                    2c:f4:34:31:c0:f9:b8:0c:b0:9d:6a:85:26:46:37:
                    95:e7:09:e0:e2:e5:b5:d8:3d:72:f5:af:9b:40:9a:
                    3d:dd:bb:e2:7b:fb:99:32:e2:b9:8a:36:3c:e6:e4:
                    dd:b8:7c:d6:04:e9:0f:8f:b7:dd:d4:ae:11:ab:a6:
                    78:89:32:cf:fd:ed:a9:8d:48:7b:81:1e:db:49:0b:
                    2e:39:48:8b:22:b2:f0:31:2c:6f:1a:71:de:cc:0f:
                    d9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:13:C4:51:4E:9E:31:AE:A1:7D:DC:5C:FC:D4:97:83:FA:3D:08:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/aa62e8f4-6631-3b88-b288-2e2678cb2a8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:fffe:e::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:97:c7:e0:71:ec:e8:c9:ff:41:a5:ff:25:c6:84:dd:6a:b9:
         65:f4:66:95:13:fc:2d:d7:76:fe:bd:da:f4:5b:52:c6:ae:a5:
         a2:58:f1:f3:b0:09:4b:6a:85:34:de:fe:97:e1:9f:4c:11:95:
         dc:de:0f:9c:fc:99:d3:d8:1c:81:da:cb:45:08:31:62:60:2e:
         05:9b:6c:37:9a:55:da:94:1c:e6:e6:ef:a6:9b:fa:fd:74:a1:
         cf:38:ab:5d:b6:0e:0e:45:31:9a:dd:9b:40:2e:d7:68:b4:d5:
         a0:05:bf:d8:d3:07:d1:93:dc:89:f2:21:40:d0:74:2a:cf:02:
         1a:f0:b2:59:ce:e7:05:f7:3f:e8:6f:b5:5c:f0:e0:d2:3d:7f:
         cd:e1:14:9d:82:99:f9:5d:e5:af:a6:42:7a:8f:81:80:a3:77:
         0a:a2:70:3c:46:8a:50:2b:10:2c:54:36:fa:76:2b:97:fc:0a:
         28:af:ed:bb:12:5f:47:17:1c:69:42:af:0a:74:8b:7c:20:cc:
         48:07:cc:f2:79:ec:17:09:b8:5d:2e:5c:ab:05:81:a1:21:66:
         16:72:dc:78:8b:d5:7e:a4:c4:7f:8d:9c:96:2d:0a:9f:3b:38:
         12:3b:c3:ef:20:d0:46:7a:35:dc:1e:0c:a3:ab:5f:47:d3:db:
         8c:a6:03:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:34:50 2026 by rpki-client