Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/06122b52-2422-3313-a219-372b4e1977a0.roa
File:                     06122b52-2422-3313-a219-372b4e1977a0.roa (raw, json)
Hash identifier:          rLlBSd+UlixGlDZ9z249W3frootZvqqgs9dUWyrQh1M=
Subject key identifier:   DF:76:DD:D3:56:C1:0D:7C:3F:56:C8:C6:59:2A:9C:31:E2:07:20:E5
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C639C46B8638B48FF7880
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/06122b52-2422-3313-a219-372b4e1977a0.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     21774
IP address blocks:        159.18.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:63:9c:46:b8:63:8b:48:ff:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=dacedd01-8d91-4d7d-a0ba-502d54ceb090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:45:57:dd:e7:1e:ef:ba:16:25:c8:53:c8:15:
                    35:c5:89:76:db:e5:39:3c:e2:85:e2:00:55:aa:50:
                    53:e0:72:9c:d3:32:0a:c2:52:06:a1:74:4b:8e:15:
                    c9:c3:d5:37:18:0b:6b:d1:8a:0b:fc:1d:38:b8:55:
                    9c:63:ea:19:e7:29:bb:f3:57:75:26:36:15:99:33:
                    22:54:51:4e:f9:e4:35:7a:67:eb:8f:91:b2:b7:a1:
                    d8:31:64:84:45:47:36:59:0e:c0:fb:28:c4:53:04:
                    ed:3c:ac:a0:0b:51:56:63:83:7b:37:da:48:bf:a8:
                    ed:31:25:4b:cc:d5:bb:38:b5:b3:78:39:97:b6:0d:
                    a2:11:0d:26:8d:cf:d3:5b:a0:b7:aa:71:86:e4:12:
                    dd:60:5d:3e:cd:59:79:60:47:a8:97:c5:ce:7f:23:
                    28:31:7a:9c:e5:a0:6d:53:68:30:2d:7c:03:7a:42:
                    20:40:2d:a6:58:99:b9:71:71:51:67:1f:e5:88:9f:
                    fe:76:84:6e:db:16:7b:e3:19:77:7d:62:59:02:4c:
                    67:58:e4:bb:57:89:0f:02:01:df:c9:8d:25:d1:68:
                    ba:87:cc:67:6c:38:b9:d1:ea:c2:87:f1:c3:98:b3:
                    18:04:e3:5f:38:77:cd:a4:25:ad:a7:7f:b1:4e:93:
                    b9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:76:DD:D3:56:C1:0D:7C:3F:56:C8:C6:59:2A:9C:31:E2:07:20:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/06122b52-2422-3313-a219-372b4e1977a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:c5:e7:b4:4c:11:b2:a2:89:45:d1:49:56:17:17:bf:32:c3:
         66:a3:c2:7d:bc:b1:33:7a:60:86:12:2f:4e:0a:30:b2:73:81:
         31:71:b2:57:12:c1:d3:95:d3:42:6e:71:7b:c5:0a:f5:87:ae:
         16:87:3c:c3:30:2f:2f:14:d3:cb:cf:55:71:ec:7e:11:5a:41:
         0d:31:ac:e7:64:59:63:14:0e:c4:89:e6:dc:53:38:ef:13:fb:
         ac:52:1d:87:d9:85:74:68:8c:7a:69:2e:a6:29:ad:84:77:9e:
         88:f3:d3:93:13:73:78:e7:34:8a:b2:f5:46:36:79:1d:89:07:
         02:6a:bb:39:81:9b:1e:e5:2f:ee:20:65:a1:b7:f6:e7:78:36:
         18:b0:bb:2e:ec:8e:39:fb:c1:44:9d:62:25:81:10:70:40:7d:
         93:07:b4:81:31:4f:e0:01:62:cf:a0:ef:58:c3:e8:b5:35:a2:
         70:f8:41:b7:77:cd:96:5f:7e:b7:c2:c1:35:80:b1:87:02:e4:
         6d:e9:0f:43:af:2f:00:c5:84:92:e5:8e:ee:00:d8:2c:c0:d5:
         96:24:b2:96:bb:0a:df:b3:72:d6:cd:75:29:dd:e2:fc:dd:57:
         70:09:f9:32:19:dd:9e:bb:84:54:71:41:29:b1:29:31:cc:2f:
         75:ee:88:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:54:58 2025 by rpki-client