Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/071d5488-c660-3886-a0c6-6dbdfae4d5ab.roa
File:                     071d5488-c660-3886-a0c6-6dbdfae4d5ab.roa (raw, json)
Hash identifier:          pQk2leQDknb06Uxdnh2MOGjPzYuZBLLLZsCO9tNSoG0=
Subject key identifier:   E2:BB:EA:4C:A6:99:E5:39:0D:5D:02:EF:F9:4E:30:76:53:69:2B:AD
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C61D8B19FD37920AB9500
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/071d5488-c660-3886-a0c6-6dbdfae4d5ab.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     15290
IP address blocks:        216.191.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:61:d8:b1:9f:d3:79:20:ab:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=3df7bde1-46b3-4db7-8c13-3754da7060df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b7:74:0a:ae:5c:48:7e:62:7e:b7:9a:93:6f:
                    46:78:a0:c4:5d:bd:c2:8e:66:13:fe:48:f2:1e:bf:
                    de:0a:bc:af:57:5d:20:51:55:97:92:17:76:02:bc:
                    43:8e:41:8c:2a:44:d1:1c:51:fc:6c:15:ba:bf:7c:
                    e3:c4:4a:ba:92:b9:7f:38:87:ad:23:c8:a3:3d:c2:
                    76:e7:7f:b8:a7:4b:fc:f7:22:6d:7a:57:48:a4:9a:
                    f8:89:cf:f9:0f:50:43:77:38:f6:5c:c0:91:32:eb:
                    ed:1e:f3:b4:b4:36:d6:16:c3:0e:37:65:d4:77:2c:
                    d4:1a:1b:99:2d:b4:0d:38:ac:52:7e:3b:88:4a:3e:
                    95:ea:74:da:f3:cf:67:57:01:db:e9:70:2c:0c:c3:
                    43:e5:fe:88:52:a2:2a:3c:c4:b7:5f:82:f1:63:47:
                    da:5d:82:c6:02:83:6c:ee:cc:e1:29:7d:c0:77:bd:
                    ce:00:3c:10:07:03:53:7b:cf:bf:1c:52:e6:18:d6:
                    51:4f:68:bc:48:79:ef:81:27:9e:e2:6d:b7:63:92:
                    70:62:fe:b4:dd:72:3b:27:ad:97:49:ec:74:de:f7:
                    ea:b5:58:31:df:ac:99:a4:b9:fc:7b:91:bd:55:d1:
                    90:10:6c:c8:84:30:77:51:ac:f4:a6:43:b3:dc:0e:
                    7c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BB:EA:4C:A6:99:E5:39:0D:5D:02:EF:F9:4E:30:76:53:69:2B:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/071d5488-c660-3886-a0c6-6dbdfae4d5ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.191.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:8c:37:c2:90:7d:e9:d0:dd:94:31:cd:8b:34:9c:2e:ed:6a:
         9a:4a:e0:84:e6:f6:c2:52:9e:4e:e9:9c:41:da:42:be:28:33:
         6a:32:ed:06:f5:21:79:85:82:72:e1:9d:99:b3:fd:b0:58:11:
         0b:55:03:cd:a3:28:f4:8f:87:4f:52:66:2c:d7:65:b8:23:db:
         53:62:25:e1:c2:0b:2b:8f:ee:b9:71:7c:87:8f:3c:66:fa:d4:
         5a:03:a2:fc:22:99:27:e7:08:6a:c9:2b:f8:23:0a:d6:08:d7:
         2a:21:21:80:da:a0:52:1e:b1:08:fd:ae:47:b4:57:3e:d4:ce:
         a9:13:c0:dc:ca:70:85:82:66:67:20:43:a1:f7:64:df:7b:00:
         2f:84:00:2a:32:a6:73:be:07:f0:03:e7:37:66:5a:48:97:aa:
         9d:8f:84:17:0c:53:4f:04:dd:f6:69:02:4f:18:46:23:d8:3d:
         0e:4a:b8:1c:13:e3:ed:93:06:40:32:ab:20:e0:11:46:f4:bf:
         24:99:8b:d5:c2:09:48:b5:c4:8f:a7:3b:20:d7:56:cd:33:8f:
         0a:b5:9b:70:12:94:6b:d1:e7:a4:8b:48:d7:88:bd:20:b4:68:
         a7:72:3e:9b:a8:55:f2:e1:78:19:e5:2c:4f:bc:c8:c9:a6:f1:
         7f:eb:81:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:30:15 2025 by rpki-client