Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/109f29cd-c402-3bcd-a8d0-4ff8025e5a8c.roa
File:                     109f29cd-c402-3bcd-a8d0-4ff8025e5a8c.roa (raw, json)
Hash identifier:          /4VcZQMLF7+gMbjvlWTRhovE+dXNr2Old/Prjb7WJTg=
Subject key identifier:   FD:26:3B:95:9D:69:F8:76:04:C7:3E:80:B3:E8:A4:13:3C:D2:6E:18
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C53271142255CEC072180
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/109f29cd-c402-3bcd-a8d0-4ff8025e5a8c.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     15290
IP address blocks:        2001:4c8:1095::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:53:27:11:42:25:5c:ec:07:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=04f547d7-3584-447c-8158-be79f13c3a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:61:47:51:d8:82:89:99:04:8e:7c:9b:ba:4e:
                    0c:95:db:2c:6c:83:ce:66:33:99:01:a6:47:26:b2:
                    57:f9:42:87:db:9e:28:ff:da:08:aa:bd:1e:4c:1e:
                    90:ac:a1:4f:ce:0c:e9:ad:25:fa:54:30:69:2c:50:
                    2b:75:97:9e:92:da:3b:1c:2a:e9:27:ae:a6:05:62:
                    e2:7e:32:bc:d4:96:fd:aa:39:f5:8e:e8:b0:1c:2c:
                    d5:0e:57:34:30:33:e5:12:7b:bb:72:54:69:6a:93:
                    ba:f1:46:eb:a2:a1:24:09:bb:5f:7c:a6:87:e2:ef:
                    70:41:95:1f:75:52:3e:2c:15:2e:b6:32:d1:73:9f:
                    43:2e:07:25:fb:ce:b3:b9:56:9a:e2:bf:b8:59:2c:
                    08:2b:cf:ab:5c:34:82:c2:4e:7b:c1:7f:df:88:48:
                    e7:d6:27:e1:07:9a:1f:e7:a9:cd:dd:7c:e7:bf:ae:
                    b5:ae:e1:b8:82:13:89:21:74:05:df:a1:52:8e:9b:
                    fa:c3:7a:91:7a:e6:73:c7:f0:17:b9:2c:47:0d:04:
                    b3:23:ed:a2:93:3d:c2:c2:e7:1a:3b:c9:a8:17:20:
                    65:70:31:f7:12:90:7b:30:fc:9a:6a:83:6b:ea:be:
                    f3:f7:af:1e:8b:f9:da:29:da:b7:d1:04:76:aa:8b:
                    56:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:26:3B:95:9D:69:F8:76:04:C7:3E:80:B3:E8:A4:13:3C:D2:6E:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/109f29cd-c402-3bcd-a8d0-4ff8025e5a8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1095::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:17:ac:ea:c4:80:82:0c:1a:61:d5:1e:e5:9d:95:a1:77:79:
         44:26:45:c1:38:e0:be:79:0a:02:83:d2:15:67:da:5e:a5:f1:
         f2:62:f0:9e:21:59:06:0c:90:34:7c:27:ec:42:7c:c1:38:f8:
         25:28:fe:05:1e:43:e3:7a:e0:15:bf:0e:38:f1:51:4b:20:2a:
         65:14:16:1e:e3:bf:80:0f:4d:05:06:b6:13:c8:b2:84:35:65:
         77:3a:a5:a3:f8:fb:d9:f6:3e:4f:34:f8:6e:3e:cd:27:f6:c5:
         c7:e5:d8:b3:9e:62:0a:a3:aa:fe:c1:c0:24:6b:ec:46:cc:e6:
         69:21:7c:ed:c8:34:45:0a:4d:65:a4:18:22:97:1e:36:b9:e0:
         96:ae:cc:54:e3:29:a9:18:49:70:48:7c:f5:ac:7c:2f:5b:b6:
         68:87:4b:6a:68:d9:f3:60:7e:3a:8b:fc:82:ef:35:28:ba:d4:
         af:dd:b4:c6:63:49:68:74:a5:f2:ab:b2:27:34:2c:60:b0:56:
         d2:a4:da:65:16:f2:22:96:3f:1f:15:2c:69:31:f3:eb:43:df:
         06:59:2c:04:81:4c:9b:6c:7f:fc:86:13:14:93:65:4e:8e:48:
         33:6c:ea:07:36:8e:fc:55:e7:93:e3:4c:88:3e:dd:26:3c:88:
         e1:09:4e:8b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsqLFMnEUIlXOwHIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk
MDRmNTQ3ZDctMzU4NC00NDdjLTgxNTgtYmU3OWYxM2MzYTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2FHUdiCiZkEjnybuk4MldssbIPOZjOZAaZH
JrJX+UKH254o/9oIqr0eTB6QrKFPzgzprSX6VDBpLFArdZeekto7HCrpJ66mBWLi
fjK81Jb9qjn1juiwHCzVDlc0MDPlEnu7clRpapO68UbroqEkCbtffKaH4u9wQZUf
dVI+LBUutjLRc59DLgcl+86zuVaa4r+4WSwIK8+rXDSCwk57wX/fiEjn1ifhB5of
56nN3Xznv661ruG4ghOJIXQF36FSjpv6w3qReuZzx/AXuSxHDQSzI+2ikz3Cwuca
O8moFyBlcDH3EpB7MPyaaoNr6r7z968ei/naKdq30QR2qotWPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP0mO5Wdafh2BMc+gLPopBM80m4YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvMTA5ZjI5Y2QtYzQwMi0z
YmNkLWE4ZDAtNGZmODAyNWU1YThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEyBCV
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABkXrOrEgIIMGmHVHuWdlaF3eUQmRcE44L55CgKD0hVn2l6l8fJi
8J4hWQYMkDR8J+xCfME4+CUo/gUeQ+N64BW/DjjxUUsgKmUUFh7jv4APTQUGthPI
soQ1ZXc6paP4+9n2Pk80+G4+zSf2xcfl2LOeYgqjqv7BwCRr7EbM5mkhfO3INEUK
TWWkGCKXHja54JauzFTjKakYSXBIfPWsfC9btmiHS2po2fNgfjqL/ILvNSi61K/d
tMZjSWh0pfKrsic0LGCwVtKk2mUW8iKWPx8VLGkx8+tD3wZZLASBTJtsf/yGExST
ZU6OSDNs6gc2jvxV55PjTIg+3SY8iOEJTos=
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:27:23 2025 by rpki-client