Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/12eba47b-8995-3746-83f7-5757d9deec6b.roa
File:                     12eba47b-8995-3746-83f7-5757d9deec6b.roa (raw, json)
Hash identifier:          gMUtIX7GOP7pGytXJCkewr4A1fSyS/UpNlUguErJ0Ds=
Subject key identifier:   66:A7:8C:95:09:E0:39:32:BB:25:FE:FF:F3:6A:A0:76:21:D1:D7:21
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C61EBAF8E51BE795BC080
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/12eba47b-8995-3746-83f7-5757d9deec6b.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     15290
IP address blocks:        216.191.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:61:eb:af:8e:51:be:79:5b:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=546bedad-817d-4a06-9f5d-2f11452af163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:01:54:32:92:38:20:02:89:df:bc:77:22:5d:
                    81:43:86:78:b7:16:aa:5d:15:6b:ae:98:c0:4d:d3:
                    c8:7d:38:f3:0f:1f:8d:c3:3b:71:55:1e:d6:6b:64:
                    e1:82:db:12:f2:79:9b:fe:01:27:79:4f:5f:3c:fd:
                    3f:70:a7:89:07:b3:e4:53:22:0a:88:6a:5c:24:1f:
                    76:e2:dd:bd:0a:44:42:5a:57:cb:9e:e2:5c:0b:77:
                    ce:2d:3a:c9:a6:4c:6c:dd:47:dd:04:9c:92:04:7d:
                    6e:d5:fb:8b:2a:1a:5b:bd:d9:11:12:f8:52:1d:9d:
                    53:99:02:eb:be:96:20:9d:79:85:81:80:b9:f1:d7:
                    b7:7d:81:e5:1d:48:ce:50:f6:7b:23:05:05:97:bf:
                    98:eb:c2:ff:3a:37:bc:9c:89:b5:06:8d:c1:cf:6c:
                    cc:0e:4f:f3:bb:5b:95:c2:57:cc:72:42:31:e7:40:
                    92:2c:bc:a2:00:9a:c7:56:25:37:28:00:ff:42:aa:
                    e0:b2:33:c9:84:1b:70:0a:8b:94:1c:f2:a1:1c:66:
                    e5:10:95:2b:8b:20:30:bc:76:48:c1:62:85:89:04:
                    7b:97:a6:1e:b0:b3:c4:0c:7d:d2:e6:e0:ce:0b:97:
                    98:31:0d:a8:3f:a4:4d:c2:e4:ec:e3:17:49:a5:70:
                    83:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A7:8C:95:09:E0:39:32:BB:25:FE:FF:F3:6A:A0:76:21:D1:D7:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/12eba47b-8995-3746-83f7-5757d9deec6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.191.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:80:14:18:30:75:08:17:be:59:90:b5:da:b6:da:c2:c1:e0:
         b4:d5:83:f6:86:ae:c6:6f:70:04:35:00:3e:77:f9:cf:ae:eb:
         13:b9:c0:73:b9:02:59:bd:df:1c:48:da:6c:09:7d:e5:d6:22:
         d8:47:ab:e5:dc:b6:3c:60:e8:00:1e:61:45:ea:d2:c6:b3:3a:
         39:1a:33:8f:35:7f:44:5e:b0:50:2c:e4:fc:10:64:a3:27:50:
         76:ba:1b:e4:12:9f:9c:3e:d9:56:b2:78:3b:db:ea:ef:63:e4:
         35:3b:17:d5:a7:0a:2f:57:2b:31:f9:18:e8:d1:64:69:d5:2a:
         35:3a:3b:f2:92:00:f5:c4:44:05:55:0b:fd:33:9a:5b:cc:c8:
         fd:13:dd:2a:0d:c3:ba:e0:da:33:3e:95:0f:89:bf:02:7f:2c:
         02:12:cd:41:69:2e:8b:72:0a:6f:b9:d2:ef:b1:92:9b:5f:3a:
         8c:6d:d9:0a:dd:b0:a8:07:c2:95:0d:e2:2c:5c:39:f7:3b:b7:
         95:b8:30:2c:ca:b4:a9:30:8e:c1:2c:76:48:93:f6:08:9f:04:
         4b:3f:a8:5d:0b:ad:3d:00:02:e2:55:33:83:a2:3d:ef:5a:33:
         cb:a4:f9:03:6e:3a:e9:b8:91:e0:b0:64:c5:3d:83:01:ee:f9:
         78:3a:b4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:34:46 2025 by rpki-client